$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa File: a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa (raw, json) Hash identifier: zHYQryQMkmNrrmWc0b3LleJeDsiK7oekO40S1HNvVho= Subject key identifier: 82:79:38:30:E3:C2:4C:86:F9:25:42:36:FB:D3:81:26:F2:1B:B5:06 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4DAE1C5619625CFF675589191BAE8B5753E2B1FE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa Signing time: Thu 26 Feb 2026 01:50:31 +0000 ROA not before: Thu 26 Feb 2026 01:50:31 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ae:1c:56:19:62:5c:ff:67:55:89:19:1b:ae:8b:57:53:e2:b1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 26 01:50:31 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=5d3d5f9fffc732e5a1edd0c1d42e4a0a28ae15d82430e0bada37852910c6ca82, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:5b:46:ad:4d:11:f2:51:c7:8f:c4:29:ae: ec:e1:67:86:83:8d:ca:f4:25:76:f5:11:f6:60:d8: 76:8f:5d:16:1d:8c:90:96:54:49:28:94:9f:dc:93: 6d:fb:7a:7a:20:f1:37:ed:f3:79:b0:58:35:fc:75: 34:7a:03:8b:0c:d1:6c:9c:6a:ee:e7:19:27:4b:59: 29:23:14:34:95:58:e3:e2:37:ca:6d:46:b5:c4:af: 42:f9:0d:0b:a9:ba:b3:fb:84:6b:80:b9:2f:34:a9: b2:54:57:e9:e9:89:8f:87:6f:5c:16:32:78:b7:ae: fb:1b:2e:e3:c5:85:8d:3d:e1:31:28:48:34:6d:82: df:ff:0f:2c:37:af:6c:f3:93:b8:e9:d0:db:c6:1a: 6a:18:2c:c0:0a:e3:ca:f2:03:2b:5a:67:c0:78:f8: 4d:9b:cb:80:f4:31:4a:8d:7f:48:de:33:c3:94:6b: c3:b7:0c:5b:e3:9b:d6:85:24:00:ba:8e:ee:1c:af: 60:71:93:cb:5d:a7:3f:c2:38:52:a2:c7:6c:86:7f: f5:48:ad:c3:6e:c8:d2:fd:da:60:aa:04:81:1d:c1: 20:0e:ac:74:f1:38:9e:78:8c:8a:95:44:88:00:85: 2d:ab:f6:cb:55:fe:9d:53:59:e6:19:3a:29:06:93: 08:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:79:38:30:E3:C2:4C:86:F9:25:42:36:FB:D3:81:26:F2:1B:B5:06 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 65:40:78:c2:a5:58:93:81:ba:6d:c9:b8:30:c8:29:41:90:be: ed:4c:05:2f:2e:8d:ca:dd:85:ae:bb:67:16:76:2d:94:3c:74: d5:c8:78:4f:f3:e8:d0:9d:4a:8c:84:3f:d5:fb:0b:bf:14:5b: c9:29:6e:16:42:29:8d:d5:34:34:93:bb:34:f2:2c:48:a1:18: 55:fa:f7:8b:bb:d5:4d:e4:1b:6c:7c:ba:4a:59:b7:f1:89:7a: 61:87:48:2f:61:fa:b1:61:e0:b7:a0:38:a9:84:9c:18:0f:57: ed:c5:c3:46:56:68:a0:fc:03:88:2b:72:7a:39:dd:12:67:6d: ec:d4:7f:b9:53:41:b4:e4:46:27:4b:a2:ea:4c:56:a6:82:3d: 5d:16:e2:73:a9:f7:11:55:9c:8b:f0:23:09:f5:69:1e:ee:51: 80:57:27:ee:b2:6c:32:27:d3:cb:bf:e2:4c:85:13:f6:83:12: 39:c8:93:33:2e:0c:06:69:2d:13:a5:38:89:df:a6:a3:72:b6: 12:33:e1:29:58:f0:ba:43:86:78:9b:d6:ac:4e:b3:a7:d5:c4: bf:83:70:08:52:f6:14:d3:86:f1:34:ad:b9:62:36:bd:83:7b: 9a:f2:b4:65:d4:b1:59:68:04:cc:0c:27:fe:74:b4:d7:57:21: c7:7f:ae:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTa4cVhliXP9nVYkZG66LV1Pisf4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI2MDE1MDMxWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDNkNWY5ZmZmYzczMmU1YTFlZGQwYzFkNDJlNGEwYTI4 YWUxNWQ4MjQzMGUwYmFkYTM3ODUyOTEwYzZjYTgyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4RVtGrU0R8lHHj8QpruzhZ4aDjcr0JXb1EfZg2HaPXRYd jJCWVEkolJ/ck237enog8Tft83mwWDX8dTR6A4sM0Wycau7nGSdLWSkjFDSVWOPi N8ptRrXEr0L5DQupurP7hGuAuS80qbJUV+npiY+Hb1wWMni3rvsbLuPFhY094TEo SDRtgt//Dyw3r2zzk7jp0NvGGmoYLMAK48ryAytaZ8B4+E2by4D0MUqNf0jeM8OU a8O3DFvjm9aFJAC6ju4cr2Bxk8tdpz/COFKix2yGf/VIrcNuyNL92mCqBIEdwSAO rHTxOJ54jIqVRIgAhS2r9stV/p1TWeYZOikGkwg3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgnk4MOPCTIb5JUI2+9OBJvIbtQYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E3ZjZlMGFjLTgxMGEtNGU0MC1hMjg2LWQwNTM5N2ExM2U0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAGVAeMKlWJOBum3JuDDIKUGQvu1M BS8ujcrdha67ZxZ2LZQ8dNXIeE/z6NCdSoyEP9X7C78UW8kpbhZCKY3VNDSTuzTy LEihGFX694u71U3kG2x8ukpZt/GJemGHSC9h+rFh4LegOKmEnBgPV+3Fw0ZWaKD8 A4grcno53RJnbezUf7lTQbTkRidLoupMVqaCPV0W4nOp9xFVnIvwIwn1aR7uUYBX J+6ybDIn08u/4kyFE/aDEjnIkzMuDAZpLROlOInfpqNythIz4SlY8LpDhnib1qxO s6fVxL+DcAhS9hTThvE0rbliNr2De5rytGXUsVloBMwMJ/50tNdXIcd/rl0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:49:44 2026 by rpki-client