$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa File: dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa (raw, json) Hash identifier: 9NV4htTBhxLKg6N37CBqLvnA0wOGiiVMBE1CBnq0DSc= Subject key identifier: 38:54:6B:7C:F1:94:6A:26:79:FB:5C:78:D4:81:39:3E:AC:99:D5:F1 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3D90DA6234C5CDCDA668896042E63127C9317521 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa Signing time: Mon 26 Oct 2026 02:50:06 +0000 ROA not before: Mon 26 Oct 2026 02:50:06 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:90:da:62:34:c5:cd:cd:a6:68:89:60:42:e6:31:27:c9:31:75:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 26 02:50:06 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=f751ffc8688f365a69f6a5a05d6e0868b5609f8be8996a6533a7a7648bf88737, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:22:23:72:cb:67:6e:5e:7f:e4:70:61:ea: 7c:d0:e9:88:41:f9:0d:84:d9:fb:51:ef:3c:e0:20: 7c:45:62:19:dc:d9:e7:f2:15:96:f6:55:eb:bd:83: 22:85:ad:f5:24:4e:18:64:c8:38:5a:d3:15:f7:58: 01:4e:35:f4:72:96:f1:b8:7e:98:0a:9a:11:d4:b7: 01:8c:8c:c0:69:de:92:f2:a5:0f:7e:bd:11:7c:35: c8:86:eb:5a:2c:fa:7c:dd:72:31:13:30:f0:d3:c1: 6e:08:3e:7a:05:44:3f:c7:b0:35:6e:54:68:03:96: e6:c9:04:d5:22:90:73:e6:2e:40:ce:06:ce:09:05: cb:5e:00:7a:3c:a3:b3:d3:16:1b:0c:3b:ef:f1:59: f1:86:66:70:d2:5a:ee:04:6b:be:ad:c2:76:47:62: 52:3f:d2:e7:11:6f:ef:9d:fb:a9:6a:25:65:1d:6a: 8e:2c:97:32:5a:0e:4a:1c:e3:c1:71:e0:c2:2c:7c: f0:96:b2:36:3d:8d:e0:42:5f:99:58:88:93:8f:b6: f5:ec:e0:f3:a2:d7:3c:ec:e2:ac:a1:76:6f:76:af: 8f:19:bd:32:b7:2f:72:79:2b:5a:8b:d2:54:4a:c9: 1a:5d:72:46:87:6f:ff:5a:e3:95:25:74:1d:3a:4a: df:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:54:6B:7C:F1:94:6A:26:79:FB:5C:78:D4:81:39:3E:AC:99:D5:F1 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.14.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:67:04:d2:1f:fc:fe:5f:75:42:4c:55:3c:f5:e7:80:29:e0: ad:08:d9:80:1f:35:db:6f:fe:6b:28:a1:e4:e3:a9:46:0f:d7: b9:15:b6:dc:46:c0:cf:87:9a:d3:52:93:5c:8a:96:cb:b5:02: 62:18:01:a9:c3:da:ed:a3:59:ca:b0:df:cd:92:66:a8:75:31: 46:41:c9:bd:f6:34:1f:00:65:ca:67:2f:14:e1:6d:67:c8:be: f2:a2:d7:70:df:1c:11:0e:49:7a:71:be:92:58:93:21:d5:50: c8:f0:b2:41:9a:a7:78:36:5c:97:e3:94:35:77:50:36:e2:78: 35:5e:2c:07:ab:81:7b:10:c0:42:9d:7a:9a:76:b2:cd:b5:9b: 6c:ef:df:94:3a:03:0b:60:ba:84:fa:03:46:41:48:38:e2:3c: ac:a6:3a:a1:9f:f6:19:b3:4a:32:3d:a7:09:f3:48:b5:78:d5: e7:46:db:ad:24:e4:b4:d2:b5:dc:06:53:e8:27:c1:40:20:a4: fa:8b:c0:e6:8f:a5:c7:54:a7:63:66:3b:cb:fb:d8:1f:0b:f8: cf:6c:50:72:15:cf:1f:54:55:64:9a:d6:1e:fa:6b:ce:ec:5a: 1c:35:47:97:ef:69:ab:92:ae:f4:79:99:2e:f8:c4:20:38:79: 5c:9a:c7:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPZDaYjTFzc2maIlgQuYxJ8kxdSEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI2MDI1MDA2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzUxZmZjODY4OGYzNjVhNjlmNmE1YTA1ZDZlMDg2OGI1 NjA5ZjhiZTg5OTZhNjUzM2E3YTc2NDhiZjg4NzM3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0ViIjcstnbl5/5HBh6nzQ6YhB+Q2E2ftR7zzgIHxFYhnc 2efyFZb2Veu9gyKFrfUkThhkyDha0xX3WAFONfRylvG4fpgKmhHUtwGMjMBp3pLy pQ9+vRF8NciG61os+nzdcjETMPDTwW4IPnoFRD/HsDVuVGgDlubJBNUikHPmLkDO Bs4JBcteAHo8o7PTFhsMO+/xWfGGZnDSWu4Ea76twnZHYlI/0ucRb++d+6lqJWUd ao4slzJaDkoc48Fx4MIsfPCWsjY9jeBCX5lYiJOPtvXs4POi1zzs4qyhdm92r48Z vTK3L3J5K1qL0lRKyRpdckaHb/9a45UldB06St+VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOFRrfPGUaiZ5+1x41IE5PqyZ1fEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RkNzJiMWIzLWJmYzktNDViZi04N2RjLWIwZTkwOTM3ZjE5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYA4wDQYJKoZIhvcNAQELBQADggEBAGpnBNIf/P5fdUJMVTz154Ap4K0I 2YAfNdtv/msooeTjqUYP17kVttxGwM+HmtNSk1yKlsu1AmIYAanD2u2jWcqw382S Zqh1MUZByb32NB8AZcpnLxThbWfIvvKi13DfHBEOSXpxvpJYkyHVUMjwskGap3g2 XJfjlDV3UDbieDVeLAergXsQwEKdepp2ss21m2zv35Q6AwtguoT6A0ZBSDjiPKym OqGf9hmzSjI9pwnzSLV41edG260k5LTStdwGU+gnwUAgpPqLwOaPpcdUp2NmO8v7 2B8L+M9sUHIVzx9UVWSa1h76a87sWhw1R5fvaauSrvR5mS74xCA4eVyaxzM= -----END CERTIFICATE-----Generated at Sun Nov 15 21:43:41 2026 by rpki-client