$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/90515f46-7842-4990-8fd3-2073350be0ea.roa File: 90515f46-7842-4990-8fd3-2073350be0ea.roa (raw, json) Hash identifier: oGMJbbI7nRi+zeTnGGnqq+2kxQWNwoNxgUejZaYtsX0= Subject key identifier: 15:BA:4B:B2:16:D1:B8:EE:74:66:EB:D2:0D:70:A7:87:46:EB:1D:1B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 611470AC5260D8703BB13BFC5A7F06ED8063150D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/90515f46-7842-4990-8fd3-2073350be0ea.roa Signing time: Fri 03 Apr 2026 23:06:53 +0000 ROA not before: Fri 03 Apr 2026 23:06:53 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.98.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:14:70:ac:52:60:d8:70:3b:b1:3b:fc:5a:7f:06:ed:80:63:15:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 3 23:06:53 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=86e1cea4291a47a2b3286c57d78634b2eab2494b5d2ce63bb6a3b7a7120a7962, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:51:4b:51:73:2f:ef:a3:58:a1:3f:11:9a: cc:f0:cb:43:fd:53:9f:ae:b3:fa:6a:18:4b:f9:3c: e2:85:a7:23:56:30:0e:02:f9:3f:c8:7a:e7:e3:97: b5:7e:7c:7d:70:6f:58:34:57:7b:2a:ae:10:ca:e3: ed:6b:4f:eb:6f:f6:b9:3d:00:fe:2d:a0:57:55:70: 3d:7b:52:b6:b5:71:13:13:89:36:b2:b4:b2:18:9c: 3a:df:3a:86:6d:76:38:9f:66:83:bc:1e:8d:97:b7: 27:4b:8f:99:6f:38:4b:31:14:3b:2a:1a:86:a3:b2: bc:38:49:d6:6d:47:3e:54:f2:22:36:4c:4f:54:f4: f0:16:b0:5d:b2:2e:d2:87:21:5d:33:a0:da:09:c5: 17:f9:ab:65:9a:8d:fb:05:69:0a:50:74:49:07:93: 8f:26:62:ea:ea:6b:95:06:b8:84:d8:57:df:b4:92: cf:d8:b4:f7:2e:39:3d:a6:99:dd:bd:88:55:e8:d9: 70:7e:5f:0a:76:df:bc:8c:ff:5b:67:33:86:fb:ee: b6:68:09:e8:23:2c:59:52:0f:51:96:08:96:70:62: df:e8:74:64:d2:f8:9a:09:85:8a:d9:34:8a:4c:09: 85:93:fc:b2:af:66:98:ab:e3:fe:31:54:e6:eb:30: 61:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BA:4B:B2:16:D1:B8:EE:74:66:EB:D2:0D:70:A7:87:46:EB:1D:1B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/90515f46-7842-4990-8fd3-2073350be0ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.98.64.0/20 Signature Algorithm: sha256WithRSAEncryption 83:3f:83:0c:24:91:bb:d6:05:2e:1f:f9:2a:4f:10:01:9d:af: 2b:1d:54:a9:e1:54:c5:25:b5:a9:c6:fd:dc:bb:b3:4b:e7:28: fd:05:17:0c:6f:f1:a6:43:c3:12:4d:f5:23:61:98:7f:d0:59: 0d:b4:b6:95:34:e6:b2:23:b1:e6:d6:c4:34:e8:7a:7f:8f:62: 4f:a8:bf:7c:d0:de:82:b0:5c:32:ea:43:fe:14:ac:9e:c8:96: 5a:98:6b:30:75:13:d6:9a:6d:fc:c7:d4:ed:45:2e:1f:66:35: 8d:2b:2a:f8:36:b0:ba:2c:54:cd:ff:0d:b7:a3:ab:31:a7:a0: 66:f7:34:b8:28:d7:3c:ec:19:27:68:65:1d:f1:b5:a2:fc:8e: 82:ad:66:d2:90:5d:4c:66:ab:52:af:68:d0:8f:03:21:5f:1b: 60:a7:42:5c:78:10:fb:c3:93:44:4f:5f:aa:c0:d5:80:41:8c: f2:c5:a4:51:ce:52:77:9e:59:54:b7:80:26:81:57:42:ef:b3: e3:8e:85:3b:9e:de:00:bd:77:b6:1f:26:15:fb:53:7f:0a:10: 7b:13:eb:08:e6:04:60:05:ac:66:e5:10:e4:15:aa:bb:6d:71: 67:79:1a:cd:d0:02:5b:f6:72:8a:07:61:b2:e6:98:bb:e5:5c: 49:1a:3b:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYRRwrFJg2HA7sTv8Wn8G7YBjFQ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNDAzMjMwNjUzWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmUxY2VhNDI5MWE0N2EyYjMyODZjNTdkNzg2MzRiMmVh YjI0OTRiNWQyY2U2M2JiNmEzYjdhNzEyMGE3OTYyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBrFFLUXMv76NYoT8Rmszwy0P9U5+us/pqGEv5POKFpyNW MA4C+T/Ieufjl7V+fH1wb1g0V3sqrhDK4+1rT+tv9rk9AP4toFdVcD17Ura1cRMT iTaytLIYnDrfOoZtdjifZoO8Ho2XtydLj5lvOEsxFDsqGoajsrw4SdZtRz5U8iI2 TE9U9PAWsF2yLtKHIV0zoNoJxRf5q2WajfsFaQpQdEkHk48mYurqa5UGuITYV9+0 ks/YtPcuOT2mmd29iFXo2XB+Xwp237yM/1tnM4b77rZoCegjLFlSD1GWCJZwYt/o dGTS+JoJhYrZNIpMCYWT/LKvZpir4/4xVObrMGEPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFbpLshbRuO50ZuvSDXCnh0brHRswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkwNTE1ZjQ2LTc4NDItNDk5MC04ZmQzLTIwNzMzNTBiZTBlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYkAwDQYJKoZIhvcNAQELBQADggEBAIM/gwwkkbvWBS4f+SpPEAGdrysd VKnhVMUltanG/dy7s0vnKP0FFwxv8aZDwxJN9SNhmH/QWQ20tpU05rIjsebWxDTo en+PYk+ov3zQ3oKwXDLqQ/4UrJ7IllqYazB1E9aabfzH1O1FLh9mNY0rKvg2sLos VM3/DbejqzGnoGb3NLgo1zzsGSdoZR3xtaL8joKtZtKQXUxmq1KvaNCPAyFfG2Cn Qlx4EPvDk0RPX6rA1YBBjPLFpFHOUneeWVS3gCaBV0Lvs+OOhTue3gC9d7YfJhX7 U38KEHsT6wjmBGAFrGblEOQVqrttcWd5Gs3QAlv2cooHYbLmmLvlXEkaO0A= -----END CERTIFICATE-----Generated at Tue Apr 7 10:31:10 2026 by rpki-client