$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa File: ad8fff98-4abc-4324-8c36-b77778f66799.roa (raw, json) Hash identifier: oSgxAU4gD6tpiNKKxjKd5hjZyAKDyueNiAEtzK6PKzc= Subject key identifier: 92:54:0C:E8:64:13:26:F2:FD:5D:1F:04:08:81:5D:1E:B9:D7:9A:6C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4438B9D812F775F589D594FF54DE4C4D74D1539C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa Signing time: Mon 27 Jul 2026 02:50:05 +0000 ROA not before: Mon 27 Jul 2026 02:50:05 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:38:b9:d8:12:f7:75:f5:89:d5:94:ff:54:de:4c:4d:74:d1:53:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 27 02:50:05 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=79d7c547ab9144d1d955f1216b0c2714eb470de948ebebbbcb2c07c4100de682, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:15:3e:d1:fd:2b:96:38:a8:9a:36:37:9e: c6:bd:40:d4:82:8a:05:ce:9d:0e:13:35:8e:02:a9: 42:44:df:ca:51:13:a5:ad:0e:d0:cf:dd:62:e7:89: 5f:43:a9:8b:93:36:b1:11:5b:3b:ad:6e:39:6a:9a: 55:bc:9f:6e:5b:1d:15:93:68:8f:5c:a6:05:97:73: 6f:a8:60:90:cf:64:b9:6a:e0:42:9c:af:ca:ef:8d: cc:1b:bb:ef:b1:f5:bd:33:f1:2f:61:70:50:94:d4: 38:a5:a3:0f:8b:c8:bf:18:7d:e9:22:b3:f4:aa:86: 1f:cb:f7:ca:f3:da:0c:48:0b:8f:cd:2e:00:90:6a: 9b:90:1c:52:b4:7f:f5:50:18:ba:ca:8a:93:f1:a0: a4:9b:a3:3d:32:57:25:23:73:80:fc:a4:e1:7c:1a: d1:13:93:5e:82:fe:ec:3d:9b:07:58:eb:8c:0a:93: 0c:59:86:01:cc:a3:ee:86:69:4a:65:bc:01:1d:c2: bc:0d:2c:9d:53:74:fc:8e:b8:34:a0:ff:ce:04:0e: 2f:43:90:16:50:b0:b8:2f:78:f9:04:25:63:10:8a: 12:1f:64:8d:1b:f5:d0:d7:1e:e3:66:92:fc:b9:f6: 15:c9:73:b8:d8:3f:3b:7a:2d:36:05:eb:e6:44:cd: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:54:0C:E8:64:13:26:F2:FD:5D:1F:04:08:81:5D:1E:B9:D7:9A:6C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.33.0/24 Signature Algorithm: sha256WithRSAEncryption 35:52:16:3b:d6:63:93:d7:8c:38:25:82:5d:a6:10:5e:5b:0d: f1:cd:df:21:77:bc:df:fa:03:63:87:40:d9:55:ad:85:8f:64: 20:95:2e:4d:53:43:07:6b:1f:c0:0d:13:f1:bf:16:6f:bd:ed: 45:4b:99:3c:47:22:c3:18:7a:73:4e:b8:d5:34:9a:11:ad:06: 7e:17:0a:84:f7:53:ef:2e:88:ad:67:15:1f:77:25:c2:01:f0: a9:43:cd:36:50:5b:5d:e8:92:97:a9:74:d5:05:35:3b:be:42: 59:67:b0:1d:f0:1e:f1:7b:d9:1f:2e:f7:7d:6f:28:7a:d1:6d: 9d:92:4c:95:53:e3:b7:fd:c8:00:97:2d:3b:bb:ae:71:5a:75: 06:58:e5:ec:dc:52:4e:64:97:37:2e:23:1f:6e:05:d2:f9:63: 9a:20:63:20:b2:f0:95:d8:3c:f7:ed:3d:dc:67:03:9e:be:1d: 77:c3:fb:41:2f:d9:ea:82:77:30:b6:e0:24:cc:39:76:a5:47: 41:14:8a:77:ca:f1:6b:0f:e2:a0:d2:3e:75:0d:ce:89:14:ce: 46:37:5b:cf:3c:a3:e4:54:d5:a5:54:7b:f1:6e:d4:a9:ad:0c: 24:7f:77:6a:72:4c:4b:fb:30:e9:5e:b3:40:58:87:fd:f6:a5: 24:d6:7e:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURDi52BL3dfWJ1ZT/VN5MTXTRU5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzI3MDI1MDA1WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWQ3YzU0N2FiOTE0NGQxZDk1NWYxMjE2YjBjMjcxNGVi NDcwZGU5NDhlYmViYmJjYjJjMDdjNDEwMGRlNjgyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCqRU+0f0rljiomjY3nsa9QNSCigXOnQ4TNY4CqUJE38pR E6WtDtDP3WLniV9DqYuTNrERWzutbjlqmlW8n25bHRWTaI9cpgWXc2+oYJDPZLlq 4EKcr8rvjcwbu++x9b0z8S9hcFCU1Dilow+LyL8Yfekis/Sqhh/L98rz2gxIC4/N LgCQapuQHFK0f/VQGLrKipPxoKSboz0yVyUjc4D8pOF8GtETk16C/uw9mwdY64wK kwxZhgHMo+6GaUplvAEdwrwNLJ1TdPyOuDSg/84EDi9DkBZQsLgvePkEJWMQihIf ZI0b9dDXHuNmkvy59hXJc7jYPzt6LTYF6+ZEzZmfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUklQM6GQTJvL9XR8ECIFdHrnXmmwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FkOGZmZjk4LTRhYmMtNDMyNC04YzM2LWI3Nzc3OGY2Njc5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCEwDQYJKoZIhvcNAQELBQADggEBADVSFjvWY5PXjDglgl2mEF5bDfHN 3yF3vN/6A2OHQNlVrYWPZCCVLk1TQwdrH8ANE/G/Fm+97UVLmTxHIsMYenNOuNU0 mhGtBn4XCoT3U+8uiK1nFR93JcIB8KlDzTZQW13okpepdNUFNTu+QllnsB3wHvF7 2R8u931vKHrRbZ2STJVT47f9yACXLTu7rnFadQZY5ezcUk5klzcuIx9uBdL5Y5og YyCy8JXYPPftPdxnA56+HXfD+0Ev2eqCdzC24CTMOXalR0EUinfK8WsP4qDSPnUN zokUzkY3W888o+RU1aVUe/Fu1KmtDCR/d2pyTEv7MOles0BYh/32pSTWfkQ= -----END CERTIFICATE-----Generated at Tue Jul 28 21:31:11 2026 by rpki-client