$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa File: a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa (raw, json) Hash identifier: i6ac/1PHyhr4h1Dk7qPNl3ZMx+cUFOpJzzfg6AuSsQE= Subject key identifier: B0:73:0F:1A:12:DA:62:09:EC:C0:72:C2:61:2C:68:64:AC:29:49:8B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 12D3C266515B040DEDBD0A3A8F310C5EFA5D1899 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa Signing time: Sun 17 May 2026 01:50:07 +0000 ROA not before: Sun 17 May 2026 01:50:07 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d3:c2:66:51:5b:04:0d:ed:bd:0a:3a:8f:31:0c:5e:fa:5d:18:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 17 01:50:07 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=a4a6bf8bc1e55d7984381ea45e548c37dbfbc3877ea0f8febff0f2cbad5457de, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:45:9e:4c:87:1e:c2:2d:5b:55:87:d3:9a: fd:96:96:f4:74:af:1f:3f:1e:4c:b2:06:7e:2e:ee: cd:97:7e:1d:cd:15:06:cd:3c:2e:04:83:38:8f:de: f7:55:7b:53:3d:9d:c2:3b:14:98:ae:29:22:15:91: e9:d3:8b:a4:9a:a2:b3:4d:83:73:d8:90:06:d1:a6: 35:12:e9:c9:77:39:02:3f:39:ec:01:7c:5d:3a:bc: 6d:dc:0b:ff:a2:10:19:f8:03:64:e9:9f:66:ee:96: df:e7:bb:88:b9:e5:fe:92:62:d2:91:15:61:5c:dd: d3:ea:04:6f:bb:45:24:d6:32:c6:e6:c2:f6:ed:92: 57:95:d7:f5:bd:4f:0e:74:e3:53:c4:82:67:e7:f1: 11:a6:8a:db:74:40:9c:b2:c3:5f:b2:aa:a9:74:08: 4d:c9:0a:68:49:f0:2e:5a:ff:88:c2:d6:45:0e:d0: fa:e2:25:36:97:2f:0d:1b:d1:84:7d:87:97:b7:a7: 4e:a2:cd:32:25:b9:28:26:54:b2:61:f5:cc:54:8d: 25:ca:a2:99:9f:86:4b:42:6d:ad:09:8a:fb:17:e4: eb:35:d3:a8:bd:46:6d:e6:06:6c:c0:3b:90:2e:04: 8b:09:07:a7:a0:2b:da:44:8a:bd:a7:dc:ae:44:e5: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:73:0F:1A:12:DA:62:09:EC:C0:72:C2:61:2C:68:64:AC:29:49:8B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:8e:9c:ee:68:b5:1e:cd:f4:7d:ae:f4:4f:aa:fd:49:ef:8b: 69:b3:ff:4c:33:79:ba:e1:e1:b1:26:42:a7:7e:a9:0c:3b:54: 42:9f:5e:1a:00:14:9c:78:9c:9f:91:37:04:f6:c3:ee:74:52: 40:a2:7e:7c:73:6e:de:61:69:75:ee:21:79:77:e4:97:da:71: 84:36:30:5b:5a:6f:08:8a:c3:b5:9e:65:44:d1:1b:ab:74:46: 9c:44:82:67:28:0e:13:94:45:6d:30:22:8d:02:09:7b:a8:22: c6:73:28:30:a4:eb:be:c8:5f:99:78:56:8f:ad:a5:00:a8:44: 77:4c:fd:d8:f9:d1:fe:a6:8d:51:a4:0a:97:a6:64:a7:fb:7d: a7:d6:c2:1a:bd:f1:6f:fc:a6:94:a5:35:43:e4:b7:65:00:ee: cc:f1:2e:dd:9f:27:a8:23:2e:c8:19:54:43:d8:72:54:13:1c: 94:e2:38:11:63:ae:02:ac:89:03:eb:1e:84:f4:fb:26:64:75: 7e:c0:96:a4:cf:10:95:d6:36:f6:30:13:42:d7:a0:59:61:06: 79:8a:2e:54:70:1e:2f:aa:d6:13:94:61:a5:8f:71:9e:00:f3: 5b:6f:4c:a7:f0:48:4d:a4:55:e4:62:19:df:22:93:80:a6:c6: bf:9b:50:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEtPCZlFbBA3tvQo6jzEMXvpdGJkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE3MDE1MDA3WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNGE2YmY4YmMxZTU1ZDc5ODQzODFlYTQ1ZTU0OGMzN2Ri ZmJjMzg3N2VhMGY4ZmViZmYwZjJjYmFkNTQ1N2RlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+FkWeTIcewi1bVYfTmv2WlvR0rx8/HkyyBn4u7s2Xfh3N FQbNPC4EgziP3vdVe1M9ncI7FJiuKSIVkenTi6SaorNNg3PYkAbRpjUS6cl3OQI/ OewBfF06vG3cC/+iEBn4A2Tpn2bult/nu4i55f6SYtKRFWFc3dPqBG+7RSTWMsbm wvbtkleV1/W9Tw5041PEgmfn8RGmitt0QJyyw1+yqql0CE3JCmhJ8C5a/4jC1kUO 0PriJTaXLw0b0YR9h5e3p06izTIluSgmVLJh9cxUjSXKopmfhktCba0JivsX5Os1 06i9Rm3mBmzAO5AuBIsJB6egK9pEir2n3K5E5Yw/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsHMPGhLaYgnswHLCYSxoZKwpSYswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E3MmViYjk5LWFlY2UtNDlhYS05ZjI5LTFmMDI4NmI4NGY0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBAEuOnO5otR7N9H2u9E+q/Unvi2mz /0wzebrh4bEmQqd+qQw7VEKfXhoAFJx4nJ+RNwT2w+50UkCifnxzbt5haXXuIXl3 5JfacYQ2MFtabwiKw7WeZUTRG6t0RpxEgmcoDhOURW0wIo0CCXuoIsZzKDCk677I X5l4Vo+tpQCoRHdM/dj50f6mjVGkCpemZKf7fafWwhq98W/8ppSlNUPkt2UA7szx Lt2fJ6gjLsgZVEPYclQTHJTiOBFjrgKsiQPrHoT0+yZkdX7AlqTPEJXWNvYwE0LX oFlhBnmKLlRwHi+q1hOUYaWPcZ4A81tvTKfwSE2kVeRiGd8ik4Cmxr+bUNk= -----END CERTIFICATE-----Generated at Sat Jun 13 06:47:05 2026 by rpki-client