$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa File: c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa (raw, json) Hash identifier: RgL5EtNobvY41RcUy13UAd6tV1KKWnw7Ce3WCxLpoRI= Subject key identifier: 6E:75:BB:5C:FB:73:BA:C5:86:17:54:F8:8C:63:AE:40:E2:60:45:61 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4EAA3259869F7E8226A0820D68A477D7892F9FA3 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa Signing time: Tue 17 Feb 2026 02:50:18 +0000 ROA not before: Tue 17 Feb 2026 02:50:18 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:aa:32:59:86:9f:7e:82:26:a0:82:0d:68:a4:77:d7:89:2f:9f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 17 02:50:18 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=3e960417b96f634ee37ad9581e7e8a2ee332de45b36d736800da79b839f64eff, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:b3:7d:2e:80:68:b5:57:24:51:9c:62:c2:ed: 0a:54:7e:d8:7a:de:26:8c:0e:e5:31:20:d3:4f:35: 34:6e:65:b9:c3:2b:1f:97:c1:be:ec:06:48:c7:4a: a3:5d:b3:06:b7:f6:cf:e9:24:06:44:d5:d0:9c:0a: 66:42:0b:cb:17:a2:6f:e9:f2:0a:0b:a1:10:94:c0: 71:2c:4a:aa:cb:59:62:e3:83:b6:31:c8:88:6d:71: 27:d1:96:cd:73:f1:9f:07:3e:83:c3:3c:1d:11:66: 85:a3:6b:81:fa:86:f2:0c:84:78:c2:a7:56:d2:04: e3:c3:a0:17:2a:02:0c:18:c6:76:a0:a1:79:a5:e2: 98:89:09:7d:a8:da:64:00:94:bb:88:fd:c5:39:49: 62:9a:1f:00:5e:a2:13:5f:58:38:b9:16:b2:9d:f1: dd:b2:77:40:a7:88:ab:58:32:e1:6b:a4:14:ca:ce: f0:db:e8:57:da:f8:f9:9c:ed:60:70:27:15:fb:0f: 84:41:a4:86:2d:b8:bb:88:81:e7:4e:9b:75:91:77: e3:fc:6c:aa:8c:b5:70:92:b9:1c:33:b5:b3:78:38: 87:c9:20:7e:ff:c5:a2:c9:39:9f:f5:8f:1c:25:6e: dc:df:71:25:70:6c:ee:61:f7:b6:c6:56:79:9b:c6: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:75:BB:5C:FB:73:BA:C5:86:17:54:F8:8C:63:AE:40:E2:60:45:61 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.3.0/24 Signature Algorithm: sha256WithRSAEncryption 58:ec:1b:75:52:5e:f6:6d:83:19:86:27:6c:3b:48:95:52:13: 61:73:20:71:53:f0:4d:fd:72:51:64:df:f0:7a:e1:c8:a0:d3: 41:45:da:4a:56:5d:4a:33:f1:b2:92:7f:26:72:00:02:39:26: 9d:bd:36:04:bb:ac:0b:a6:da:e4:07:2e:86:ad:d5:88:27:59: 7b:28:eb:e9:47:e0:87:9a:39:1d:94:f3:81:5f:76:d9:cc:2f: 5c:91:52:bd:a3:4b:5e:34:ce:70:44:1c:fa:05:5b:88:b4:b3: 71:c6:6d:78:13:11:a4:d2:42:47:b1:51:28:d0:0e:7e:bd:82: 1b:b2:d6:65:4a:6f:f9:59:4c:43:6b:e9:27:85:6a:a3:44:8e: 3a:77:04:46:d8:1e:f1:ec:a6:71:68:26:f0:3a:5a:c6:90:46: 93:78:15:54:a3:70:e9:87:fe:1c:81:c5:50:ba:38:d4:18:b0: 79:21:f2:24:e3:ff:a0:de:07:33:04:69:14:4a:62:c8:1d:8f: c6:95:93:98:e5:2f:39:e3:0f:11:5f:ef:e6:2f:fa:17:52:0a: ad:1d:45:41:35:1a:22:26:21:91:99:5d:b2:01:e7:36:66:7f: 3f:8e:a8:a1:da:37:dd:6d:3c:05:e0:f9:01:73:1e:8e:ef:eb: 75:5e:1c:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTqoyWYaffoImoIINaKR314kvn6MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjE3MDI1MDE4WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTk2MDQxN2I5NmY2MzRlZTM3YWQ5NTgxZTdlOGEyZWUz MzJkZTQ1YjM2ZDczNjgwMGRhNzliODM5ZjY0ZWZmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD7s30ugGi1VyRRnGLC7QpUfth63iaMDuUxINNPNTRuZbnD Kx+Xwb7sBkjHSqNdswa39s/pJAZE1dCcCmZCC8sXom/p8goLoRCUwHEsSqrLWWLj g7YxyIhtcSfRls1z8Z8HPoPDPB0RZoWja4H6hvIMhHjCp1bSBOPDoBcqAgwYxnag oXml4piJCX2o2mQAlLuI/cU5SWKaHwBeohNfWDi5FrKd8d2yd0CniKtYMuFrpBTK zvDb6Ffa+Pmc7WBwJxX7D4RBpIYtuLuIgedOm3WRd+P8bKqMtXCSuRwztbN4OIfJ IH7/xaLJOZ/1jxwlbtzfcSVwbO5h97bGVnmbxh6BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbnW7XPtzusWGF1T4jGOuQOJgRWEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2MwYzRmNjU0LWEzZWEtNDkwZi05NDM2LTE4MmUwZWVlMGM0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAMwDQYJKoZIhvcNAQELBQADggEBAFjsG3VSXvZtgxmGJ2w7SJVSE2Fz IHFT8E39clFk3/B64cig00FF2kpWXUoz8bKSfyZyAAI5Jp29NgS7rAum2uQHLoat 1YgnWXso6+lH4IeaOR2U84FfdtnML1yRUr2jS140znBEHPoFW4i0s3HGbXgTEaTS QkexUSjQDn69ghuy1mVKb/lZTENr6SeFaqNEjjp3BEbYHvHspnFoJvA6WsaQRpN4 FVSjcOmH/hyBxVC6ONQYsHkh8iTj/6DeBzMEaRRKYsgdj8aVk5jlLznjDxFf7+Yv +hdSCq0dRUE1GiImIZGZXbIB5zZmfz+OqKHaN91tPAXg+QFzHo7v63VeHN8= -----END CERTIFICATE-----Generated at Mon Mar 2 04:27:24 2026 by rpki-client