$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/acae3b67-7094-4a1c-938d-1c8fd9f299ea.roa File: acae3b67-7094-4a1c-938d-1c8fd9f299ea.roa (raw, json) Hash identifier: /WIVTvHd5ndhwu16EbQx3J36IahMcnxw/OVaVikzg3I= Subject key identifier: 96:A8:EB:A1:F6:D3:E2:FB:D3:E0:45:8F:C9:6B:A7:84:E7:56:7F:18 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3266BC435C8E959B64C6D0F64781A1609A65AEDA Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/acae3b67-7094-4a1c-938d-1c8fd9f299ea.roa Signing time: Mon 16 Feb 2026 00:00:10 +0000 ROA not before: Mon 16 Feb 2026 00:00:10 +0000 ROA not after: Sun 17 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.111.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:66:bc:43:5c:8e:95:9b:64:c6:d0:f6:47:81:a1:60:9a:65:ae:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 16 00:00:10 2026 GMT Not After : May 17 23:59:59 2026 GMT Subject: serialNumber=b87cf10de61fb4478ac7d0e5dcd81ad23ccf0455ded502911a260b4956b14527, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:90:22:7f:09:51:5b:20:70:77:29:a7:59: ce:aa:32:c4:39:33:f6:87:1d:a7:68:c7:e3:e1:d5: a6:bb:d1:c6:56:5a:33:30:26:aa:3d:aa:a6:33:23: 09:57:ea:7f:7c:49:f4:e3:9a:71:73:b2:6a:b8:05: 39:25:99:15:68:57:58:8f:f0:5f:2c:37:1c:2f:44: 1c:b0:69:f6:6d:59:f4:b3:47:16:c6:84:45:c8:8a: a3:a6:33:d0:38:f5:7d:dc:12:09:9c:f0:e1:32:26: 6e:26:66:67:bd:39:f6:6e:26:e1:e9:d3:cc:ae:af: 33:52:cf:ed:7c:ea:b9:23:51:1e:2f:32:21:01:ac: 92:63:33:55:52:08:3c:23:3a:2e:d5:f7:92:7f:0d: a9:b5:26:77:59:94:dc:6b:f2:71:e2:92:90:eb:0d: 2e:75:1a:0d:56:88:20:0c:df:bb:ed:90:e1:05:cb: 69:f7:d4:c0:af:b2:fc:f5:56:f4:58:3b:73:47:82: 74:d3:78:f2:80:76:21:e7:63:aa:79:c1:f8:09:32: fc:37:09:ab:ce:72:e8:35:b7:89:95:84:34:f8:98: 9f:eb:c9:81:f6:87:c8:30:32:9a:a3:62:43:75:bf: 96:3d:9e:8a:59:b0:fb:76:f2:6c:74:6f:91:ae:da: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A8:EB:A1:F6:D3:E2:FB:D3:E0:45:8F:C9:6B:A7:84:E7:56:7F:18 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/acae3b67-7094-4a1c-938d-1c8fd9f299ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.254.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:4d:da:89:7b:d9:c9:e4:59:14:43:ca:ba:9d:2f:44:29:97: eb:f1:48:0c:d1:93:9f:b5:d7:ff:87:08:91:29:bc:1c:9a:1c: 27:12:40:4a:3b:07:89:b3:80:9c:8a:dc:a1:ca:b1:26:5d:d4: 88:47:91:88:72:d9:63:10:9c:8e:fb:f0:93:1f:82:82:4b:ea: 19:cb:c2:63:13:52:95:5d:03:e5:5c:fe:2a:0f:76:d9:cc:8b: d5:14:5a:45:b7:8f:aa:5b:50:15:41:bb:1e:c9:b6:94:8b:f7: bf:01:68:26:6a:f9:57:eb:5d:30:2a:22:ab:93:ad:71:2d:e9: 2f:17:df:eb:b4:c6:7d:08:b8:5c:de:7b:6e:66:c8:54:77:aa: 65:3c:69:dc:eb:0c:38:54:0e:33:10:bb:c9:ac:d5:94:40:79: 18:c5:5c:df:ca:67:2c:50:1f:a6:ff:64:e3:23:dc:31:8e:5f: 08:ed:cd:87:48:6b:49:98:3d:2d:86:6d:cb:9f:2c:07:2a:27: b8:19:70:09:a4:cb:c6:d3:40:7a:2c:e8:b7:cf:b0:74:c4:a9: e5:42:b6:33:99:4a:cb:ed:11:39:54:57:6a:a5:a6:23:c9:2f: 9a:7b:d5:52:44:80:70:9d:13:82:93:07:b0:65:ea:90:12:19: f3:af:85:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMma8Q1yOlZtkxtD2R4GhYJplrtowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjE2MDAwMDEwWhcNMjYwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODdjZjEwZGU2MWZiNDQ3OGFjN2QwZTVkY2Q4MWFkMjNj Y2YwNDU1ZGVkNTAyOTExYTI2MGI0OTU2YjE0NTI3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr4pAifwlRWyBwdymnWc6qMsQ5M/aHHadox+Ph1aa70cZW WjMwJqo9qqYzIwlX6n98SfTjmnFzsmq4BTklmRVoV1iP8F8sNxwvRBywafZtWfSz RxbGhEXIiqOmM9A49X3cEgmc8OEyJm4mZme9OfZuJuHp08yurzNSz+186rkjUR4v MiEBrJJjM1VSCDwjOi7V95J/Dam1JndZlNxr8nHikpDrDS51Gg1WiCAM37vtkOEF y2n31MCvsvz1VvRYO3NHgnTTePKAdiHnY6p5wfgJMvw3CavOcug1t4mVhDT4mJ/r yYH2h8gwMpqjYkN1v5Y9nopZsPt28mx0b5Gu2uiDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlqjrofbT4vvT4EWPyWunhOdWfxgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FjYWUzYjY3LTcwOTQtNGExYy05MzhkLTFjOGZkOWYyOTllYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/4wDQYJKoZIhvcNAQELBQADggEBAGtN2ol72cnkWRRDyrqdL0Qpl+vx SAzRk5+11/+HCJEpvByaHCcSQEo7B4mzgJyK3KHKsSZd1IhHkYhy2WMQnI778JMf goJL6hnLwmMTUpVdA+Vc/ioPdtnMi9UUWkW3j6pbUBVBux7JtpSL978BaCZq+Vfr XTAqIquTrXEt6S8X3+u0xn0IuFzee25myFR3qmU8adzrDDhUDjMQu8ms1ZRAeRjF XN/KZyxQH6b/ZOMj3DGOXwjtzYdIa0mYPS2GbcufLAcqJ7gZcAmky8bTQHos6LfP sHTEqeVCtjOZSsvtETlUV2qlpiPJL5p71VJEgHCdE4KTB7Bl6pASGfOvhV8= -----END CERTIFICATE-----Generated at Mon Mar 2 04:29:04 2026 by rpki-client