$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b1752dc8-4d6f-4fcf-b6d0-5b3b1e6423ef.roa File: b1752dc8-4d6f-4fcf-b6d0-5b3b1e6423ef.roa (raw, json) Hash identifier: sT1k9HxXXSCsj1BrgN0jI7XnPct0Y8Jj3D86C4GOSX4= Subject key identifier: 0E:25:5A:60:75:2F:2C:18:36:38:64:09:88:1D:8A:4B:AB:7E:43:32 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5EFFE74A54354DBFF2C731335D7971056A8BF717 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b1752dc8-4d6f-4fcf-b6d0-5b3b1e6423ef.roa Signing time: Wed 14 Oct 2026 00:06:23 +0000 ROA not before: Wed 14 Oct 2026 00:06:23 +0000 ROA not after: Tue 12 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.111.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ff:e7:4a:54:35:4d:bf:f2:c7:31:33:5d:79:71:05:6a:8b:f7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 14 00:06:23 2026 GMT Not After : Jan 12 23:59:59 2027 GMT Subject: serialNumber=153d45e7a68ff9356b4707b060f5404a2515928612d22437e70bc7642bf4603e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3f:6c:4f:8d:57:5f:56:54:62:e9:e6:fd:6b: da:e7:69:07:27:63:d5:de:f9:f1:95:67:a2:dc:03: 5c:53:21:9c:df:54:7e:4f:fc:fa:3d:58:73:c3:a0: 8d:47:a6:94:90:dc:b5:86:0c:73:10:a3:92:37:cb: 27:16:dc:9f:76:af:9c:7c:44:61:95:1d:e1:96:58: cc:af:28:32:c2:d5:5c:bc:cf:7f:4a:ce:67:4b:c9: 0b:9f:2d:b1:cc:8f:b7:11:86:ae:83:0f:1c:2d:11: b8:a8:fa:e6:39:bb:da:0f:05:d3:a4:6b:4d:b7:d6: bb:ee:d2:61:bd:1f:d2:ba:6f:8a:82:bc:9d:c8:87: 52:11:78:4a:e3:a4:71:e1:d0:d7:91:86:22:a1:0d: 9f:c4:b3:cd:a3:62:a0:c8:77:da:3a:44:a0:33:55: e4:aa:26:a1:c8:7b:dc:73:93:7d:39:7b:84:fc:20: 75:8f:c3:57:69:53:ad:22:27:8c:03:71:9e:05:3d: 0f:fa:c4:00:53:22:9d:44:f5:8b:29:c8:13:d4:fd: f8:ca:9f:a9:ac:20:ec:19:02:a2:a1:b4:96:bc:53: c2:bc:17:07:33:24:04:e8:42:98:2e:18:31:9a:77: 4f:0d:c6:dd:6e:4a:06:9c:00:6b:38:99:cf:47:e8: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:5A:60:75:2F:2C:18:36:38:64:09:88:1D:8A:4B:AB:7E:43:32 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b1752dc8-4d6f-4fcf-b6d0-5b3b1e6423ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.254.0/24 Signature Algorithm: sha256WithRSAEncryption 16:95:4f:54:11:b4:62:bf:0a:a3:97:47:d6:82:5b:14:42:a2: a3:41:e2:cb:52:ae:8c:61:77:de:77:45:9d:cd:b2:ea:65:21: 8a:b7:9a:7d:59:c0:79:41:56:a9:f4:9d:f7:6e:cb:bf:6b:f7: 41:79:74:ca:80:66:61:40:60:df:61:49:9b:dc:4f:71:1d:64: 8c:90:42:1a:fa:ad:81:a0:36:59:33:63:45:4a:10:c2:7b:a5: 1b:e0:c6:0f:9e:54:a1:f4:d5:28:3a:de:78:a3:0e:c9:a6:e9: 61:8d:48:45:a5:f9:8c:17:5e:59:b3:f7:43:0b:95:71:1c:a3: 25:ee:eb:8c:05:0c:d0:b2:65:02:3a:2f:16:f9:50:81:b0:dd: f8:bb:26:69:f5:6b:f5:1b:8f:10:2f:e9:b1:67:09:c4:1b:75: 92:45:6a:35:62:87:cb:8d:e4:ae:d6:8e:7f:45:d5:c1:12:cc: 10:13:21:e5:0b:bf:7c:66:fb:34:89:87:eb:46:77:6b:0a:80: da:c8:da:ff:aa:9b:cb:ba:21:54:24:27:2f:61:23:d0:a0:08: 30:58:2a:4b:24:65:67:d4:7a:c9:c4:0a:bb:4b:e1:d9:c8:46: 46:15:b5:e6:0d:95:21:7d:8f:b8:1b:ef:b0:c9:a2:e3:46:81: c8:c9:2c:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXv/nSlQ1Tb/yxzEzXXlxBWqL9xcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE0MDAwNjIzWhcNMjcwMTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTNkNDVlN2E2OGZmOTM1NmI0NzA3YjA2MGY1NDA0YTI1 MTU5Mjg2MTJkMjI0MzdlNzBiYzc2NDJiZjQ2MDNlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDyP2xPjVdfVlRi6eb9a9rnaQcnY9Xe+fGVZ6LcA1xTIZzf VH5P/Po9WHPDoI1HppSQ3LWGDHMQo5I3yycW3J92r5x8RGGVHeGWWMyvKDLC1Vy8 z39KzmdLyQufLbHMj7cRhq6DDxwtEbio+uY5u9oPBdOka0231rvu0mG9H9K6b4qC vJ3Ih1IReErjpHHh0NeRhiKhDZ/Es82jYqDId9o6RKAzVeSqJqHIe9xzk305e4T8 IHWPw1dpU60iJ4wDcZ4FPQ/6xABTIp1E9YspyBPU/fjKn6msIOwZAqKhtJa8U8K8 FwczJAToQpguGDGad08Nxt1uSgacAGs4mc9H6KFfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDiVaYHUvLBg2OGQJiB2KS6t+QzIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2IxNzUyZGM4LTRkNmYtNGZjZi1iNmQwLTViM2IxZTY0MjNlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/4wDQYJKoZIhvcNAQELBQADggEBABaVT1QRtGK/CqOXR9aCWxRCoqNB 4stSroxhd953RZ3NsuplIYq3mn1ZwHlBVqn0nfduy79r90F5dMqAZmFAYN9hSZvc T3EdZIyQQhr6rYGgNlkzY0VKEMJ7pRvgxg+eVKH01Sg63nijDsmm6WGNSEWl+YwX Xlmz90MLlXEcoyXu64wFDNCyZQI6Lxb5UIGw3fi7Jmn1a/UbjxAv6bFnCcQbdZJF ajVih8uN5K7Wjn9F1cESzBATIeULv3xm+zSJh+tGd2sKgNrI2v+qm8u6IVQkJy9h I9CgCDBYKkskZWfUesnECrtL4dnIRkYVteYNlSF9j7gb77DJouNGgcjJLJQ= -----END CERTIFICATE-----Generated at Thu Nov 5 16:16:30 2026 by rpki-client