$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cb336a48-8f3f-4a38-8d83-16df977c3695.roa File: cb336a48-8f3f-4a38-8d83-16df977c3695.roa (raw, json) Hash identifier: /9BWK/3riY4oUJY7zsTYidICO9rV2VRz8rDbKamXpBk= Subject key identifier: 69:C6:C3:67:BF:1D:04:9D:F7:47:4E:60:A3:1F:DE:B6:0A:ED:55:F6 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4FD8EF6D709BA304DCF897B2031AAE958A39E522 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cb336a48-8f3f-4a38-8d83-16df977c3695.roa Signing time: Sat 24 Oct 2026 02:02:59 +0000 ROA not before: Sat 24 Oct 2026 02:02:59 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d8:ef:6d:70:9b:a3:04:dc:f8:97:b2:03:1a:ae:95:8a:39:e5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 02:02:59 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=3eb4beb7a2e0ab0fee4738e6feafb601d015683fc2d110626be26f03cb2e183f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:fe:1a:45:ba:a9:ae:31:7f:fd:b3:1b:a9: f4:9e:ff:42:52:fd:aa:bf:60:a3:3e:62:9f:93:a5: ff:93:c9:97:7e:32:cd:e8:0e:7a:39:4f:5a:9f:2f: f4:20:28:b9:a6:35:84:b9:e3:95:77:0a:0a:13:d9: 0a:82:2e:1c:1f:5c:5b:02:85:24:9d:45:3b:8a:de: 56:63:05:4f:a5:19:98:a2:b6:96:59:b2:b4:75:94: e0:e1:59:55:43:9f:48:8c:59:4d:e5:ae:58:83:88: af:e6:8c:62:c1:be:4f:9c:f2:25:28:f2:17:b2:01: 43:85:5e:6c:f3:0f:b5:8e:7d:65:28:29:e1:74:9b: 4d:0d:98:29:7d:91:94:57:22:e6:a9:51:c4:11:17: da:49:ef:f1:f5:d9:29:b1:57:72:ee:2b:d4:6d:4e: 2a:c0:f9:c1:f4:3f:e7:5e:25:d4:b3:5c:1c:86:73: 49:13:1e:73:92:ed:2c:77:63:0f:82:c2:76:c9:1b: 0b:6d:c1:f0:a9:41:af:85:50:cb:86:07:86:a8:ce: 65:77:e9:c2:12:fc:1c:8f:5e:7b:a0:a6:2b:03:90: ce:a8:ac:c9:f3:8c:d4:8a:e1:ba:93:cc:3f:95:c2: bb:39:63:f3:ac:82:3f:71:1c:4a:c2:c4:0d:39:49: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C6:C3:67:BF:1D:04:9D:F7:47:4E:60:A3:1F:DE:B6:0A:ED:55:F6 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cb336a48-8f3f-4a38-8d83-16df977c3695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.39.0/24 Signature Algorithm: sha256WithRSAEncryption 77:7d:1b:9c:e1:11:e0:7f:39:4e:74:83:f7:8b:a8:9b:3b:32: fd:17:7f:c6:f1:99:66:8f:cc:8f:10:9a:33:ea:3f:91:a5:67: 34:91:a8:17:2b:a8:99:93:75:06:93:a3:c9:09:db:81:85:50: f6:69:10:8a:fb:2c:ba:6f:33:8f:93:56:41:c5:9b:70:33:f9: f7:fc:54:38:12:27:ed:b5:e6:98:4e:27:74:b8:41:91:16:70: 6c:4a:bf:ea:dc:8a:a2:f0:2a:47:ad:da:7e:7c:88:0d:41:48: d9:64:15:57:4b:10:a9:85:79:26:f7:42:10:e3:88:d0:18:dc: b5:a1:7a:2a:25:39:b6:83:37:bc:22:b1:3e:89:de:c9:20:d1: ec:9b:99:02:02:9a:18:6d:00:0c:5b:d0:91:ce:ce:35:69:16: 1a:01:9e:e8:52:a2:85:ef:02:ad:3b:58:06:9f:6c:2d:17:b5: fc:80:b8:6b:fb:71:0e:16:41:9b:b4:3e:ed:72:04:83:ff:8d: fc:3a:43:d5:5d:21:64:02:71:c3:3f:90:46:0d:47:e2:7e:b6: 19:e1:72:57:5d:ad:75:70:20:be:4e:53:5b:b2:f4:fb:2e:cd: 07:56:c3:0d:95:2c:b5:b6:63:fe:66:8d:5a:65:9b:b6:35:fb: b3:40:c6:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT9jvbXCbowTc+JeyAxqulYo55SIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDIwMjU5WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWI0YmViN2EyZTBhYjBmZWU0NzM4ZTZmZWFmYjYwMWQw MTU2ODNmYzJkMTEwNjI2YmUyNmYwM2NiMmUxODNmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGmP4aRbqprjF//bMbqfSe/0JS/aq/YKM+Yp+Tpf+TyZd+ Ms3oDno5T1qfL/QgKLmmNYS545V3CgoT2QqCLhwfXFsChSSdRTuK3lZjBU+lGZii tpZZsrR1lODhWVVDn0iMWU3lrliDiK/mjGLBvk+c8iUo8heyAUOFXmzzD7WOfWUo KeF0m00NmCl9kZRXIuapUcQRF9pJ7/H12SmxV3LuK9RtTirA+cH0P+deJdSzXByG c0kTHnOS7Sx3Yw+CwnbJGwttwfCpQa+FUMuGB4aozmV36cIS/ByPXnugpisDkM6o rMnzjNSK4bqTzD+Vwrs5Y/Osgj9xHErCxA05Sc55AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUacbDZ78dBJ33R05gox/etgrtVfYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2NiMzM2YTQ4LThmM2YtNGEzOC04ZDgzLTE2ZGY5NzdjMzY5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCcwDQYJKoZIhvcNAQELBQADggEBAHd9G5zhEeB/OU50g/eLqJs7Mv0X f8bxmWaPzI8QmjPqP5GlZzSRqBcrqJmTdQaTo8kJ24GFUPZpEIr7LLpvM4+TVkHF m3Az+ff8VDgSJ+215phOJ3S4QZEWcGxKv+rciqLwKket2n58iA1BSNlkFVdLEKmF eSb3QhDjiNAY3LWheiolObaDN7wisT6J3skg0eybmQICmhhtAAxb0JHOzjVpFhoB nuhSooXvAq07WAafbC0XtfyAuGv7cQ4WQZu0Pu1yBIP/jfw6Q9VdIWQCccM/kEYN R+J+thnhclddrXVwIL5OU1uy9PsuzQdWww2VLLW2Y/5mjVplm7Y1+7NAxp8= -----END CERTIFICATE-----Generated at Sun Nov 15 21:43:34 2026 by rpki-client