$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/aae1c6ad-c149-4b71-85c3-b12dbb8e80f2.roa File: aae1c6ad-c149-4b71-85c3-b12dbb8e80f2.roa (raw, json) Hash identifier: nCStTBwf45Xifgej0aKJNUtBRJPYG3arpDD2IHD/3Iw= Subject key identifier: CF:C4:CF:A4:1C:E1:45:9D:ED:54:4C:7D:3B:FF:DE:88:08:A5:DD:37 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 532C784FA61F75F025F91626C94C8C6FF18D12CA Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/aae1c6ad-c149-4b71-85c3-b12dbb8e80f2.roa Signing time: Tue 19 May 2026 04:00:09 +0000 ROA not before: Tue 19 May 2026 04:00:09 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2c:78:4f:a6:1f:75:f0:25:f9:16:26:c9:4c:8c:6f:f1:8d:12:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 19 04:00:09 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=e8176c7123513952531187a3fb19e1302846e2e82dbbf2499ea3d094c32a79cd, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:d0:06:0b:79:76:aa:2a:e2:ed:6b:31:23: 11:7e:f6:d3:7d:47:c0:d1:a1:4d:b3:0f:33:03:3d: d2:a6:1a:79:d6:fe:33:d6:c7:35:20:41:06:71:1f: bd:67:24:66:14:5e:36:df:28:c9:04:a9:15:d4:78: e6:d5:9c:44:f1:7c:7d:26:bc:8f:be:fb:1d:38:16: ad:43:93:89:df:fd:de:4f:2e:97:37:d7:b8:39:95: 02:6a:99:ed:10:e9:9c:15:0f:50:b5:52:1e:75:2c: 8b:0a:a3:c0:83:9e:2f:dd:3c:49:64:a4:7a:ad:39: 47:46:4b:04:68:44:25:3b:91:71:0d:f9:b3:11:34: 87:a4:db:43:bf:e5:9f:42:fc:2d:27:35:10:68:a2: 2d:c0:f2:0a:2b:8b:de:70:71:73:a2:15:2f:c8:21: 0b:29:5b:eb:85:18:d4:43:85:b7:73:fb:02:1c:2f: 8f:8a:a1:5f:47:03:ee:4a:8e:1b:d1:2a:72:76:60: b0:a5:1e:8d:60:bb:b5:a0:97:f8:ec:32:d1:90:fc: c3:ac:70:2b:48:17:34:fb:c3:fb:53:d0:79:63:97: ba:b6:6c:f6:9c:8e:45:c0:a5:f3:00:11:97:55:e4: a6:af:a7:57:a4:7f:ce:2f:1e:59:9b:1c:45:7d:a7: 0c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C4:CF:A4:1C:E1:45:9D:ED:54:4C:7D:3B:FF:DE:88:08:A5:DD:37 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/aae1c6ad-c149-4b71-85c3-b12dbb8e80f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.46.0/24 Signature Algorithm: sha256WithRSAEncryption 39:6b:fc:f1:37:c8:40:6d:83:8e:39:36:d6:81:d5:df:a0:bb: 74:95:d9:37:ef:04:4f:cb:21:5d:ec:ef:5e:b5:7f:50:9b:6f: ae:d2:d4:73:a1:b1:68:2a:a9:97:b0:77:95:5c:37:30:c9:f8: 61:22:5c:9e:e1:29:80:36:a9:eb:a9:c3:a3:30:cf:81:e1:a5: 6a:cd:15:66:d9:50:8c:fc:94:ca:82:7e:61:d2:a8:09:1b:e0: 27:84:6d:57:88:c0:09:53:4b:e2:19:99:82:8f:ae:90:e5:19: 4f:c5:ec:8c:3c:4e:7b:1f:62:a6:06:88:c7:19:19:cd:70:9f: 33:67:a7:75:90:96:b6:0c:4a:9c:c1:63:56:98:56:11:d7:32: e0:68:aa:ce:df:2a:d9:de:3e:cd:6b:49:ca:11:ea:7d:01:9f: 1b:fb:8f:73:6a:3a:4e:1f:41:1f:34:b8:a2:24:26:66:01:b8: 96:c6:be:8a:4b:09:e0:72:f6:a9:38:68:ab:19:93:3c:31:d2: 94:02:79:22:5d:e7:07:d1:2c:2d:b8:f8:45:ee:23:dd:62:ba: ab:46:e2:4c:1c:2a:28:9e:33:29:fe:96:bf:14:e7:c3:07:6b: ce:f3:f5:e5:34:44:b3:85:a4:2e:de:84:38:ec:34:0e:73:45: 95:cc:ae:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUyx4T6YfdfAl+RYmyUyMb/GNEsowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE5MDQwMDA5WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODE3NmM3MTIzNTEzOTUyNTMxMTg3YTNmYjE5ZTEzMDI4 NDZlMmU4MmRiYmYyNDk5ZWEzZDA5NGMzMmE3OWNkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFU9AGC3l2qiri7WsxIxF+9tN9R8DRoU2zDzMDPdKmGnnW /jPWxzUgQQZxH71nJGYUXjbfKMkEqRXUeObVnETxfH0mvI+++x04Fq1Dk4nf/d5P Lpc317g5lQJqme0Q6ZwVD1C1Uh51LIsKo8CDni/dPElkpHqtOUdGSwRoRCU7kXEN +bMRNIek20O/5Z9C/C0nNRBooi3A8gori95wcXOiFS/IIQspW+uFGNRDhbdz+wIc L4+KoV9HA+5KjhvRKnJ2YLClHo1gu7Wgl/jsMtGQ/MOscCtIFzT7w/tT0Hljl7q2 bPacjkXApfMAEZdV5Kavp1ekf84vHlmbHEV9pwy1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz8TPpBzhRZ3tVEx9O//eiAil3TcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FhZTFjNmFkLWMxNDktNGI3MS04NWMzLWIxMmRiYjhlODBmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC4wDQYJKoZIhvcNAQELBQADggEBADlr/PE3yEBtg445NtaB1d+gu3SV 2TfvBE/LIV3s7161f1Cbb67S1HOhsWgqqZewd5VcNzDJ+GEiXJ7hKYA2qeupw6Mw z4HhpWrNFWbZUIz8lMqCfmHSqAkb4CeEbVeIwAlTS+IZmYKPrpDlGU/F7Iw8Tnsf YqYGiMcZGc1wnzNnp3WQlrYMSpzBY1aYVhHXMuBoqs7fKtnePs1rScoR6n0Bnxv7 j3NqOk4fQR80uKIkJmYBuJbGvopLCeBy9qk4aKsZkzwx0pQCeSJd5wfRLC24+EXu I91iuqtG4kwcKiieMyn+lr8U58MHa87z9eU0RLOFpC7ehDjsNA5zRZXMrq4= -----END CERTIFICATE-----Generated at Sat Jun 13 05:43:45 2026 by rpki-client