$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ff893aad-9ed8-41c3-9b48-507fa414885d.roa File: ff893aad-9ed8-41c3-9b48-507fa414885d.roa (raw, json) Hash identifier: gFCk1q75a/CdJvnS+WJpzcXFuAXnYpFcEtOc+m7qovc= Subject key identifier: E5:FD:62:46:F4:43:23:1F:63:FB:77:5B:C6:29:E1:E0:9A:26:FA:18 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 76C3E2DA70EDE83C655F751F50E544BEC047D4D4 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ff893aad-9ed8-41c3-9b48-507fa414885d.roa Signing time: Sun 11 Oct 2026 14:50:05 +0000 ROA not before: Sun 11 Oct 2026 14:50:05 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c3:e2:da:70:ed:e8:3c:65:5f:75:1f:50:e5:44:be:c0:47:d4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:05 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=4bd1681ef1181e3fa5653f9212b398e38739e802a818db91694c5d83f68a5118, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:cc:88:30:23:58:e9:c2:1f:72:b7:32:44: f2:27:b3:6e:4d:9f:c5:70:14:21:32:b0:71:16:bc: e6:a2:68:1e:9a:e5:09:00:26:5b:07:ec:d0:e0:e8: bd:4f:b5:48:ec:bd:01:49:04:25:c9:f8:e2:42:3e: 4c:b1:2d:d4:a6:03:5f:e5:aa:34:e7:18:22:80:83: 99:6a:58:49:7a:d8:9f:90:65:dc:ac:c0:d5:31:75: 0a:6d:67:68:8c:be:0e:9e:8d:79:82:ab:47:d1:16: db:37:97:c1:2f:c0:42:d7:ed:35:a8:7e:21:51:48: fb:d8:95:80:a1:32:07:a1:68:79:8e:19:5b:13:85: 7f:dc:80:70:2a:ff:c2:70:29:5d:e0:81:e3:a7:72: ed:6e:d1:58:03:13:66:68:99:f2:d0:47:98:a9:67: fb:d3:00:5a:eb:4f:88:75:45:9e:26:5f:de:8d:7f: 55:5e:53:31:35:2e:53:35:0c:8a:42:e9:05:69:44: a9:da:6a:36:f7:8e:e7:ea:be:fc:47:f0:d6:f9:93: c7:25:a9:fd:c3:4e:7d:64:29:3c:f9:23:e4:7b:68: dd:68:89:ca:c8:99:01:78:80:b7:52:e3:dc:ea:05: e3:c2:83:04:68:bf:ec:81:70:66:71:c2:e7:4e:94: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FD:62:46:F4:43:23:1F:63:FB:77:5B:C6:29:E1:E0:9A:26:FA:18 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ff893aad-9ed8-41c3-9b48-507fa414885d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 06:dc:90:21:f4:4e:35:1f:43:d3:29:45:df:ef:f7:25:f6:82: 55:0e:10:ce:b6:bb:54:2a:39:6a:0f:ca:49:6f:c1:23:8c:e8: 79:4f:3f:98:77:01:6b:5f:2f:98:7c:63:3b:be:c4:0e:57:bc: 10:12:43:6f:a6:ad:2f:b7:a1:75:ee:b8:bd:50:99:52:67:f4: 2a:fa:58:d7:08:d4:41:3a:38:1d:f9:0a:29:b9:33:d3:d1:af: 84:b3:4c:d9:ba:bf:de:06:8d:86:c7:45:fa:a7:9c:34:88:c7: 7e:d2:a0:d3:dd:a0:9a:d2:f3:40:1f:28:20:f9:80:b8:f5:9d: ac:39:2b:7c:34:e7:87:cf:4d:f2:99:4e:62:37:ac:30:c7:25: 7c:c4:3a:20:cd:27:6e:8a:ee:d4:a5:67:8c:32:7c:14:32:60: 98:ac:cd:4b:bf:52:1f:7a:e2:cc:08:b8:24:2c:66:48:c8:09: 1e:4d:9b:36:06:cd:97:b5:ff:bd:f3:85:a1:85:b6:12:f0:d6: 93:e5:78:13:2d:3d:42:92:dd:b6:7d:cb:27:70:b7:51:a0:78: e2:92:69:b6:bf:bf:60:a7:ff:54:4f:d9:79:4a:c2:5a:17:af: 0f:80:a7:11:90:68:4f:a9:d1:a4:ab:35:5f:64:66:f1:09:28: bf:1a:d3:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdsPi2nDt6DxlX3UfUOVEvsBH1NQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDA1WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmQxNjgxZWYxMTgxZTNmYTU2NTNmOTIxMmIzOThlMzg3 MzllODAyYTgxOGRiOTE2OTRjNWQ4M2Y2OGE1MTE4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbXcyIMCNY6cIfcrcyRPIns25Nn8VwFCEysHEWvOaiaB6a 5QkAJlsH7NDg6L1PtUjsvQFJBCXJ+OJCPkyxLdSmA1/lqjTnGCKAg5lqWEl62J+Q ZdyswNUxdQptZ2iMvg6ejXmCq0fRFts3l8EvwELX7TWofiFRSPvYlYChMgehaHmO GVsThX/cgHAq/8JwKV3ggeOncu1u0VgDE2ZomfLQR5ipZ/vTAFrrT4h1RZ4mX96N f1VeUzE1LlM1DIpC6QVpRKnaajb3jufqvvxH8Nb5k8clqf3DTn1kKTz5I+R7aN1o icrImQF4gLdS49zqBePCgwRov+yBcGZxwudOlKm/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5f1iRvRDIx9j+3dbxinh4Jom+hgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2ZmODkzYWFkLTllZDgtNDFjMy05YjQ4LTUwN2ZhNDE0ODg1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBAAbckCH0TjUfQ9MpRd/v9yX2glUO EM62u1QqOWoPyklvwSOM6HlPP5h3AWtfL5h8Yzu+xA5XvBASQ2+mrS+3oXXuuL1Q mVJn9Cr6WNcI1EE6OB35Cim5M9PRr4SzTNm6v94GjYbHRfqnnDSIx37SoNPdoJrS 80AfKCD5gLj1naw5K3w054fPTfKZTmI3rDDHJXzEOiDNJ26K7tSlZ4wyfBQyYJis zUu/Uh964swIuCQsZkjICR5NmzYGzZe1/73zhaGFthLw1pPleBMtPUKS3bZ9yydw t1GgeOKSaba/v2Cn/1RP2XlKwloXrw+ApxGQaE+p0aSrNV9kZvEJKL8a08Q= -----END CERTIFICATE-----Generated at Sun Nov 15 21:43:25 2026 by rpki-client