$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ee7c9031-c441-40e5-ab76-ea41562c6c6e.roa File: ee7c9031-c441-40e5-ab76-ea41562c6c6e.roa (raw, json) Hash identifier: ShEvTuWfMvJgzV3MYIsm2pAgi4q2eoUE3RInvvFJm6U= Subject key identifier: 9E:56:B5:4B:89:E4:AE:41:0C:F6:E3:93:97:98:3C:8A:DC:C5:63:F1 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 58D558F057580E8DFC344CAD1A7D7467F517CDCC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ee7c9031-c441-40e5-ab76-ea41562c6c6e.roa Signing time: Sat 24 Oct 2026 01:50:31 +0000 ROA not before: Sat 24 Oct 2026 01:50:31 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d5:58:f0:57:58:0e:8d:fc:34:4c:ad:1a:7d:74:67:f5:17:cd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:31 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=439873a1ad5f2028f15f067cdb5ae3998ca084f9af4469e9209aa631aabaf3da, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:ad:96:c4:2e:49:5a:15:6e:f3:8c:83:c7: 45:3d:78:90:0c:6e:ce:56:20:87:aa:06:42:56:3b: ea:4c:95:10:5c:3f:6d:e5:27:f0:73:9a:3b:a9:d9: 29:4f:77:3f:e9:0b:df:a3:a4:b5:97:0c:45:b7:f9: 7f:cf:6c:30:80:27:d0:d9:03:e7:77:a1:f0:db:2e: 7a:e1:e2:2d:fa:fb:d6:58:41:ba:46:fc:fc:15:94: 96:1a:b5:73:5c:0a:36:7f:b6:98:84:d4:31:67:96: df:5a:5e:7c:73:73:00:fa:42:31:9a:39:bd:20:7c: c2:88:45:86:33:68:39:b8:d9:60:44:38:b7:74:58: bd:b7:e0:ca:38:d8:cc:10:00:d1:2e:91:0b:15:3d: 2e:fb:9a:da:bf:50:d2:49:78:19:ef:9a:46:98:08: 72:3c:4a:fc:13:ef:cb:33:6e:46:d1:a9:cd:b7:6a: e0:1b:f4:81:ec:cf:e8:71:60:0e:bf:62:f2:44:20: 68:86:2a:93:12:85:ba:27:43:b4:dc:94:cb:00:f7: 63:ff:22:09:5e:7d:40:e7:ba:30:82:06:0d:be:a1: 27:db:e1:64:3b:09:17:f6:b9:05:17:8f:29:e7:e9: f1:eb:9d:c2:1d:9c:84:7b:1b:93:c2:81:c4:d6:5e: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:56:B5:4B:89:E4:AE:41:0C:F6:E3:93:97:98:3C:8A:DC:C5:63:F1 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ee7c9031-c441-40e5-ab76-ea41562c6c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:f5:6b:bd:5f:9e:70:bb:6d:30:96:87:99:10:1f:94:fd:d4: 64:fa:16:9c:ca:b6:bd:f8:c5:68:e3:a6:43:b1:e5:30:38:2d: 2f:d2:f5:19:b4:f0:bd:56:a4:75:ae:c9:b1:f1:ab:6a:e7:24: 00:78:6b:e9:c4:26:76:ba:5c:41:83:9a:5d:e9:97:ea:08:96: 56:06:b8:6a:76:a0:c9:46:33:03:8f:6b:59:f8:1d:d0:ab:79: 8a:50:79:e2:65:64:a9:83:eb:b9:87:a5:ba:a1:be:f1:55:9b: 6e:27:c3:71:a1:58:4a:af:10:f3:ef:f3:be:b2:aa:e0:21:90: 85:bc:54:00:2d:61:bb:4b:95:0a:b4:87:0f:b2:b4:a4:70:d5: b7:02:60:e5:bd:c7:dd:0f:b3:71:9a:00:a2:90:f7:ae:65:22: 44:4c:ba:93:14:82:fa:b5:46:17:08:d1:12:87:64:11:bb:f1: b5:fe:4e:df:11:af:09:e2:20:60:9c:38:dd:b2:cc:0e:1f:63: ac:94:b7:93:3c:6d:c6:cf:fa:1c:4c:9d:c8:c2:8f:b4:e5:07: a9:50:96:2d:09:8f:34:b0:46:30:4a:04:75:7f:ae:c3:56:4c: 0c:88:4d:e6:10:c6:ac:90:3b:c7:5f:30:42:4d:81:7c:4c:0c: bd:a8:f7:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWNVY8FdYDo38NEytGn10Z/UXzcwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDMxWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Mzk4NzNhMWFkNWYyMDI4ZjE1ZjA2N2NkYjVhZTM5OThj YTA4NGY5YWY0NDY5ZTkyMDlhYTYzMWFhYmFmM2RhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMZq2WxC5JWhVu84yDx0U9eJAMbs5WIIeqBkJWO+pMlRBc P23lJ/Bzmjup2SlPdz/pC9+jpLWXDEW3+X/PbDCAJ9DZA+d3ofDbLnrh4i36+9ZY QbpG/PwVlJYatXNcCjZ/tpiE1DFnlt9aXnxzcwD6QjGaOb0gfMKIRYYzaDm42WBE OLd0WL234Mo42MwQANEukQsVPS77mtq/UNJJeBnvmkaYCHI8SvwT78szbkbRqc23 auAb9IHsz+hxYA6/YvJEIGiGKpMShbonQ7TclMsA92P/IglefUDnujCCBg2+oSfb 4WQ7CRf2uQUXjynn6fHrncIdnIR7G5PCgcTWXmfNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnla1S4nkrkEM9uOTl5g8itzFY/EwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2VlN2M5MDMxLWM0NDEtNDBlNS1hYjc2LWVhNDE1NjJjNmM2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBADz1a71fnnC7bTCWh5kQH5T91GT6 FpzKtr34xWjjpkOx5TA4LS/S9Rm08L1WpHWuybHxq2rnJAB4a+nEJna6XEGDml3p l+oIllYGuGp2oMlGMwOPa1n4HdCreYpQeeJlZKmD67mHpbqhvvFVm24nw3GhWEqv EPPv876yquAhkIW8VAAtYbtLlQq0hw+ytKRw1bcCYOW9x90Ps3GaAKKQ965lIkRM upMUgvq1RhcI0RKHZBG78bX+Tt8RrwniIGCcON2yzA4fY6yUt5M8bcbP+hxMncjC j7TlB6lQli0JjzSwRjBKBHV/rsNWTAyITeYQxqyQO8dfMEJNgXxMDL2o9yE= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:16 2026 by rpki-client