$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa File: a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa (raw, json) Hash identifier: /QuqcSeYkEL3CAAxe0BicGwz8iRdq3cYMe0Tn9Gjy8s= Subject key identifier: B9:5C:16:79:2A:D5:8A:3B:FF:3E:E6:FC:99:6B:C8:20:6F:AB:D6:15 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0FCBF4D8FDFB313ECD3510CD5318B4E41A02091A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa Signing time: Sun 17 May 2026 01:50:34 +0000 ROA not before: Sun 17 May 2026 01:50:34 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:cb:f4:d8:fd:fb:31:3e:cd:35:10:cd:53:18:b4:e4:1a:02:09:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 17 01:50:34 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=2ffe1e2490d0fd072d2c99a3c677224ffbd6947d11d7d71ec8dbd8ebd7435ace, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:f3:50:10:e6:ee:b4:8c:7a:d9:74:5e:5a: a3:dc:bc:15:c5:74:d0:d8:f4:5e:99:3f:ca:ad:69: 63:ee:4c:a7:fd:8c:b3:b0:34:d8:19:ab:4b:4e:d6: f1:3a:92:13:a9:4f:24:8c:01:7b:cd:5d:d1:72:06: f6:b3:2a:fa:5e:31:a9:c9:25:65:39:eb:55:d7:75: d0:31:26:2f:09:b0:10:20:d6:25:bc:37:50:ee:38: 18:68:0e:f7:bd:04:17:34:be:c6:b4:a2:7a:b9:e7: 21:b9:ac:03:40:5c:db:39:5a:e0:43:df:7d:d8:82: 80:c0:b2:83:2e:e4:e9:06:38:4c:a8:80:17:bd:55: 82:a9:12:fe:e1:08:3b:59:bb:f0:0d:fc:71:e1:62: 4b:6c:82:7f:69:bb:90:38:ee:84:27:2d:fc:56:fc: 04:e4:fe:39:57:20:2b:06:cc:86:69:08:74:dd:d6: 2d:7e:b1:d0:25:86:76:cd:4c:39:9e:6e:3a:34:04: 70:8b:7d:d4:93:55:8d:2a:a3:7c:d4:a9:9b:34:f0: ad:bf:26:08:dd:bc:f7:e9:1c:ff:11:cc:cd:95:70: b9:f7:8e:d7:0c:da:ca:49:d2:6d:6e:8c:30:c7:3f: 20:a5:4d:c5:e4:92:ca:99:a7:b1:e9:79:30:6b:1f: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5C:16:79:2A:D5:8A:3B:FF:3E:E6:FC:99:6B:C8:20:6F:AB:D6:15 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 95:d3:45:87:b4:a2:a8:2b:1b:78:6f:7c:65:e3:88:5c:67:06: 48:6b:20:49:ca:a9:41:ff:97:74:fc:55:4e:3f:b4:d8:66:65: de:21:18:ae:2a:3b:42:cd:e0:f9:1d:47:18:25:dd:41:df:40: 9c:a8:4f:57:cf:2b:cf:26:40:f8:c3:cc:db:ba:3d:15:4f:00: cf:cd:c0:6c:14:ec:a5:3d:a0:01:35:7c:05:4b:1e:92:04:be: ab:24:50:e2:4c:c6:71:7e:8e:f1:78:3a:00:a5:93:1f:b2:f1: 8c:96:0e:7e:1e:a7:c4:90:c8:eb:77:9b:d6:96:7c:da:38:59: f6:ed:8c:5a:4a:63:37:c2:a9:82:9b:e1:68:d5:8f:d7:2d:00: 3a:8f:a3:0d:88:76:e8:d3:c5:54:ec:b5:db:99:0c:2a:0d:5c: 4a:50:22:46:c7:68:0e:c5:8d:2e:e9:8a:76:0a:68:96:fd:94: 1a:ce:39:34:a6:d9:23:9d:14:f1:b2:57:01:ef:b1:12:70:b2: 25:08:d2:d6:da:6d:bd:c8:67:96:0f:46:87:f2:d2:2b:71:ef: d9:d3:f1:8c:09:40:00:81:9c:d6:a0:c8:9e:db:a7:19:b1:c6: 5c:96:4c:f6:16:5c:1e:43:02:c2:c0:e7:ba:21:77:1b:d9:2c: 90:cd:12:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD8v02P37MT7NNRDNUxi05BoCCRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE3MDE1MDM0WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmZlMWUyNDkwZDBmZDA3MmQyYzk5YTNjNjc3MjI0ZmZi ZDY5NDdkMTFkN2Q3MWVjOGRiZDhlYmQ3NDM1YWNlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJR/NQEObutIx62XReWqPcvBXFdNDY9F6ZP8qtaWPuTKf9 jLOwNNgZq0tO1vE6khOpTySMAXvNXdFyBvazKvpeManJJWU561XXddAxJi8JsBAg 1iW8N1DuOBhoDve9BBc0vsa0onq55yG5rANAXNs5WuBD333YgoDAsoMu5OkGOEyo gBe9VYKpEv7hCDtZu/AN/HHhYktsgn9pu5A47oQnLfxW/ATk/jlXICsGzIZpCHTd 1i1+sdAlhnbNTDmebjo0BHCLfdSTVY0qo3zUqZs08K2/JgjdvPfpHP8RzM2VcLn3 jtcM2spJ0m1ujDDHPyClTcXkksqZp7HpeTBrH1IpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuVwWeSrVijv/Pub8mWvIIG+r1hUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E3ZjZlMGFjLTgxMGEtNGU0MC1hMjg2LWQwNTM5N2ExM2U0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAJXTRYe0oqgrG3hvfGXjiFxnBkhr IEnKqUH/l3T8VU4/tNhmZd4hGK4qO0LN4PkdRxgl3UHfQJyoT1fPK88mQPjDzNu6 PRVPAM/NwGwU7KU9oAE1fAVLHpIEvqskUOJMxnF+jvF4OgClkx+y8YyWDn4ep8SQ yOt3m9aWfNo4WfbtjFpKYzfCqYKb4WjVj9ctADqPow2IdujTxVTstduZDCoNXEpQ IkbHaA7FjS7pinYKaJb9lBrOOTSm2SOdFPGyVwHvsRJwsiUI0tbabb3IZ5YPRofy 0itx79nT8YwJQACBnNagyJ7bpxmxxlyWTPYWXB5DAsLA57ohdxvZLJDNEpg= -----END CERTIFICATE-----Generated at Sat Jun 13 06:43:45 2026 by rpki-client