$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c2811169-c1c6-4559-b237-580a584aa58a.roa File: c2811169-c1c6-4559-b237-580a584aa58a.roa (raw, json) Hash identifier: o8haG1/I+w65SxuB2ZarFgiyd0VGu5wmNDTrMh7Oed4= Subject key identifier: 68:4C:7F:18:8E:E4:57:A6:1B:40:B4:20:00:75:0E:59:DE:52:85:BF Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 50207F554AD2D41F250BA88443295DDD474F0923 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c2811169-c1c6-4559-b237-580a584aa58a.roa Signing time: Sat 24 Oct 2026 01:50:30 +0000 ROA not before: Sat 24 Oct 2026 01:50:30 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:20:7f:55:4a:d2:d4:1f:25:0b:a8:84:43:29:5d:dd:47:4f:09:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:30 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=08c2bc2a38ccc1f27c674986cda04b086df405964f63ec0b3f08a3be61fa1f08, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:7e:22:ea:69:70:ed:8d:05:a6:28:82:a1: 54:d9:2d:39:a5:eb:c0:30:1a:8c:f2:27:44:3c:45: cc:6a:04:fc:f0:1b:e5:87:d9:8a:f2:26:e7:43:e1: 11:d6:3a:c5:55:df:50:5b:67:b6:5d:3d:21:ef:14: 35:9c:7c:47:c8:e1:3c:c8:2a:95:19:31:90:2a:93: c5:36:45:9f:0c:be:a9:5d:6e:ba:01:fa:61:bc:f4: 92:31:ab:3e:e9:a1:11:de:d1:c5:4c:6b:b2:65:de: c0:69:5c:8c:c2:f0:2a:a0:34:f6:4a:63:aa:89:06: 38:01:b6:69:e9:8f:ed:f4:0f:9e:2c:61:b8:17:fe: 5c:dc:e2:6b:c6:95:7d:7d:c1:8b:33:6c:6b:a3:13: b5:36:3f:4d:d5:43:0f:a4:63:7b:94:c4:4b:6c:91: b9:cc:0e:ad:42:d3:c1:50:49:f3:2b:14:4b:14:79: ae:f4:64:9f:f9:2a:8b:a6:cf:a9:e7:f8:e2:f8:ea: 35:d5:07:f0:d7:39:f6:da:15:52:d0:ff:b9:6b:0c: ed:9f:f9:29:05:1a:83:73:2d:48:cb:46:0a:24:7b: 1f:1c:3e:86:e2:83:53:4c:ab:61:92:3a:69:bb:19: 5e:71:cc:8e:ef:1a:4d:49:51:01:8a:d5:d8:fb:c7: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4C:7F:18:8E:E4:57:A6:1B:40:B4:20:00:75:0E:59:DE:52:85:BF X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c2811169-c1c6-4559-b237-580a584aa58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.34.0/24 Signature Algorithm: sha256WithRSAEncryption 59:6b:a6:67:95:ff:11:79:0b:5f:c1:c9:4c:83:64:e1:b4:02: 35:ae:d1:31:87:e5:e6:8f:d9:30:34:42:d9:ca:69:46:47:17: d4:47:2d:03:06:13:c1:ef:53:15:89:77:2e:e1:c2:59:11:8c: a9:c5:38:d3:e8:c1:5a:6f:2f:ac:93:42:0a:c6:e8:d0:df:b6: 25:22:a9:f1:9f:7b:85:78:d9:53:47:34:64:6a:13:3a:55:2a: 69:65:bf:ed:bf:21:e5:88:ba:83:70:68:e2:82:78:03:97:f5: 75:1a:9c:9d:55:c7:95:e6:a3:84:1c:6e:2b:a6:59:9c:d4:58: 51:be:ca:e0:b3:d1:bd:99:fb:0c:07:e4:40:37:9e:21:bd:a0: a8:fc:72:1d:49:67:37:55:4c:72:44:7e:25:fc:20:e4:d4:fa: 55:83:4d:e2:6c:d7:40:4e:1c:08:7c:34:cd:9a:59:33:79:7b: e3:4b:eb:bf:0f:92:b9:f9:c2:26:f1:7d:ef:a2:5c:2b:6f:88: cd:95:77:63:c9:9c:cd:94:22:12:22:1b:5c:4c:64:c2:b5:00: b7:f4:12:28:c0:3e:b9:c0:46:82:c3:5c:65:09:c6:87:18:ed: ab:43:1f:57:2d:ab:88:1b:f6:29:0b:78:df:49:1d:a4:6d:42: aa:75:82:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUCB/VUrS1B8lC6iEQyld3UdPCSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDMwWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGMyYmMyYTM4Y2NjMWYyN2M2NzQ5ODZjZGEwNGIwODZk ZjQwNTk2NGY2M2VjMGIzZjA4YTNiZTYxZmExZjA4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6DX4i6mlw7Y0FpiiCoVTZLTml68AwGozyJ0Q8RcxqBPzw G+WH2YryJudD4RHWOsVV31BbZ7ZdPSHvFDWcfEfI4TzIKpUZMZAqk8U2RZ8Mvqld broB+mG89JIxqz7poRHe0cVMa7Jl3sBpXIzC8CqgNPZKY6qJBjgBtmnpj+30D54s YbgX/lzc4mvGlX19wYszbGujE7U2P03VQw+kY3uUxEtskbnMDq1C08FQSfMrFEsU ea70ZJ/5Koumz6nn+OL46jXVB/DXOfbaFVLQ/7lrDO2f+SkFGoNzLUjLRgokex8c Pobig1NMq2GSOmm7GV5xzI7vGk1JUQGK1dj7x5y7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaEx/GI7kV6YbQLQgAHUOWd5Shb8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2MyODExMTY5LWMxYzYtNDU1OS1iMjM3LTU4MGE1ODRhYTU4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCIwDQYJKoZIhvcNAQELBQADggEBAFlrpmeV/xF5C1/ByUyDZOG0AjWu 0TGH5eaP2TA0QtnKaUZHF9RHLQMGE8HvUxWJdy7hwlkRjKnFONPowVpvL6yTQgrG 6NDftiUiqfGfe4V42VNHNGRqEzpVKmllv+2/IeWIuoNwaOKCeAOX9XUanJ1Vx5Xm o4QcbiumWZzUWFG+yuCz0b2Z+wwH5EA3niG9oKj8ch1JZzdVTHJEfiX8IOTU+lWD TeJs10BOHAh8NM2aWTN5e+NL678Pkrn5wibxfe+iXCtviM2Vd2PJnM2UIhIiG1xM ZMK1ALf0EijAPrnARoLDXGUJxocY7atDH1ctq4gb9ikLeN9JHaRtQqp1gis= -----END CERTIFICATE-----Generated at Thu Nov 5 07:20:07 2026 by rpki-client