$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c221708b-2fb3-40d7-9d91-a273c57bb3c3.roa File: c221708b-2fb3-40d7-9d91-a273c57bb3c3.roa (raw, json) Hash identifier: AjOht0vJ8RVNpqJAHvEfYEV3xcIPAxK0U4L/CZhwUc4= Subject key identifier: B3:92:74:99:4B:09:EF:DE:0F:48:70:46:51:40:C9:D9:6E:AD:29:AF Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 69A7075CE634072E5D387D9E44A2E973DFDA97B3 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c221708b-2fb3-40d7-9d91-a273c57bb3c3.roa Signing time: Sun 17 May 2026 01:50:31 +0000 ROA not before: Sun 17 May 2026 01:50:31 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a7:07:5c:e6:34:07:2e:5d:38:7d:9e:44:a2:e9:73:df:da:97:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 17 01:50:31 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=8b60ff8a3ac05d963fa9fb9734f1fb26250fd6bbbfc6c22102ffef9ae1c0ca79, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:be:e3:e8:69:6b:76:65:dc:4b:a3:9a:22: d8:b4:a5:be:73:62:a1:1b:11:6a:0f:fe:02:67:18: ec:7f:cd:3d:cf:bc:b3:62:05:9e:86:8d:55:7c:eb: 97:2f:04:e2:ad:fe:ae:61:21:84:59:56:a7:48:ab: cf:d5:64:cf:09:53:00:12:78:77:35:76:c3:ee:06: e5:d7:a8:18:ed:dd:2c:c2:8a:a1:25:bf:65:ad:a7: b4:a5:db:a3:69:5e:f7:53:94:16:ca:e2:99:e9:2e: 48:66:72:1b:69:0d:19:08:92:15:67:30:47:79:3e: 63:19:6c:65:ed:35:a9:e1:f1:df:eb:71:bc:62:25: 8c:eb:da:66:a8:98:fd:c6:3c:39:08:b1:0c:34:d1: b2:34:00:9f:e8:c6:1d:af:5f:95:3a:f5:fb:dc:e0: b5:d4:0c:16:e6:c5:09:7c:06:7e:a7:f0:3d:eb:e4: fa:88:9c:d6:17:95:8e:d0:d9:e5:59:75:8d:d6:29: 17:96:e5:62:e8:58:fb:66:8d:3a:3e:b3:9c:b7:ee: e0:55:99:fc:72:c3:3c:77:d9:5a:84:fd:74:8e:27: e0:28:77:85:32:f2:fa:48:1f:a5:ac:b4:e4:6f:d0: a9:2e:d3:8a:5a:c1:5d:df:94:15:56:0f:a8:db:6f: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:92:74:99:4B:09:EF:DE:0F:48:70:46:51:40:C9:D9:6E:AD:29:AF X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c221708b-2fb3-40d7-9d91-a273c57bb3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.43.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:15:66:4a:c1:f2:50:03:24:48:9c:50:0e:e7:3b:53:0a:8b: 00:14:82:7a:e7:f1:48:19:e9:49:37:b1:9c:56:17:5b:3d:2e: 4b:1a:68:67:27:98:b1:7f:ec:40:e4:e7:a2:64:23:54:e9:4c: 60:ee:25:7f:48:8d:3a:92:30:4f:3a:58:ef:5a:53:a8:a9:ff: c4:df:f6:9d:b4:73:6f:80:9c:94:de:30:c4:5e:c0:2e:1b:23: ff:2d:64:20:f8:74:01:44:14:76:eb:e3:90:d7:5a:29:64:96: dc:48:19:e2:38:ba:5b:bc:ec:11:9c:86:88:b8:74:d3:d5:ce: 4a:23:85:79:b0:6f:8c:4a:95:47:72:0a:b6:5a:42:e2:4b:62: 32:7c:ac:3a:ee:cc:9d:74:5e:06:01:78:55:30:9b:08:4e:fd: 19:f3:15:98:b0:d2:38:f4:77:bd:f8:25:5b:89:b6:58:8f:da: 32:e5:72:af:03:72:b1:42:ca:6c:64:67:82:21:39:e3:c3:b4: f3:07:55:23:83:8b:c0:5f:40:0b:ef:4b:c5:ec:86:e6:ac:36: 01:81:73:d8:19:73:87:4e:9a:2d:cc:b3:e2:56:8e:6d:f8:17: c3:7c:47:56:c3:5a:7d:64:62:44:42:4f:98:28:0f:60:d6:2c: 4d:43:64:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaacHXOY0By5dOH2eRKLpc9/al7MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE3MDE1MDMxWhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjYwZmY4YTNhYzA1ZDk2M2ZhOWZiOTczNGYxZmIyNjI1 MGZkNmJiYmZjNmMyMjEwMmZmZWY5YWUxYzBjYTc5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAYL7j6GlrdmXcS6OaIti0pb5zYqEbEWoP/gJnGOx/zT3P vLNiBZ6GjVV865cvBOKt/q5hIYRZVqdIq8/VZM8JUwASeHc1dsPuBuXXqBjt3SzC iqElv2Wtp7Sl26NpXvdTlBbK4pnpLkhmchtpDRkIkhVnMEd5PmMZbGXtNanh8d/r cbxiJYzr2maomP3GPDkIsQw00bI0AJ/oxh2vX5U69fvc4LXUDBbmxQl8Bn6n8D3r 5PqInNYXlY7Q2eVZdY3WKReW5WLoWPtmjTo+s5y37uBVmfxywzx32VqE/XSOJ+Ao d4Uy8vpIH6WstORv0Kku04pawV3flBVWD6jbb2L3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs5J0mUsJ794PSHBGUUDJ2W6tKa8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2MyMjE3MDhiLTJmYjMtNDBkNy05ZDkxLWEyNzNjNTdiYjNjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCswDQYJKoZIhvcNAQELBQADggEBAEsVZkrB8lADJEicUA7nO1MKiwAU gnrn8UgZ6Uk3sZxWF1s9LksaaGcnmLF/7EDk56JkI1TpTGDuJX9IjTqSME86WO9a U6ip/8Tf9p20c2+AnJTeMMRewC4bI/8tZCD4dAFEFHbr45DXWilkltxIGeI4ulu8 7BGchoi4dNPVzkojhXmwb4xKlUdyCrZaQuJLYjJ8rDruzJ10XgYBeFUwmwhO/Rnz FZiw0jj0d734JVuJtliP2jLlcq8DcrFCymxkZ4IhOePDtPMHVSODi8BfQAvvS8Xs huasNgGBc9gZc4dOmi3Ms+JWjm34F8N8R1bDWn1kYkRCT5goD2DWLE1DZG4= -----END CERTIFICATE-----Generated at Sat Jun 13 09:27:43 2026 by rpki-client