$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cb336a48-8f3f-4a38-8d83-16df977c3695.roa File: cb336a48-8f3f-4a38-8d83-16df977c3695.roa (raw, json) Hash identifier: fdwMFE1VkQ5uovXqkkfCdGC5TtMVVd2lmhHJtOy073c= Subject key identifier: 1C:9C:6E:3F:48:0C:B5:0A:A8:33:BA:12:E7:06:B9:73:FB:49:93:62 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 48F408DE55766F4C1AF8AF063E49D7515B19684A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cb336a48-8f3f-4a38-8d83-16df977c3695.roa Signing time: Sun 17 May 2026 02:00:05 +0000 ROA not before: Sun 17 May 2026 02:00:05 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f4:08:de:55:76:6f:4c:1a:f8:af:06:3e:49:d7:51:5b:19:68:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 17 02:00:05 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=9115ab13ca5e069069aa2f68728d0c86654ae8d0dd4a572a63b754b8b634a59e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:44:f1:43:96:d2:ae:02:d1:16:c9:dd:77: 77:83:e0:d7:7b:1e:fb:42:f4:b9:18:a5:85:4d:49: ab:a8:56:00:70:82:94:d5:07:0e:b3:63:73:4a:b0: 0f:f3:61:8e:87:81:d6:cb:d5:27:fc:1b:93:bb:b4: a4:c0:c8:7d:14:25:37:8a:19:95:2a:21:3d:5c:3d: 63:d3:6d:bf:c7:96:16:ed:7e:81:3c:cc:b9:d6:91: 0a:88:ab:59:8c:cd:97:06:ae:2f:56:14:23:bd:e6: ee:e9:37:cc:7f:b6:ae:70:33:f4:0a:17:d3:9a:8a: 45:1c:6e:10:8e:8c:c4:af:a5:8a:5e:ce:52:c1:7d: 23:03:39:76:af:23:1c:88:10:1b:95:16:36:19:62: f3:52:62:8a:39:fe:ae:d7:7e:7d:3f:eb:c0:56:23: 70:33:75:32:41:73:57:07:7e:3c:e9:03:6f:13:71: f2:04:2c:47:d7:5a:c8:68:2b:0b:2f:1d:f5:f9:e6: 94:41:a9:62:e5:7b:7c:58:36:42:89:13:01:45:b2: 1f:cf:66:e6:26:dc:21:e5:ab:83:ea:87:8f:62:41: 0a:fe:63:d7:ab:fa:9c:7b:f1:fa:9b:9e:8d:1c:d5: d6:b5:21:c1:8d:5b:82:fb:c1:20:03:7f:63:09:06: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9C:6E:3F:48:0C:B5:0A:A8:33:BA:12:E7:06:B9:73:FB:49:93:62 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cb336a48-8f3f-4a38-8d83-16df977c3695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.39.0/24 Signature Algorithm: sha256WithRSAEncryption 13:fa:f9:9a:24:4f:9d:b8:c6:6f:f7:5a:e3:c5:14:96:de:ea: 81:7a:bb:aa:bf:dc:2b:a5:aa:3f:fb:4e:33:73:b4:da:65:69: 00:4c:36:a5:01:88:47:8c:70:80:b1:ef:a9:28:8c:6e:1e:89: 27:fb:7b:a0:0c:95:48:eb:9d:ae:76:c8:13:9f:59:81:29:11: 44:ff:40:8a:ea:a5:74:34:19:4e:cd:09:d9:df:9f:24:a7:bf: 2e:d8:76:20:7d:73:09:48:61:cc:df:b0:8a:e3:da:34:5a:4e: a7:70:86:9e:54:66:34:50:87:4f:84:c2:ce:9d:cf:1d:96:81: b0:ec:63:e2:8d:94:e1:90:a8:4b:d0:bc:8d:b0:64:69:ff:cc: 6a:78:6c:77:7e:9c:d5:e5:bd:23:29:13:5f:ab:c1:96:71:08: 4c:17:c1:0c:3a:34:9e:f5:63:05:d9:c7:0a:d6:5f:e7:5b:75: 74:ae:97:b8:0d:e2:b5:00:ab:31:56:4e:2a:3c:30:ff:2b:bb: 8b:c9:b0:59:39:23:a2:1e:1b:8a:c0:d5:60:9a:18:26:58:ce: 50:f6:5a:11:a8:a9:2f:c2:93:4c:00:bd:f7:86:32:d2:d3:ee: ac:19:62:d1:6f:b6:da:2b:e5:8c:5d:44:f2:4d:9e:64:6d:c4: 8e:8d:bd:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSPQI3lV2b0wa+K8GPknXUVsZaEowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE3MDIwMDA1WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTE1YWIxM2NhNWUwNjkwNjlhYTJmNjg3MjhkMGM4NjY1 NGFlOGQwZGQ0YTU3MmE2M2I3NTRiOGI2MzRhNTllMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3pkTxQ5bSrgLRFsndd3eD4Nd7HvtC9LkYpYVNSauoVgBw gpTVBw6zY3NKsA/zYY6HgdbL1Sf8G5O7tKTAyH0UJTeKGZUqIT1cPWPTbb/Hlhbt foE8zLnWkQqIq1mMzZcGri9WFCO95u7pN8x/tq5wM/QKF9OaikUcbhCOjMSvpYpe zlLBfSMDOXavIxyIEBuVFjYZYvNSYoo5/q7Xfn0/68BWI3AzdTJBc1cHfjzpA28T cfIELEfXWshoKwsvHfX55pRBqWLle3xYNkKJEwFFsh/PZuYm3CHlq4Pqh49iQQr+ Y9er+px78fqbno0c1da1IcGNW4L7wSADf2MJBo23AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHJxuP0gMtQqoM7oS5wa5c/tJk2IwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2NiMzM2YTQ4LThmM2YtNGEzOC04ZDgzLTE2ZGY5NzdjMzY5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCcwDQYJKoZIhvcNAQELBQADggEBABP6+ZokT524xm/3WuPFFJbe6oF6 u6q/3Culqj/7TjNztNplaQBMNqUBiEeMcICx76kojG4eiSf7e6AMlUjrna52yBOf WYEpEUT/QIrqpXQ0GU7NCdnfnySnvy7YdiB9cwlIYczfsIrj2jRaTqdwhp5UZjRQ h0+Ews6dzx2WgbDsY+KNlOGQqEvQvI2wZGn/zGp4bHd+nNXlvSMpE1+rwZZxCEwX wQw6NJ71YwXZxwrWX+dbdXSul7gN4rUAqzFWTio8MP8ru4vJsFk5I6IeG4rA1WCa GCZYzlD2WhGoqS/Ck0wAvfeGMtLT7qwZYtFvttor5YxdRPJNnmRtxI6NvcQ= -----END CERTIFICATE-----Generated at Sat Jun 13 09:27:36 2026 by rpki-client