$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e7a6fe73-e83b-497f-9236-892dd595ac34.roa File: e7a6fe73-e83b-497f-9236-892dd595ac34.roa (raw, json) Hash identifier: DJO/QAmMjZyyeG0i6yLG+v5lcwHcUSTfgSH1RXetFps= Subject key identifier: 89:DD:32:9D:AA:5F:65:AB:2C:30:75:4E:CB:14:01:10:73:E7:B7:E0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4A18493136591FE01732B09C43CDCE10F49BE94F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e7a6fe73-e83b-497f-9236-892dd595ac34.roa Signing time: Sat 24 Oct 2026 02:02:58 +0000 ROA not before: Sat 24 Oct 2026 02:02:58 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:18:49:31:36:59:1f:e0:17:32:b0:9c:43:cd:ce:10:f4:9b:e9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 02:02:58 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=514ce1f828fb5262a809f15dae1888561831718ba88a6b485ef52d039ac35f3d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d2:14:f5:d2:3b:96:7d:bb:e2:84:c1:e7:99: e7:e2:0a:94:18:99:33:5a:e4:5a:0d:20:3a:16:61: 40:01:95:b6:dc:92:c8:19:98:4e:b8:f8:53:69:75: 49:22:be:6a:b7:ad:ad:f6:ba:20:5b:8c:f9:08:71: 94:86:d2:76:a1:d4:5e:24:b5:4f:a2:ad:66:98:75: 76:93:d2:33:8e:3f:4f:e6:dc:f4:a6:ce:1c:e0:19: 1f:74:fb:26:2f:3a:ab:73:49:23:b0:65:4d:fe:81: ee:a2:2c:1c:e2:aa:c0:79:7f:fc:60:a1:78:d8:c4: 8f:4e:5a:f8:76:c4:24:48:26:87:dc:5c:c4:97:6e: 38:26:ef:34:58:b3:90:a6:d5:1d:82:39:b1:bd:c7: 9d:26:72:11:3d:e5:f1:10:18:12:df:03:a3:f1:ea: ee:9b:99:d6:66:6e:0f:56:6c:45:df:4b:37:3b:77: b7:93:1b:fc:05:75:4d:a1:4f:28:ad:74:5b:e4:d5: dc:d2:91:77:2c:a3:e5:dc:9d:a3:ae:0f:d3:fb:3d: 9f:7c:21:63:a5:e8:bf:5f:ea:1a:1d:11:47:3c:ac: 6e:88:06:67:89:6d:29:01:fb:86:9b:7f:fa:1c:a8: 73:0f:ad:f8:e4:5b:ba:bb:88:c1:b0:7c:ce:d8:ec: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DD:32:9D:AA:5F:65:AB:2C:30:75:4E:CB:14:01:10:73:E7:B7:E0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e7a6fe73-e83b-497f-9236-892dd595ac34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.35.0/24 Signature Algorithm: sha256WithRSAEncryption 55:b1:d5:5b:e0:dd:60:c3:93:96:7a:dc:a0:06:e9:bc:24:e6: ab:87:0e:5c:36:ca:ba:39:d0:c3:6d:be:b0:9e:ed:84:e0:8e: f9:07:1a:5c:88:2f:16:94:52:72:02:6e:52:c5:fa:c2:f7:72: f8:83:a4:66:62:63:47:1a:c3:3e:85:80:c6:75:19:b3:8f:24: d0:43:43:57:35:39:1f:83:29:97:89:73:e8:99:b2:57:42:5e: b3:87:ff:bb:ac:3f:f5:07:4d:61:05:02:3b:03:64:5b:d5:2b: e1:9c:6f:09:18:e4:09:be:82:73:ac:6b:58:8e:da:07:69:12: 96:fc:3c:4a:9b:05:02:d1:04:1a:8f:d5:d2:31:66:78:bf:07: 98:3b:46:34:21:28:53:26:a9:ad:56:f7:ac:44:e1:9f:df:4d: 5b:77:67:36:14:a7:55:ee:04:44:c0:35:e4:b1:2d:ab:43:5c: fd:fc:46:c7:80:a0:60:7d:79:4c:44:da:c2:c4:5f:0c:cf:88: 76:f2:8f:64:2b:db:7e:3e:56:a2:0f:62:8e:84:36:87:16:e7: 96:62:6e:87:a0:c9:52:48:32:79:68:49:bd:e2:65:bf:a7:0f: 82:65:6e:ae:db:b4:11:e0:f6:c1:8f:75:fd:31:de:49:f6:8c: 86:4c:0d:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUShhJMTZZH+AXMrCcQ83OEPSb6U8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDIwMjU4WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTRjZTFmODI4ZmI1MjYyYTgwOWYxNWRhZTE4ODg1NjE4 MzE3MThiYTg4YTZiNDg1ZWY1MmQwMzlhYzM1ZjNkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg0hT10juWfbvihMHnmefiCpQYmTNa5FoNIDoWYUABlbbc ksgZmE64+FNpdUkivmq3ra32uiBbjPkIcZSG0nah1F4ktU+irWaYdXaT0jOOP0/m 3PSmzhzgGR90+yYvOqtzSSOwZU3+ge6iLBziqsB5f/xgoXjYxI9OWvh2xCRIJofc XMSXbjgm7zRYs5Cm1R2CObG9x50mchE95fEQGBLfA6Px6u6bmdZmbg9WbEXfSzc7 d7eTG/wFdU2hTyitdFvk1dzSkXcso+XcnaOuD9P7PZ98IWOl6L9f6hodEUc8rG6I BmeJbSkB+4abf/ocqHMPrfjkW7q7iMGwfM7Y7IenAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUid0ynapfZassMHVOyxQBEHPnt+AwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U3YTZmZTczLWU4M2ItNDk3Zi05MjM2LTg5MmRkNTk1YWMzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCMwDQYJKoZIhvcNAQELBQADggEBAFWx1Vvg3WDDk5Z63KAG6bwk5quH Dlw2yro50MNtvrCe7YTgjvkHGlyILxaUUnICblLF+sL3cviDpGZiY0cawz6FgMZ1 GbOPJNBDQ1c1OR+DKZeJc+iZsldCXrOH/7usP/UHTWEFAjsDZFvVK+GcbwkY5Am+ gnOsa1iO2gdpEpb8PEqbBQLRBBqP1dIxZni/B5g7RjQhKFMmqa1W96xE4Z/fTVt3 ZzYUp1XuBETANeSxLatDXP38RseAoGB9eUxE2sLEXwzPiHbyj2Qr234+VqIPYo6E NocW55ZiboegyVJIMnloSb3iZb+nD4Jlbq7btBHg9sGPdf0x3kn2jIZMDQA= -----END CERTIFICATE-----Generated at Sun Nov 15 21:40:32 2026 by rpki-client