$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bdc4de21-9895-4d0a-8e2f-187812e1335d.roa File: bdc4de21-9895-4d0a-8e2f-187812e1335d.roa (raw, json) Hash identifier: Te8UOaTOPKHV9uskwiAot/V+sOb8zlMPatufI817wws= Subject key identifier: 7D:86:3F:EC:99:82:64:F0:F2:C9:AB:CD:90:96:75:75:AF:02:CF:38 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 16FF4ED370D2AE32EF51B29B12C4FED00063EFFE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bdc4de21-9895-4d0a-8e2f-187812e1335d.roa Signing time: Sun 11 Oct 2026 14:50:07 +0000 ROA not before: Sun 11 Oct 2026 14:50:07 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ff:4e:d3:70:d2:ae:32:ef:51:b2:9b:12:c4:fe:d0:00:63:ef:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:07 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=40bc404fc3dba6622eef7e365d3804373439b644bb98d35c67f2d5a7fc9646e3, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:39:2e:e3:e0:c5:00:ae:59:05:08:67:30: 86:45:bc:22:36:38:60:0b:e6:f2:97:09:f9:dc:33: 35:c8:dc:3d:d8:9e:9c:c9:ff:e0:55:97:68:73:ea: a3:81:6f:d4:a2:c1:e3:ae:d6:ea:b9:82:22:4d:8e: ba:b4:22:48:13:65:9f:1d:8d:25:be:0c:73:9e:9c: cd:8e:52:ed:06:e1:d5:80:1e:c5:ef:d2:8c:20:22: 1e:25:43:77:c1:6c:bb:fc:78:db:8f:2e:a9:2e:7b: 1b:7c:6e:0e:2a:7f:69:b4:81:67:d8:3e:63:d1:43: 32:4e:b4:08:5c:e8:83:0f:42:01:c9:d0:3b:63:4e: bb:46:67:1f:2e:cb:99:4b:e8:e8:5d:d1:07:39:fe: 5b:7f:a3:78:65:9c:ae:cc:00:0f:d7:7f:ad:43:d6: 08:33:95:a8:3a:2e:8f:da:db:d9:b7:19:7f:69:bb: de:00:a1:e7:a6:59:2f:80:71:17:3d:d0:12:8d:37: 79:f3:39:9b:70:ed:47:31:66:c0:2c:ad:a5:8d:14: 13:9a:d5:59:17:1b:f2:06:7f:a9:3f:9d:49:35:dd: dc:2c:f5:cc:00:09:29:ea:37:19:de:0b:85:94:74: bf:88:5e:a2:5f:3c:11:e3:8f:6b:20:eb:bd:0f:67: c6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:86:3F:EC:99:82:64:F0:F2:C9:AB:CD:90:96:75:75:AF:02:CF:38 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bdc4de21-9895-4d0a-8e2f-187812e1335d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.5.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:0d:e6:fe:50:95:75:34:5a:cf:c1:d4:dc:aa:1f:0c:ae:04: e1:23:5e:2c:d0:c5:1a:6a:5b:c5:90:d5:06:58:0e:c7:a7:96: 89:de:02:64:73:aa:5b:75:cc:0c:97:60:d3:73:e1:4e:1e:63: ed:3a:49:42:c4:77:94:59:97:6a:af:49:76:d1:0b:49:d4:3d: f1:2e:2f:6d:88:a7:5d:58:74:75:a9:f7:2d:5f:e5:2e:8e:a3: d8:6f:b6:c0:1f:a8:16:90:6a:8a:61:7f:9b:3a:a9:68:c1:84: 3e:e7:89:97:51:b4:8c:ce:e3:fd:db:4c:07:75:7a:d6:7f:92: 9a:70:83:43:06:e3:c7:4b:ce:7e:61:02:d7:4d:f2:23:7c:4a: 4a:b5:22:86:50:45:95:2a:a6:8f:de:9a:a2:33:0d:45:44:3e: f7:30:ef:40:16:f5:70:30:7a:fa:c7:7b:44:b8:05:a0:14:06: ba:22:06:97:a8:23:54:d1:e6:fa:f5:d7:c9:05:0f:d8:e1:bd: 71:0c:c3:7c:ed:06:29:6d:02:68:4c:7c:74:4f:4e:40:59:48: c2:62:a6:7a:c9:32:a5:7b:af:1b:f9:08:f6:ca:9c:53:a3:ee: d5:6f:ee:db:b3:1c:67:51:e1:a4:75:b5:29:22:60:7d:f7:04: 24:83:f0:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFv9O03DSrjLvUbKbEsT+0ABj7/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDA3WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGJjNDA0ZmMzZGJhNjYyMmVlZjdlMzY1ZDM4MDQzNzM0 MzliNjQ0YmI5OGQzNWM2N2YyZDVhN2ZjOTY0NmUzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkGjku4+DFAK5ZBQhnMIZFvCI2OGAL5vKXCfncMzXI3D3Y npzJ/+BVl2hz6qOBb9SiweOu1uq5giJNjrq0IkgTZZ8djSW+DHOenM2OUu0G4dWA HsXv0owgIh4lQ3fBbLv8eNuPLqkuext8bg4qf2m0gWfYPmPRQzJOtAhc6IMPQgHJ 0DtjTrtGZx8uy5lL6Ohd0Qc5/lt/o3hlnK7MAA/Xf61D1ggzlag6Lo/a29m3GX9p u94AoeemWS+AcRc90BKNN3nzOZtw7UcxZsAsraWNFBOa1VkXG/IGf6k/nUk13dws 9cwACSnqNxneC4WUdL+IXqJfPBHjj2sg670PZ8ZDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfYY/7JmCZPDyyavNkJZ1da8CzzgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2JkYzRkZTIxLTk4OTUtNGQwYS04ZTJmLTE4NzgxMmUxMzM1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAUwDQYJKoZIhvcNAQELBQADggEBAHwN5v5QlXU0Ws/B1NyqHwyuBOEj XizQxRpqW8WQ1QZYDsenloneAmRzqlt1zAyXYNNz4U4eY+06SULEd5RZl2qvSXbR C0nUPfEuL22Ip11YdHWp9y1f5S6Oo9hvtsAfqBaQaophf5s6qWjBhD7niZdRtIzO 4/3bTAd1etZ/kppwg0MG48dLzn5hAtdN8iN8Skq1IoZQRZUqpo/emqIzDUVEPvcw 70AW9XAwevrHe0S4BaAUBroiBpeoI1TR5vr118kFD9jhvXEMw3ztBiltAmhMfHRP TkBZSMJipnrJMqV7rxv5CPbKnFOj7tVv7tuzHGdR4aR1tSkiYH33BCSD8LI= -----END CERTIFICATE-----Generated at Sun Nov 15 21:41:52 2026 by rpki-client