$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa File: b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa (raw, json) Hash identifier: QRC7p7B6QhMXzWlP6XF9lH89jOAmvjHOI8YQvH/LN48= Subject key identifier: F7:95:CC:EA:47:5C:5A:7A:CC:EA:AF:75:F5:97:D7:6C:F2:27:42:59 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6DD89B4091B8C0413B74084EF9395EAB85669E20 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa Signing time: Sun 11 Oct 2026 14:50:22 +0000 ROA not before: Sun 11 Oct 2026 14:50:22 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d8:9b:40:91:b8:c0:41:3b:74:08:4e:f9:39:5e:ab:85:66:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:22 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=29e6919a7c79a84b24417c652442456b98f4c3769876c8a30afe0874fff2dabb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:a5:a1:a3:b2:5e:09:cb:99:4a:34:ba:b7: 52:ad:74:03:f8:9d:86:15:7b:f5:28:76:29:ba:48: 33:4b:ee:68:8b:92:17:bb:85:99:f9:51:cf:ef:6f: db:00:22:73:b7:6e:a3:46:d4:39:27:81:51:0d:c8: 26:aa:46:9b:1d:29:a6:48:3a:51:ba:65:87:92:68: a3:50:cf:a0:63:df:16:33:59:14:67:5f:7d:02:1f: ca:53:1e:a8:5e:03:2c:42:eb:ee:b5:be:9d:0c:d1: 3f:04:47:96:35:c8:cb:54:c4:9a:22:1b:07:e7:09: bf:5c:62:8e:7a:0a:da:1c:fa:13:38:cc:0f:92:46: 37:46:94:e3:10:62:2a:21:ee:7c:fe:f6:27:88:ae: d4:f5:60:7d:2b:f6:cf:35:86:be:e6:f3:e2:78:76: 3c:6a:75:5f:a2:c7:51:3a:26:37:93:da:53:2a:53: 3e:3c:c0:ec:95:fd:d2:ef:84:b1:ae:10:78:4e:ee: be:5f:39:fe:c6:97:fd:c6:a7:4c:c3:6b:70:a5:0b: 17:90:bc:1f:84:72:70:30:cc:42:5b:a5:43:2f:86: 8b:5a:02:aa:4b:b1:a9:a1:41:34:79:de:ee:10:01: 3c:af:cf:fd:e6:d7:d6:90:be:4b:3d:75:f1:9f:be: 21:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:95:CC:EA:47:5C:5A:7A:CC:EA:AF:75:F5:97:D7:6C:F2:27:42:59 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.30.0/23 Signature Algorithm: sha256WithRSAEncryption 33:45:50:26:10:21:01:95:d8:db:22:06:a1:dc:d2:78:5e:04: 2d:57:11:aa:ce:34:7c:34:7c:9f:1a:03:7c:1c:6e:a3:1f:70: c1:97:ff:05:3b:a8:c1:73:a7:54:11:92:1c:28:9a:67:67:c3: 05:78:55:75:4a:22:90:6f:1f:fb:23:2b:fc:ad:4c:13:01:a7: 22:a9:9d:43:7f:eb:86:17:71:71:4f:26:ca:4d:d2:8e:73:18: 7e:0a:ef:ff:93:26:be:e9:0f:47:f7:1b:9e:e0:43:2a:64:68: 0b:21:28:1d:a9:57:c3:10:65:30:c0:e5:3b:41:c6:7b:de:ea: 01:9f:a7:4e:20:60:3f:2e:1b:37:77:a6:ce:5b:a9:ad:a7:8d: c8:29:c3:aa:4b:fc:55:32:50:41:01:3b:fa:f4:06:b3:8a:c9: 4b:33:88:84:27:13:e2:3b:2a:d4:45:86:ba:79:c5:62:27:e0: ff:76:5a:a5:58:c0:5c:dc:e2:d1:d4:24:7b:4b:31:ef:4b:df: 73:e4:b1:2b:bb:81:ed:c0:17:0f:a0:56:75:b6:46:7d:28:ee: 01:a4:af:b7:f2:e6:ea:84:57:33:29:3d:8d:2b:95:ef:1d:7a: c1:a0:a9:4f:83:77:cf:f8:ed:78:ac:ce:6d:98:27:bb:2e:14: 66:c6:97:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbdibQJG4wEE7dAhO+Tleq4VmniAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDIyWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWU2OTE5YTdjNzlhODRiMjQ0MTdjNjUyNDQyNDU2Yjk4 ZjRjMzc2OTg3NmM4YTMwYWZlMDg3NGZmZjJkYWJiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcq6Who7JeCcuZSjS6t1KtdAP4nYYVe/Uodim6SDNL7miL khe7hZn5Uc/vb9sAInO3bqNG1DkngVENyCaqRpsdKaZIOlG6ZYeSaKNQz6Bj3xYz WRRnX30CH8pTHqheAyxC6+61vp0M0T8ER5Y1yMtUxJoiGwfnCb9cYo56Ctoc+hM4 zA+SRjdGlOMQYioh7nz+9ieIrtT1YH0r9s81hr7m8+J4djxqdV+ix1E6JjeT2lMq Uz48wOyV/dLvhLGuEHhO7r5fOf7Gl/3Gp0zDa3ClCxeQvB+EcnAwzEJbpUMvhota AqpLsamhQTR53u4QATyvz/3m19aQvks9dfGfviEpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU95XM6kdcWnrM6q919ZfXbPInQlkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2I1ZjNmYWM3LWMwN2MtNDBiYS1hMmEyLTNjZGVlNTA1YTI4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYB4wDQYJKoZIhvcNAQELBQADggEBADNFUCYQIQGV2NsiBqHc0nheBC1X EarONHw0fJ8aA3wcbqMfcMGX/wU7qMFzp1QRkhwommdnwwV4VXVKIpBvH/sjK/yt TBMBpyKpnUN/64YXcXFPJspN0o5zGH4K7/+TJr7pD0f3G57gQypkaAshKB2pV8MQ ZTDA5TtBxnve6gGfp04gYD8uGzd3ps5bqa2njcgpw6pL/FUyUEEBO/r0BrOKyUsz iIQnE+I7KtRFhrp5xWIn4P92WqVYwFzc4tHUJHtLMe9L33PksSu7ge3AFw+gVnW2 Rn0o7gGkr7fy5uqEVzMpPY0rle8desGgqU+Dd8/47Xiszm2YJ7suFGbGl3Q= -----END CERTIFICATE-----Generated at Sun Nov 15 21:40:25 2026 by rpki-client