$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa File: dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa (raw, json) Hash identifier: 5UcTt8SCTzqTWBFU4f1L4GHncEiqA0BnZKJDLB23PUg= Subject key identifier: D2:54:66:8B:8D:5E:EC:DA:F0:E0:19:88:E5:E0:C2:EE:61:09:AF:08 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2F99EEC6736E77B829E2122F7813CF922A85E4FC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa Signing time: Mon 27 Jul 2026 02:50:09 +0000 ROA not before: Mon 27 Jul 2026 02:50:09 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:99:ee:c6:73:6e:77:b8:29:e2:12:2f:78:13:cf:92:2a:85:e4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 27 02:50:09 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=30f9dc75d16d1f95cd571df2132027d65ff0dd0a9a96547dee3d502b9f4d4f96, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:1d:b8:c9:0d:67:fd:a2:67:90:e6:ef:41: 06:cb:3f:78:8c:cd:f7:76:ac:d6:10:66:7f:63:49: 4d:e6:26:70:11:a9:9b:a9:1f:69:46:79:40:a5:d7: 44:37:32:75:3e:11:c0:fe:51:9c:d7:df:b7:6b:01: c7:ed:26:26:62:da:89:c3:f1:f5:49:bd:93:f4:32: 30:af:8f:54:e6:30:a2:91:a8:19:50:be:65:b2:c3: c9:20:36:15:fa:ab:9e:c4:40:ac:f7:d9:f0:a4:6a: 82:12:92:df:06:cd:76:ff:7f:45:d8:0d:cb:ae:d8: 68:b3:23:63:ea:f9:52:50:c8:78:df:7d:78:1c:05: bf:5d:8e:ba:1e:8c:ad:60:c6:83:f6:25:60:08:df: 48:37:b4:1d:ce:8e:8d:c0:a0:c8:27:5f:43:76:19: b3:06:d9:f4:28:71:7a:5c:6c:b0:31:52:4e:30:91: 78:97:66:f4:df:94:55:56:68:01:a9:5e:fa:b1:71: 99:82:af:df:6a:25:ca:ca:7e:13:61:e5:5f:67:21: 58:be:bc:b4:13:b5:31:95:53:27:05:59:ae:e1:e5: 6a:9d:a2:71:c6:ec:ad:eb:78:1e:e2:8b:89:a9:4c: aa:4c:88:fc:12:50:79:77:f5:df:4c:0d:2a:0b:03: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:54:66:8B:8D:5E:EC:DA:F0:E0:19:88:E5:E0:C2:EE:61:09:AF:08 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.11.0/24 Signature Algorithm: sha256WithRSAEncryption 55:60:a5:1d:eb:9f:e4:7b:55:d3:77:1d:d2:6e:22:69:d2:e1: ff:b5:16:58:3a:fc:1e:1d:44:29:92:0b:3f:08:fb:fb:10:22: 06:f9:b4:3f:75:29:c2:57:cd:b3:f1:3a:cd:59:be:d7:f9:03: 78:46:b6:7c:8c:39:20:f7:12:57:f9:84:05:84:99:7c:b2:44: 5b:b9:6d:ee:d3:28:8d:1d:c8:ae:f6:05:87:27:e7:90:a2:b5: 81:9b:60:f4:12:3a:35:1a:46:3a:66:84:84:4b:cd:fc:e6:20: 0e:5c:84:8a:26:b7:d3:8d:45:e5:12:61:9c:6c:62:c2:0c:99: a8:52:b0:7b:a3:0b:ed:c4:5f:b0:bf:a7:9a:ca:0a:1c:55:5c: ab:bd:92:bc:e3:cc:b5:37:25:28:e8:fd:54:41:43:73:92:eb: fb:cc:6c:2a:db:c2:26:49:39:a3:df:2b:84:85:64:db:51:0f: 91:28:eb:00:ae:1a:8d:e7:bb:2e:75:b6:a2:c3:99:b1:0d:e0: 37:59:a2:58:69:e9:26:15:4b:f1:fa:ae:7f:43:42:f8:c8:e9: 92:80:47:41:39:bc:18:05:0f:1e:99:1c:fa:ef:a5:a6:a3:4f: 8e:5a:bd:5b:2a:01:dd:ce:e3:26:ec:48:d4:85:18:16:36:39: d0:d8:d7:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL5nuxnNud7gp4hIveBPPkiqF5PwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzI3MDI1MDA5WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGY5ZGM3NWQxNmQxZjk1Y2Q1NzFkZjIxMzIwMjdkNjVm ZjBkZDBhOWE5NjU0N2RlZTNkNTAyYjlmNGQ0Zjk2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC7x24yQ1n/aJnkObvQQbLP3iMzfd2rNYQZn9jSU3mJnAR qZupH2lGeUCl10Q3MnU+EcD+UZzX37drAcftJiZi2onD8fVJvZP0MjCvj1TmMKKR qBlQvmWyw8kgNhX6q57EQKz32fCkaoISkt8GzXb/f0XYDcuu2GizI2Pq+VJQyHjf fXgcBb9djroejK1gxoP2JWAI30g3tB3Ojo3AoMgnX0N2GbMG2fQocXpcbLAxUk4w kXiXZvTflFVWaAGpXvqxcZmCr99qJcrKfhNh5V9nIVi+vLQTtTGVUycFWa7h5Wqd onHG7K3reB7ii4mpTKpMiPwSUHl39d9MDSoLA4NhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0lRmi41e7Nrw4BmI5eDC7mEJrwgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RjODIyYzAxLTE3MTctNGU0NS1hNWE4LTNhNWRjOTE2Yzc2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAswDQYJKoZIhvcNAQELBQADggEBAFVgpR3rn+R7VdN3HdJuImnS4f+1 Flg6/B4dRCmSCz8I+/sQIgb5tD91KcJXzbPxOs1Zvtf5A3hGtnyMOSD3Elf5hAWE mXyyRFu5be7TKI0dyK72BYcn55CitYGbYPQSOjUaRjpmhIRLzfzmIA5chIomt9ON ReUSYZxsYsIMmahSsHujC+3EX7C/p5rKChxVXKu9krzjzLU3JSjo/VRBQ3OS6/vM bCrbwiZJOaPfK4SFZNtRD5Eo6wCuGo3nuy51tqLDmbEN4DdZolhp6SYVS/H6rn9D QvjI6ZKAR0E5vBgFDx6ZHPrvpaajT45avVsqAd3O4ybsSNSFGBY2OdDY13I= -----END CERTIFICATE-----Generated at Wed Jul 29 00:42:33 2026 by rpki-client