$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa File: f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa (raw, json) Hash identifier: 72Y6K8xafUDNvUKVPwtXWN/AYOIYN0ZdJUmuntRGa1Y= Subject key identifier: A9:25:A5:F1:1B:B5:7A:D9:44:67:4C:30:7D:BC:65:95:3B:D0:BD:D7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 45F4061FF2ADFE460A6FD922C4DDFC3BBE3A5C52 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa Signing time: Thu 26 Feb 2026 02:00:12 +0000 ROA not before: Thu 26 Feb 2026 02:00:12 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f4:06:1f:f2:ad:fe:46:0a:6f:d9:22:c4:dd:fc:3b:be:3a:5c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 26 02:00:12 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=bfb1c995befa3245abd6d22a3d8b9c77a9ecedf7a41aec40d5a1c9dff36bec52, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:38:e4:1c:8c:1a:4e:9b:6a:7e:fa:72:09: a1:f2:26:38:46:f7:d6:90:c8:a2:92:0f:97:56:fd: 65:08:39:00:25:20:60:be:47:a0:66:13:88:49:f3: a3:73:e2:21:52:ad:09:c6:ec:b9:af:64:ce:6f:e8: c5:80:49:c2:bb:f0:ba:63:5c:49:29:ed:2b:1d:73: c3:2c:dc:d6:53:07:ac:59:34:50:06:17:b7:76:e4: b2:3d:f1:29:56:ea:29:af:af:dc:48:d3:48:80:71: 54:39:2d:05:e1:f7:95:07:aa:f1:3a:18:1e:cc:83: 14:4d:17:8a:fe:5a:59:11:cd:04:91:fc:ed:ff:1b: df:17:41:b3:a3:55:f9:dd:04:73:97:89:da:e9:11: 2a:7d:24:19:29:11:23:99:a6:a5:84:56:aa:7a:66: 7e:0d:95:26:f5:3c:df:08:97:3b:14:9b:d2:84:45: 66:97:78:61:95:42:d5:64:b6:b3:38:e0:ef:c3:e0: 65:4e:a5:9b:ca:06:b5:18:06:f3:55:43:48:b2:c4: 3d:46:22:78:0b:3a:85:1a:64:09:15:cf:6c:55:98: 87:c4:2e:37:36:29:8b:6f:35:7b:04:d1:ec:c0:97: f9:f3:6a:b1:1c:2d:cb:78:f5:1f:6d:cb:bf:9c:c4: db:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:25:A5:F1:1B:B5:7A:D9:44:67:4C:30:7D:BC:65:95:3B:D0:BD:D7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.39.0/24 Signature Algorithm: sha256WithRSAEncryption 98:e2:f4:5d:69:f0:6a:92:9e:e1:d4:f5:47:f7:40:8d:a1:49: d2:33:ee:24:7b:14:ed:0e:73:05:e0:e8:f3:82:c6:e8:30:39: 16:d2:5d:24:62:89:fe:e5:05:38:8b:b2:f0:bc:e6:f2:17:cd: 0e:26:bd:22:51:46:98:e7:27:87:b1:76:62:bd:dc:f2:b2:a7: 20:9d:4f:56:47:16:27:dc:83:27:93:4c:08:52:32:3d:7f:ec: 82:c2:60:ea:ea:e4:73:05:34:50:e5:cc:55:d9:91:57:a0:3b: 54:d4:11:dc:31:d6:87:b9:bc:bf:92:5f:c9:5a:2a:7d:f0:22: d0:ec:d3:83:18:d8:02:46:94:a9:e6:7f:1d:a2:cb:5e:cf:57: 50:1d:9b:7d:e1:7d:ed:bb:fe:97:2d:d6:72:90:b5:6c:99:90: e2:d7:88:af:1a:53:b7:17:f2:25:61:e6:4a:94:ab:32:82:e1: 3f:a6:36:44:43:c3:af:65:fd:4e:89:1e:23:e0:26:98:44:3b: ba:ae:74:ec:5b:a7:d0:cd:5e:c1:cc:42:40:dd:d1:8d:37:61: 7d:fb:65:cc:30:72:53:f4:bd:c2:89:1d:f8:82:70:00:00:55: 4f:ed:2f:15:a0:7c:20:24:02:1b:55:fc:c2:ca:d0:bc:d7:ea: 7e:c3:ef:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURfQGH/Kt/kYKb9kixN38O746XFIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI2MDIwMDEyWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmIxYzk5NWJlZmEzMjQ1YWJkNmQyMmEzZDhiOWM3N2E5 ZWNlZGY3YTQxYWVjNDBkNWExYzlkZmYzNmJlYzUyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXQjjkHIwaTptqfvpyCaHyJjhG99aQyKKSD5dW/WUIOQAl IGC+R6BmE4hJ86Nz4iFSrQnG7LmvZM5v6MWAScK78LpjXEkp7Ssdc8Ms3NZTB6xZ NFAGF7d25LI98SlW6imvr9xI00iAcVQ5LQXh95UHqvE6GB7MgxRNF4r+WlkRzQSR /O3/G98XQbOjVfndBHOXidrpESp9JBkpESOZpqWEVqp6Zn4NlSb1PN8IlzsUm9KE RWaXeGGVQtVktrM44O/D4GVOpZvKBrUYBvNVQ0iyxD1GIngLOoUaZAkVz2xVmIfE Ljc2KYtvNXsE0ezAl/nzarEcLct49R9ty7+cxNt1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqSWl8Ru1etlEZ0wwfbxllTvQvdcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y3MDdhZDU0LWMyNGQtNGE0Zi1hNGQ3LWEyYWFkMzgyMTAwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCcwDQYJKoZIhvcNAQELBQADggEBAJji9F1p8GqSnuHU9Uf3QI2hSdIz 7iR7FO0OcwXg6POCxugwORbSXSRiif7lBTiLsvC85vIXzQ4mvSJRRpjnJ4exdmK9 3PKypyCdT1ZHFifcgyeTTAhSMj1/7ILCYOrq5HMFNFDlzFXZkVegO1TUEdwx1oe5 vL+SX8laKn3wItDs04MY2AJGlKnmfx2iy17PV1Adm33hfe27/pct1nKQtWyZkOLX iK8aU7cX8iVh5kqUqzKC4T+mNkRDw69l/U6JHiPgJphEO7qudOxbp9DNXsHMQkDd 0Y03YX37ZcwwclP0vcKJHfiCcAAAVU/tLxWgfCAkAhtV/MLK0LzX6n7D7+s= -----END CERTIFICATE-----Generated at Mon Mar 2 03:26:11 2026 by rpki-client