$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c221708b-2fb3-40d7-9d91-a273c57bb3c3.roa File: c221708b-2fb3-40d7-9d91-a273c57bb3c3.roa (raw, json) Hash identifier: fw0KWshRvXIbznTbQ2DcldsJhp7WTI+kfGqm+FWEvXs= Subject key identifier: CA:7E:A1:E1:22:14:41:21:7E:4E:0C:9F:F3:4B:7D:E5:C5:75:65:F6 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 615BDB2EDA034116681578F5A0652E0EB99D2C8C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c221708b-2fb3-40d7-9d91-a273c57bb3c3.roa Signing time: Sat 24 Oct 2026 01:50:04 +0000 ROA not before: Sat 24 Oct 2026 01:50:04 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5b:db:2e:da:03:41:16:68:15:78:f5:a0:65:2e:0e:b9:9d:2c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:04 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=976ef073a7735d8a14f019931895e601f1191f5e5b3cd4f760b98c4f5d7d1a02, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:d2:a1:98:a7:c7:b7:31:bf:00:f1:76:2f: bd:c5:46:a2:0a:2b:3d:3f:d2:61:c0:f1:0f:1a:b3: d7:a2:3f:b6:f4:44:f1:43:bf:75:43:dd:6a:88:c6: 26:81:95:b4:1c:88:0e:2b:8b:ee:33:10:5e:e5:bb: 57:83:87:aa:15:08:8e:18:5f:b3:8d:19:5a:b4:35: 5c:8d:91:f4:7d:26:1a:c0:18:6c:ec:95:30:28:b8: da:e7:69:28:e3:c9:36:e3:24:a5:5d:1a:95:25:c3: 42:ca:cb:7e:c7:55:90:bd:eb:de:4d:9f:18:8b:92: 35:51:f9:d8:e2:eb:ea:9b:18:16:ba:4e:f2:69:07: df:a5:60:68:e5:a6:be:6c:20:9b:7c:bd:07:48:be: dd:8c:9a:4e:89:07:29:f5:a3:18:85:47:29:03:80: 73:04:11:cd:76:6e:16:23:b4:57:72:2a:ad:0a:cb: 86:63:80:ce:1a:cc:61:d9:af:c7:53:d1:7f:e2:ac: d6:b1:29:6d:57:e1:db:e0:c8:49:70:85:51:08:c8: 9f:e2:d8:5f:e8:47:c2:5a:ea:85:53:47:91:a7:a2: ec:5c:a1:67:3c:9a:a9:66:ce:e0:99:b8:f0:c1:84: c3:7d:43:d2:eb:d2:e3:2e:b1:d4:f1:08:45:aa:77: 60:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7E:A1:E1:22:14:41:21:7E:4E:0C:9F:F3:4B:7D:E5:C5:75:65:F6 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c221708b-2fb3-40d7-9d91-a273c57bb3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.43.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:2a:18:40:5e:a9:ee:eb:58:68:bb:9c:c9:19:89:1c:61:b0: 8b:12:0f:b1:fa:05:dd:9e:a9:cd:df:64:60:3a:6e:a3:94:de: a2:bd:a0:ef:cd:8d:e7:62:c3:07:2d:0f:58:04:16:e3:c6:6d: 5e:91:3a:02:62:bb:14:8b:f0:79:18:65:73:d3:00:bf:14:36: d0:eb:a5:26:51:f3:90:af:30:19:cc:a0:c9:0d:33:94:bd:b7: 45:f8:a8:0b:74:cb:ca:88:72:ef:b5:6e:da:90:ae:14:da:0d: 72:2b:bf:6a:ff:65:f8:5f:dc:3a:a7:85:e3:65:0e:ba:2c:0b: a5:cc:6e:77:65:a8:f5:ce:42:99:c0:de:18:f3:25:86:9c:73: 5b:85:88:bf:47:9b:74:08:27:68:bc:ef:f5:83:c9:23:89:1f: 1c:28:17:fb:4b:31:c2:64:47:22:87:44:8e:16:7c:83:f8:04: f1:8e:3d:c3:b7:85:1a:84:5b:2d:b6:16:f0:3b:dc:5b:38:a3: 0a:8d:f4:10:0e:ee:e8:5f:5b:de:d5:1e:76:01:1f:e6:5b:96: 5d:1d:64:ff:8b:b4:63:c0:9d:79:b2:a4:d7:38:af:17:8c:3f: 7d:23:d7:8d:2f:a9:2c:d6:ad:37:42:2d:3a:f1:f4:91:65:d7: 6f:48:c4:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYVvbLtoDQRZoFXj1oGUuDrmdLIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDA0WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzZlZjA3M2E3NzM1ZDhhMTRmMDE5OTMxODk1ZTYwMWYx MTkxZjVlNWIzY2Q0Zjc2MGI5OGM0ZjVkN2QxYTAyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2hNKhmKfHtzG/APF2L73FRqIKKz0/0mHA8Q8as9eiP7b0 RPFDv3VD3WqIxiaBlbQciA4ri+4zEF7lu1eDh6oVCI4YX7ONGVq0NVyNkfR9JhrA GGzslTAouNrnaSjjyTbjJKVdGpUlw0LKy37HVZC9695NnxiLkjVR+dji6+qbGBa6 TvJpB9+lYGjlpr5sIJt8vQdIvt2Mmk6JByn1oxiFRykDgHMEEc12bhYjtFdyKq0K y4ZjgM4azGHZr8dT0X/irNaxKW1X4dvgyElwhVEIyJ/i2F/oR8Ja6oVTR5Gnouxc oWc8mqlmzuCZuPDBhMN9Q9Lr0uMusdTxCEWqd2BbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyn6h4SIUQSF+Tgyf80t95cV1ZfYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2MyMjE3MDhiLTJmYjMtNDBkNy05ZDkxLWEyNzNjNTdiYjNjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCswDQYJKoZIhvcNAQELBQADggEBAFsqGEBeqe7rWGi7nMkZiRxhsIsS D7H6Bd2eqc3fZGA6bqOU3qK9oO/NjediwwctD1gEFuPGbV6ROgJiuxSL8HkYZXPT AL8UNtDrpSZR85CvMBnMoMkNM5S9t0X4qAt0y8qIcu+1btqQrhTaDXIrv2r/Zfhf 3DqnheNlDrosC6XMbndlqPXOQpnA3hjzJYacc1uFiL9Hm3QIJ2i87/WDySOJHxwo F/tLMcJkRyKHRI4WfIP4BPGOPcO3hRqEWy22FvA73Fs4owqN9BAO7uhfW97VHnYB H+Zbll0dZP+LtGPAnXmypNc4rxeMP30j140vqSzWrTdCLTrx9JFl129IxJ4= -----END CERTIFICATE-----Generated at Sun Nov 15 21:42:58 2026 by rpki-client