$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa File: b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa (raw, json) Hash identifier: KHq9Brp0fIialedQZqLfCgmTT7FA4qPemy5/JTtVW2s= Subject key identifier: 6E:11:64:50:9B:C3:37:D1:0C:F3:60:CE:9C:8F:62:59:5A:FA:1D:87 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 20BDE85FC4B48C4F0A38413A65C261443A9663C0 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa Signing time: Tue 19 May 2026 04:00:08 +0000 ROA not before: Tue 19 May 2026 04:00:08 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bd:e8:5f:c4:b4:8c:4f:0a:38:41:3a:65:c2:61:44:3a:96:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 19 04:00:08 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=2765acbc87ef8c92db89b6409acaa6371abae20b467775eb2bfd9e2c3d928864, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:0d:b2:10:87:4a:48:a6:6c:51:27:89:f0: 5a:7e:92:68:3c:4b:6e:59:4b:c9:72:23:97:3d:32: 0c:7c:a6:09:2c:8b:63:9f:5c:2b:46:3a:b1:b1:e4: a1:91:9b:7f:3c:03:79:5e:ae:ee:e9:42:bf:b0:ff: 25:b4:40:b7:a2:2d:5b:47:c5:23:3e:07:42:6e:3d: f0:1d:aa:ac:27:94:59:8c:ee:8f:38:c8:f5:73:0f: b7:72:c2:8a:76:f4:f7:3a:0e:18:ed:6e:e5:9e:93: 54:03:ac:df:be:4a:0f:4d:28:9c:b7:05:b5:52:12: 8f:e1:45:d0:6f:b8:4a:e5:a0:a9:cf:c9:67:6a:cf: 17:6c:e7:8f:8f:d2:74:e8:a0:81:d1:6d:c1:eb:ba: f8:0a:a1:eb:3e:ce:1b:75:46:5a:35:be:f4:2d:04: ec:8b:09:85:83:28:20:45:20:f0:e8:29:41:d3:96: 48:a2:ab:15:8c:41:16:92:f4:f3:76:84:1b:9b:71: 5a:c6:cc:99:07:d0:99:fd:5a:ef:8d:18:93:64:74: 37:69:a0:19:46:55:6d:7b:34:46:2e:ab:df:54:c2: a8:ad:14:e7:a0:98:7c:10:c0:fc:78:22:e5:eb:e8: 02:66:27:44:26:7e:4e:77:85:13:38:b6:71:d1:80: 05:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:11:64:50:9B:C3:37:D1:0C:F3:60:CE:9C:8F:62:59:5A:FA:1D:87 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.47.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:1b:e4:3d:be:07:74:7d:9a:a7:32:7d:c0:35:d8:07:92:84: 09:d5:28:23:b2:54:0b:72:63:f5:e2:fb:64:19:eb:fa:ad:52: 02:3c:3d:d3:ae:65:15:10:d5:21:5e:7d:d7:51:49:fe:04:4f: 57:17:4d:af:9d:57:46:b0:3d:b5:70:1c:30:b7:74:b3:9d:98: 1c:69:ab:b2:06:0b:28:a5:35:5c:2f:0f:1a:7c:37:6d:e1:66: f1:e4:77:76:44:a2:76:bc:12:e1:54:ef:07:15:0b:ed:a0:67: 3d:61:3c:18:a8:9f:7f:3b:b7:c1:39:80:bd:25:59:31:c9:90: 13:23:f8:72:91:6a:dd:bc:67:2b:7e:c6:3b:6c:b8:f9:5d:7d: 65:01:88:5d:93:11:d3:42:2e:31:40:91:6a:4d:3e:22:6a:64: 64:2c:79:9f:80:3a:98:4f:3b:9f:15:1f:ee:22:a0:21:85:0f: bf:40:00:26:01:01:fe:57:52:e8:d2:62:e4:e2:d6:07:89:b9: d9:e9:b3:1d:4a:74:39:05:8b:22:e0:82:d1:b5:e2:83:71:ac: a2:f5:2c:fa:11:91:9f:9a:b4:76:15:be:92:33:08:ee:60:26: 21:16:bd:5c:4b:96:7d:6b:19:d5:76:cb:d8:fd:08:a5:63:23: 2f:25:b7:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIL3oX8S0jE8KOEE6ZcJhRDqWY8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE5MDQwMDA4WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzY1YWNiYzg3ZWY4YzkyZGI4OWI2NDA5YWNhYTYzNzFh YmFlMjBiNDY3Nzc1ZWIyYmZkOWUyYzNkOTI4ODY0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCusw2yEIdKSKZsUSeJ8Fp+kmg8S25ZS8lyI5c9Mgx8pgks i2OfXCtGOrGx5KGRm388A3leru7pQr+w/yW0QLeiLVtHxSM+B0JuPfAdqqwnlFmM 7o84yPVzD7dywop29Pc6DhjtbuWek1QDrN++Sg9NKJy3BbVSEo/hRdBvuErloKnP yWdqzxds54+P0nTooIHRbcHruvgKoes+zht1Rlo1vvQtBOyLCYWDKCBFIPDoKUHT lkiiqxWMQRaS9PN2hBubcVrGzJkH0Jn9Wu+NGJNkdDdpoBlGVW17NEYuq99Uwqit FOegmHwQwPx4IuXr6AJmJ0Qmfk53hRM4tnHRgAVTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbhFkUJvDN9EM82DOnI9iWVr6HYcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2IzMjZjN2E2LTQ2MmEtNDhlZC1hNWE1LTJkZDU2NTJiYjdkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC8wDQYJKoZIhvcNAQELBQADggEBAAwb5D2+B3R9mqcyfcA12AeShAnV KCOyVAtyY/Xi+2QZ6/qtUgI8PdOuZRUQ1SFefddRSf4ET1cXTa+dV0awPbVwHDC3 dLOdmBxpq7IGCyilNVwvDxp8N23hZvHkd3ZEona8EuFU7wcVC+2gZz1hPBion387 t8E5gL0lWTHJkBMj+HKRat28Zyt+xjtsuPldfWUBiF2TEdNCLjFAkWpNPiJqZGQs eZ+AOphPO58VH+4ioCGFD79AACYBAf5XUujSYuTi1geJudnpsx1KdDkFiyLggtG1 4oNxrKL1LPoRkZ+atHYVvpIzCO5gJiEWvVxLln1rGdV2y9j9CKVjIy8lt3M= -----END CERTIFICATE-----Generated at Sat Jun 13 05:43:45 2026 by rpki-client