$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa File: ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa (raw, json) Hash identifier: stj0WuqD9WrEFSg4iRdk06R2uIVw6HyLhgvzWUyv1t0= Subject key identifier: 9D:FA:CE:DA:EA:04:D4:95:4B:08:D1:03:D0:30:3E:0A:AF:4B:5F:DB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6C0E235C36CC5C9FD21F8D12859C108D057C7700 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa Signing time: Tue 17 Feb 2026 02:50:13 +0000 ROA not before: Tue 17 Feb 2026 02:50:13 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0e:23:5c:36:cc:5c:9f:d2:1f:8d:12:85:9c:10:8d:05:7c:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 17 02:50:13 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=e7bae452bd5f936f2f50e76fd65ec97d6530c690cf46df46f86b742d45c55387, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:5b:a7:75:d6:17:a1:dd:c8:08:2f:e3:0a: 6d:bf:0d:f8:58:31:c5:dd:a2:11:5b:84:30:9f:d9: 21:82:07:af:8e:e2:91:0f:34:dc:88:71:3e:c6:66: 2d:c8:40:21:22:81:98:43:11:06:ec:21:c1:3e:f9: d7:85:42:34:f3:e9:7a:77:b5:d3:40:f9:49:8d:6d: 14:f9:ca:c6:ab:79:c4:3c:7b:06:99:de:c8:f9:f8: 05:a3:82:5e:0c:f1:5a:97:68:96:30:99:71:cd:de: d1:f6:1b:68:81:2b:1e:55:af:7f:93:07:23:d1:17: 87:fb:b1:7d:e7:55:67:e5:31:9d:e5:55:86:74:fe: 03:ed:d9:67:60:5c:37:bb:e8:b9:c5:43:2f:e7:96: 6b:0d:b3:c6:87:d8:3f:cd:ea:67:53:30:2e:22:7d: 95:2c:5c:b2:27:0c:93:15:dc:e8:58:b9:e6:ce:dc: 93:d4:4e:69:11:78:e3:ae:94:07:ab:89:0e:12:a3: d5:83:a5:56:6d:19:13:b4:da:4e:92:68:d8:87:fa: 4a:3c:6d:c8:e3:f1:a0:e0:ad:7b:a6:ed:68:91:71: 6b:87:31:9a:1a:93:91:bd:ae:86:51:9e:40:59:cb: 77:31:39:08:44:96:b6:7c:c0:24:e1:fa:da:8c:36: 4f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FA:CE:DA:EA:04:D4:95:4B:08:D1:03:D0:30:3E:0A:AF:4B:5F:DB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.32.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:81:f5:48:24:b1:cf:d7:45:2f:fd:7a:13:a3:96:5d:4a:19: 2c:6e:be:63:18:f2:c3:45:5b:17:dd:0d:e9:38:78:59:1d:79: fd:cc:2a:0a:22:05:fa:fd:41:7e:0f:27:e0:8e:32:ff:7a:0b: 04:1d:f6:79:03:3d:5f:8c:52:7d:76:db:fe:76:8a:de:45:0c: a9:1d:fe:59:60:cd:3f:b2:43:12:13:18:60:f7:9e:45:72:de: 6a:d5:c6:e4:5f:d8:d6:80:98:56:4b:8d:78:2d:0f:81:8e:6f: 0d:a4:22:ec:2b:3c:8a:a4:d0:2c:b0:6f:3c:2d:e1:a1:a2:e6: a6:59:3e:78:9d:ba:0f:17:79:dd:cf:68:d8:67:71:63:b5:7c: 6f:92:12:f0:c1:f8:da:79:c8:35:5c:e1:fd:0d:13:41:3c:84: d1:1d:d7:d9:f1:a6:e7:d2:50:a4:19:9b:e6:c0:66:46:a7:38: 41:2b:85:b6:f1:a6:0d:c8:c1:83:31:c5:3f:02:9c:3a:0e:76: 7c:b3:8f:15:7b:1b:5e:5d:8e:0a:89:6a:f1:ba:a8:23:32:ea: c7:11:fc:92:ce:9a:5f:ee:09:04:d8:f7:77:4c:d2:57:26:27: fe:18:db:c8:c1:be:86:16:ee:2d:f4:36:37:25:18:78:54:6d: dc:69:1b:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbA4jXDbMXJ/SH40ShZwQjQV8dwAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjE3MDI1MDEzWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2JhZTQ1MmJkNWY5MzZmMmY1MGU3NmZkNjVlYzk3ZDY1 MzBjNjkwY2Y0NmRmNDZmODZiNzQyZDQ1YzU1Mzg3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJSVunddYXod3ICC/jCm2/DfhYMcXdohFbhDCf2SGCB6+O 4pEPNNyIcT7GZi3IQCEigZhDEQbsIcE++deFQjTz6Xp3tdNA+UmNbRT5ysarecQ8 ewaZ3sj5+AWjgl4M8VqXaJYwmXHN3tH2G2iBKx5Vr3+TByPRF4f7sX3nVWflMZ3l VYZ0/gPt2WdgXDe76LnFQy/nlmsNs8aH2D/N6mdTMC4ifZUsXLInDJMV3OhYuebO 3JPUTmkReOOulAeriQ4So9WDpVZtGRO02k6SaNiH+ko8bcjj8aDgrXum7WiRcWuH MZoak5G9roZRnkBZy3cxOQhElrZ8wCTh+tqMNk/9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnfrO2uoE1JVLCNED0DA+Cq9LX9swHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FjMzNjODhkLWE2NTItNDZmNy1hYTgwLTlkNjNiYmFjYzgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCAwDQYJKoZIhvcNAQELBQADggEBAI2B9Ugksc/XRS/9ehOjll1KGSxu vmMY8sNFWxfdDek4eFkdef3MKgoiBfr9QX4PJ+COMv96CwQd9nkDPV+MUn122/52 it5FDKkd/llgzT+yQxITGGD3nkVy3mrVxuRf2NaAmFZLjXgtD4GObw2kIuwrPIqk 0Cywbzwt4aGi5qZZPnidug8Xed3PaNhncWO1fG+SEvDB+Np5yDVc4f0NE0E8hNEd 19nxpufSUKQZm+bAZkanOEErhbbxpg3IwYMxxT8CnDoOdnyzjxV7G15djgqJavG6 qCMy6scR/JLOml/uCQTY93dM0lcmJ/4Y28jBvoYW7i30NjclGHhUbdxpG3Y= -----END CERTIFICATE-----Generated at Mon Mar 2 01:01:51 2026 by rpki-client