$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b063da57-37b1-4f36-91b0-613247453bd5.roa File: b063da57-37b1-4f36-91b0-613247453bd5.roa (raw, json) Hash identifier: OvFcdufsp19tKXeCV7r7tldQweMH6MvpW6Vy5KA63/A= Subject key identifier: CC:DD:29:F4:9A:2F:8B:19:B0:F1:89:4F:54:1F:BE:2D:32:17:12:D3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 724264979BE42757F7711A3335DB1BA6E9A8A774 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b063da57-37b1-4f36-91b0-613247453bd5.roa Signing time: Sun 11 Oct 2026 14:50:24 +0000 ROA not before: Sun 11 Oct 2026 14:50:24 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:42:64:97:9b:e4:27:57:f7:71:1a:33:35:db:1b:a6:e9:a8:a7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:24 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=30b3a8a7b10a28cbc6bb31c09a0a90132798f02b7215f1a1039fd0fa5641df21, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:8a:31:b5:00:43:4b:02:58:03:9c:8b:f0: 95:08:05:fc:44:13:07:3b:d7:8b:e3:5d:6d:79:29: 68:7b:45:4d:c6:6b:99:e1:9d:f9:da:82:8e:89:56: 0e:ab:eb:eb:98:d4:1f:d2:d8:1d:8b:85:90:3f:c1: b6:5f:2e:35:9f:ec:39:63:19:53:00:91:c3:30:2a: 3f:05:5b:c1:f1:39:f5:34:44:b7:94:91:c4:64:c1: 19:c9:29:d9:71:7e:34:bf:25:a3:a0:aa:09:8b:21: 1d:92:f6:59:ef:c7:12:cd:c1:2b:ea:6a:75:26:9a: b9:3e:61:95:81:be:b4:ef:4f:d6:f8:b2:a8:f0:00: f1:3a:5b:f7:06:49:9d:ec:9b:fa:62:9a:16:ee:09: 46:3a:f4:dc:1b:c1:db:38:1e:86:a9:71:5b:58:7c: c2:dd:34:d7:53:16:8c:14:1a:9c:59:c6:f6:66:ed: 6c:2a:72:56:03:d0:8a:49:ee:91:7c:c2:ec:0d:0d: 0c:22:3b:ca:3e:68:ca:ce:81:31:f6:64:fb:fe:f1: 75:a0:d9:d0:80:2a:95:80:5a:cd:f4:49:f4:1b:11: c4:61:d2:a7:8b:e1:66:d3:0f:0f:f6:2c:89:9f:d3: 25:ed:f0:67:e8:e1:34:a0:ab:11:38:e5:ea:e7:f5: 10:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DD:29:F4:9A:2F:8B:19:B0:F1:89:4F:54:1F:BE:2D:32:17:12:D3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b063da57-37b1-4f36-91b0-613247453bd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.26.0/23 Signature Algorithm: sha256WithRSAEncryption 55:be:19:93:ba:9b:c7:0c:9b:68:9e:50:fc:0e:43:cc:95:03: 86:81:a7:5c:b7:a9:3b:4b:32:ce:53:66:18:86:8b:fb:e0:ad: 5e:65:24:8b:b4:08:b4:73:4f:a6:92:da:d5:17:3b:9b:c5:f2: 00:ad:a7:ef:78:65:cf:8e:37:9f:14:d4:5c:61:8a:e3:f0:9b: 00:d1:6d:48:33:5c:5a:42:30:90:79:b4:26:8f:82:0e:b0:25: 40:e3:0a:e4:62:4d:09:ec:fd:df:e6:1e:02:66:f7:50:41:b1: 7a:8a:2c:51:20:f6:0a:2c:6a:f1:e8:f3:c5:a4:6b:7f:1f:a9: 0b:e7:18:39:75:41:d4:e0:04:35:ea:2e:61:75:88:f9:96:43: c2:34:98:eb:50:5f:7c:fa:e4:17:e0:e7:7e:11:28:6b:d5:5d: f6:cf:0a:58:88:58:9f:d4:7d:c3:44:fd:7f:b7:b9:02:16:86: 90:87:ba:e6:a7:cc:b8:5d:51:9f:51:62:c3:49:2d:45:ca:41: 0a:01:2d:9f:08:b2:64:ac:8c:23:0d:81:99:94:96:33:5c:ea: d3:84:ab:a5:f6:e3:ed:1d:c4:31:fb:aa:a5:aa:3e:a5:c5:b7: dd:16:15:f1:e6:69:65:f3:c0:b0:02:f7:2f:d6:04:a7:76:e6: af:a4:fd:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUckJkl5vkJ1f3cRozNdsbpumop3QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDI0WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGIzYThhN2IxMGEyOGNiYzZiYjMxYzA5YTBhOTAxMzI3 OThmMDJiNzIxNWYxYTEwMzlmZDBmYTU2NDFkZjIxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWEIoxtQBDSwJYA5yL8JUIBfxEEwc714vjXW15KWh7RU3G a5nhnfnago6JVg6r6+uY1B/S2B2LhZA/wbZfLjWf7DljGVMAkcMwKj8FW8HxOfU0 RLeUkcRkwRnJKdlxfjS/JaOgqgmLIR2S9lnvxxLNwSvqanUmmrk+YZWBvrTvT9b4 sqjwAPE6W/cGSZ3sm/pimhbuCUY69Nwbwds4HoapcVtYfMLdNNdTFowUGpxZxvZm 7WwqclYD0IpJ7pF8wuwNDQwiO8o+aMrOgTH2ZPv+8XWg2dCAKpWAWs30SfQbEcRh 0qeL4WbTDw/2LImf0yXt8Gfo4TSgqxE45ern9RBzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzN0p9Jovixmw8YlPVB++LTIXEtMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2IwNjNkYTU3LTM3YjEtNGYzNi05MWIwLTYxMzI0NzQ1M2JkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBowDQYJKoZIhvcNAQELBQADggEBAFW+GZO6m8cMm2ieUPwOQ8yVA4aB p1y3qTtLMs5TZhiGi/vgrV5lJIu0CLRzT6aS2tUXO5vF8gCtp+94Zc+ON58U1Fxh iuPwmwDRbUgzXFpCMJB5tCaPgg6wJUDjCuRiTQns/d/mHgJm91BBsXqKLFEg9gos avHo88Wka38fqQvnGDl1QdTgBDXqLmF1iPmWQ8I0mOtQX3z65Bfg534RKGvVXfbP CliIWJ/UfcNE/X+3uQIWhpCHuuanzLhdUZ9RYsNJLUXKQQoBLZ8IsmSsjCMNgZmU ljNc6tOEq6X24+0dxDH7qqWqPqXFt90WFfHmaWXzwLAC9y/WBKd25q+k/U4= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:36 2026 by rpki-client