$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fd6ad586-5aca-4f59-a357-8b2871791f2e.roa File: fd6ad586-5aca-4f59-a357-8b2871791f2e.roa (raw, json) Hash identifier: GhhsavC4v8y+hgYgrM42G2tS9KXjIrpXFzwqJu7d5Mc= Subject key identifier: 11:31:35:77:6A:97:03:0A:CE:2A:E2:4D:E7:6E:FD:80:AD:7A:3D:C8 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 47E61B5C67BF996FD828D0BF40204B5ED0CFE4CB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fd6ad586-5aca-4f59-a357-8b2871791f2e.roa Signing time: Sat 28 Feb 2026 01:00:10 +0000 ROA not before: Sat 28 Feb 2026 01:00:10 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.111.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e6:1b:5c:67:bf:99:6f:d8:28:d0:bf:40:20:4b:5e:d0:cf:e4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 28 01:00:10 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=2b0edb50c703c53f40d32c408195e3120815dfe9e82375ad7744caea496a4114, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:f1:77:45:99:a5:2e:69:4a:da:53:d6:30: 21:dd:e0:8c:ee:5d:0d:5d:c2:2e:52:e6:03:ee:6d: 5b:7d:59:fa:fb:66:74:34:09:e0:87:f8:c0:1e:7a: 9b:c8:0f:7b:ac:8a:e9:86:56:1f:33:e1:42:9a:4b: e8:cc:22:98:40:43:02:64:ed:c2:2b:e9:96:8f:af: 0e:a2:f6:18:f3:b4:e5:d7:b0:a2:d3:f3:76:a3:f3: a0:56:5c:d3:08:b8:1a:08:ae:dd:99:42:e4:27:e8: 2c:a3:ce:52:13:2e:52:ed:88:50:19:32:f7:a6:68: 60:12:60:de:20:06:e5:a7:1f:fc:4a:54:14:48:a2: bb:40:c0:56:83:4c:fb:d6:e4:19:09:88:bc:9b:ab: 8b:12:4c:1c:38:67:ea:6a:3f:49:a3:fb:16:cf:e6: 22:f5:b2:fc:a8:f4:90:e2:66:62:81:25:94:ef:b4: 49:4a:8a:78:33:30:1d:3a:04:1e:f6:a7:5d:95:e8: 98:d6:ce:6d:76:62:8e:9e:ad:cd:41:fe:c4:84:ed: 9f:01:99:dc:5e:8a:a6:98:55:b4:6a:6e:e2:d2:29: ff:17:85:9d:a7:eb:55:6d:e1:94:22:20:5b:ba:a4: a2:6d:f0:24:fd:d5:8a:63:ee:6c:ea:44:e3:32:39: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:31:35:77:6A:97:03:0A:CE:2A:E2:4D:E7:6E:FD:80:AD:7A:3D:C8 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fd6ad586-5aca-4f59-a357-8b2871791f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.160.0/19 Signature Algorithm: sha256WithRSAEncryption 9d:4f:61:75:5f:32:a4:57:ee:2a:24:46:88:d8:53:39:f7:d2: e6:2e:b9:cf:25:b7:83:ef:60:ca:df:60:c1:45:be:58:94:32: cb:a1:62:56:09:07:0e:36:e1:5c:8b:99:9a:62:42:50:81:62: 5a:5d:6f:2e:1b:e3:37:a3:40:3a:19:4b:1d:9c:3f:df:2a:1b: 78:38:14:14:50:cc:f8:20:d0:05:87:45:3f:8c:83:53:48:87: f1:2c:1b:ba:96:18:b3:30:f1:ec:fd:3a:f2:6b:df:14:e7:41: d6:3e:cd:41:ff:0b:22:8e:7c:84:24:06:e0:65:67:80:00:76: 2a:4e:04:e4:4b:35:a4:6d:d4:e3:1d:45:14:b4:25:34:ea:a2: bf:f9:b9:18:ba:6f:22:dd:41:8a:72:75:71:02:c3:ad:93:72: ef:a6:77:8e:35:44:41:e7:f9:27:0a:04:19:80:52:ce:d1:04: 22:16:79:4a:d4:8e:c6:0a:93:ac:70:33:64:78:82:79:2a:4b: 03:96:36:36:2d:96:60:64:17:b3:33:8c:e3:05:35:a3:1a:fd: a6:2a:fd:a9:30:73:eb:76:ec:25:54:f9:a1:dc:7c:8a:07:6d: ee:ad:10:3c:10:bf:bb:82:70:52:df:d9:74:0b:cd:98:58:38: c1:0d:9d:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR+YbXGe/mW/YKNC/QCBLXtDP5MswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI4MDEwMDEwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjBlZGI1MGM3MDNjNTNmNDBkMzJjNDA4MTk1ZTMxMjA4 MTVkZmU5ZTgyMzc1YWQ3NzQ0Y2FlYTQ5NmE0MTE0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC36PF3RZmlLmlK2lPWMCHd4IzuXQ1dwi5S5gPubVt9Wfr7 ZnQ0CeCH+MAeepvID3usiumGVh8z4UKaS+jMIphAQwJk7cIr6ZaPrw6i9hjztOXX sKLT83aj86BWXNMIuBoIrt2ZQuQn6CyjzlITLlLtiFAZMvemaGASYN4gBuWnH/xK VBRIortAwFaDTPvW5BkJiLybq4sSTBw4Z+pqP0mj+xbP5iL1svyo9JDiZmKBJZTv tElKingzMB06BB72p12V6JjWzm12Yo6erc1B/sSE7Z8BmdxeiqaYVbRqbuLSKf8X hZ2n61Vt4ZQiIFu6pKJt8CT91Ypj7mzqROMyOZF/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUETE1d2qXAwrOKuJN5279gK16PcgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2ZkNmFkNTg2LTVhY2EtNGY1OS1hMzU3LThiMjg3MTc5MWYyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUjb6AwDQYJKoZIhvcNAQELBQADggEBAJ1PYXVfMqRX7iokRojYUzn30uYu uc8lt4PvYMrfYMFFvliUMsuhYlYJBw424VyLmZpiQlCBYlpdby4b4zejQDoZSx2c P98qG3g4FBRQzPgg0AWHRT+Mg1NIh/EsG7qWGLMw8ez9OvJr3xTnQdY+zUH/CyKO fIQkBuBlZ4AAdipOBORLNaRt1OMdRRS0JTTqor/5uRi6byLdQYpydXECw62Tcu+m d441REHn+ScKBBmAUs7RBCIWeUrUjsYKk6xwM2R4gnkqSwOWNjYtlmBkF7MzjOMF NaMa/aYq/akwc+t27CVU+aHcfIoHbe6tEDwQv7uCcFLf2XQLzZhYOMENnSM= -----END CERTIFICATE-----Generated at Sun Mar 1 21:53:39 2026 by rpki-client