$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a541c4d2-1c45-48f2-9c5e-be1aa414666f.roa File: a541c4d2-1c45-48f2-9c5e-be1aa414666f.roa (raw, json) Hash identifier: who8I6sdPCCQGcoTYN2habJoIuqziBl+yAHhOwdmDBM= Subject key identifier: 8B:70:87:BA:ED:0C:EA:5D:2E:45:99:0D:53:67:31:A5:80:86:D2:B0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 20D705179D7FAD0A6A5E6DB7ED61ADF4A500AE3D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a541c4d2-1c45-48f2-9c5e-be1aa414666f.roa Signing time: Sat 24 Oct 2026 02:03:01 +0000 ROA not before: Sat 24 Oct 2026 02:03:01 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d7:05:17:9d:7f:ad:0a:6a:5e:6d:b7:ed:61:ad:f4:a5:00:ae:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 02:03:01 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=a08df3002fa618dbcf37cebb837eedd798a7575cdbee4ef747bc8437a2f86c2f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:85:ed:0e:2b:11:f4:c7:6a:1b:50:12:94:0a: b5:43:17:43:cf:07:f5:41:8c:ef:48:de:dc:a6:a9: e9:d0:ab:e3:c1:88:95:81:d3:44:3a:b7:9e:03:e6: 52:91:71:92:14:db:cb:04:68:be:4c:54:04:81:62: b5:44:c2:f3:d8:d0:ef:65:e4:52:18:ee:29:57:0e: 76:0a:42:a1:73:09:f1:a1:74:53:a9:56:84:36:6e: 73:31:4b:f5:8a:85:77:c2:96:02:ed:be:a7:22:2d: 19:94:06:28:c3:b0:a3:de:94:1d:51:be:e3:00:b2: e0:b7:f3:53:f7:1b:48:66:69:e4:aa:cc:47:11:d8: a3:35:b2:03:53:4d:60:54:b0:cf:0a:59:f9:f0:3b: ee:19:d9:3c:a6:fc:4c:69:5b:c3:dd:73:c0:ed:65: 06:64:79:e5:33:1f:61:63:a4:22:dd:2c:b9:ea:1d: d0:f7:df:77:d6:bc:6e:17:53:c2:ef:13:95:88:cd: 5f:59:31:66:c7:90:d6:2a:17:47:66:3a:4c:db:88: 5c:89:ea:7a:9f:7b:3e:d6:a1:83:bc:22:0f:a3:a2: db:1a:bd:02:2f:d1:0a:9e:f6:43:34:c6:7d:01:2d: 2d:22:db:5d:97:73:72:79:ed:95:63:fc:7a:cd:53: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:70:87:BA:ED:0C:EA:5D:2E:45:99:0D:53:67:31:A5:80:86:D2:B0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a541c4d2-1c45-48f2-9c5e-be1aa414666f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.36.0/24 Signature Algorithm: sha256WithRSAEncryption 52:51:61:48:da:e3:f4:50:24:ab:d6:45:22:2d:c5:3b:5e:f8: bc:76:69:59:35:66:4a:d6:96:7c:cb:08:ad:33:f9:18:9f:8d: 9e:49:56:ff:f3:c8:25:12:08:49:04:d1:a0:99:53:f1:31:1b: 5b:ca:ff:6b:71:b6:85:cb:16:1c:0d:cd:db:57:e6:29:b1:8e: 94:ee:2b:b6:8f:85:4d:5f:76:13:32:9f:08:79:ff:40:6a:ee: d3:cd:84:f1:ca:a4:6a:0f:34:73:5e:c5:e8:be:3d:0a:fe:39: ab:d4:21:6c:be:c9:29:84:87:9a:20:17:b2:62:2f:b4:31:fc: 3a:f1:29:fc:56:0d:ee:fa:96:e2:64:d4:57:53:df:32:91:bf: 1c:5a:74:87:48:77:a7:7c:01:8c:62:38:80:2a:68:d6:ea:44: d4:a3:0f:be:45:d7:03:98:5a:9a:ba:37:fb:9c:b3:a9:c8:0a: 1f:aa:66:9a:c1:5c:d6:6a:27:2b:fc:f5:29:48:d2:16:a6:b7: 03:e8:a0:ca:17:f5:53:aa:29:d9:14:51:ae:7f:25:3d:0f:1c: 82:55:4d:d5:3a:a9:26:4e:fa:e6:64:c8:59:4e:b8:16:49:10: ea:57:2f:bb:d2:23:6f:64:1f:f8:df:e9:3b:4f:92:5e:50:0a: 32:dd:dd:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUINcFF51/rQpqXm237WGt9KUArj0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDIwMzAxWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDhkZjMwMDJmYTYxOGRiY2YzN2NlYmI4MzdlZWRkNzk4 YTc1NzVjZGJlZTRlZjc0N2JjODQzN2EyZjg2YzJmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRhe0OKxH0x2obUBKUCrVDF0PPB/VBjO9I3tymqenQq+PB iJWB00Q6t54D5lKRcZIU28sEaL5MVASBYrVEwvPY0O9l5FIY7ilXDnYKQqFzCfGh dFOpVoQ2bnMxS/WKhXfClgLtvqciLRmUBijDsKPelB1RvuMAsuC381P3G0hmaeSq zEcR2KM1sgNTTWBUsM8KWfnwO+4Z2Tym/ExpW8Pdc8DtZQZkeeUzH2FjpCLdLLnq HdD333fWvG4XU8LvE5WIzV9ZMWbHkNYqF0dmOkzbiFyJ6nqfez7WoYO8Ig+jotsa vQIv0Qqe9kM0xn0BLS0i212Xc3J57ZVj/HrNUx6/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi3CHuu0M6l0uRZkNU2cxpYCG0rAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E1NDFjNGQyLTFjNDUtNDhmMi05YzVlLWJlMWFhNDE0NjY2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBAFJRYUja4/RQJKvWRSItxTte+Lx2 aVk1ZkrWlnzLCK0z+RifjZ5JVv/zyCUSCEkE0aCZU/ExG1vK/2txtoXLFhwNzdtX 5imxjpTuK7aPhU1fdhMynwh5/0Bq7tPNhPHKpGoPNHNexei+PQr+OavUIWy+ySmE h5ogF7JiL7Qx/DrxKfxWDe76luJk1FdT3zKRvxxadIdId6d8AYxiOIAqaNbqRNSj D75F1wOYWpq6N/ucs6nICh+qZprBXNZqJyv89SlI0hamtwPooMoX9VOqKdkUUa5/ JT0PHIJVTdU6qSZO+uZkyFlOuBZJEOpXL7vSI29kH/jf6TtPkl5QCjLd3TY= -----END CERTIFICATE-----Generated at Sun Nov 15 21:43:19 2026 by rpki-client