$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa File: 040e375f-0cc8-46f8-8435-facc3d4d127e.roa (raw, json) Hash identifier: KuSbxMsS8WlZNUZtOQdq8ci6UewHuMlBYTSMooDd/+c= Subject key identifier: E0:7A:C1:7B:B5:41:9E:51:82:51:2E:07:25:A4:AD:61:7F:81:72:13 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5E60682F3C29EC7D514DB5DD3DBDC2D897C2A185 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa Signing time: Wed 05 Aug 2026 01:50:25 +0000 ROA not before: Wed 05 Aug 2026 01:50:25 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:60:68:2f:3c:29:ec:7d:51:4d:b5:dd:3d:bd:c2:d8:97:c2:a1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 5 01:50:25 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=24c1a930717d5e23d7117d53877c3013ac4dae4d5d6a7f235684ccf7433792d8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:fa:ff:cc:97:0a:18:34:d2:b8:93:9d:b9: 1f:14:03:05:a3:a7:4f:9a:de:09:bb:fa:66:08:56: 7e:dd:03:47:6f:fc:20:ce:fd:b1:0c:5a:ee:0c:8f: b1:b3:32:2b:3b:af:64:74:cf:90:49:76:d1:9b:6d: 62:c5:0c:3c:d4:f9:7c:27:34:83:ad:60:dc:06:33: 00:84:0a:4e:d3:2c:00:fb:4a:37:d6:4d:ba:f2:d0: 84:09:f3:8a:42:6e:31:95:83:4c:83:99:de:65:d4: 57:dd:8b:69:93:e8:a1:64:22:17:10:54:fd:b3:47: 94:29:9a:1a:49:ee:d3:d4:e1:e0:b6:fe:78:69:85: d9:e5:8f:f2:c7:d5:14:14:4b:f3:19:dd:87:2d:f8: 16:74:b0:bb:ce:b3:ce:53:72:f6:08:74:ed:88:7c: 6f:7a:63:f3:a5:a5:ec:f6:e0:ba:b1:91:01:58:a5: 7e:da:b4:6b:62:e1:ba:96:cc:b0:39:e3:be:20:75: 83:82:e8:ec:e8:9d:26:ef:30:ef:db:b0:4e:75:9f: 5e:64:bd:97:16:53:74:d1:32:62:92:f5:51:d6:7e: 6d:a2:a6:4d:a1:d5:c3:54:07:84:ce:88:f5:ef:22: b4:7f:6b:a8:51:dc:79:96:ae:fc:67:4c:8e:75:c8: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7A:C1:7B:B5:41:9E:51:82:51:2E:07:25:A4:AD:61:7F:81:72:13 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 19:6e:c7:31:91:fb:ca:5a:1a:0d:98:3e:2c:de:32:9f:77:11: dd:05:4f:8f:ae:3c:7f:ea:2c:88:fa:b0:1c:8e:12:20:ea:cf: 7c:24:5f:69:03:34:9b:c4:c4:6b:83:d1:3f:5d:13:08:0b:49: f5:5c:ea:af:ab:16:49:ae:89:63:7c:95:34:fe:26:7e:c8:67: a7:f0:7e:94:e2:df:6c:5d:c4:4c:08:1e:72:06:fe:e6:d0:fc: 2f:71:f2:b4:98:ef:f7:11:04:43:fc:7b:df:06:ac:76:81:8e: d5:de:32:85:5a:46:fe:73:39:df:36:b2:e1:cc:ff:a6:84:47: c6:31:9f:59:98:c2:76:e8:92:f8:f2:db:28:79:56:45:b2:64: 89:cd:e8:c3:3f:7a:ee:ae:98:d1:49:91:9b:3f:48:16:83:1e: 70:94:80:d3:08:2a:e2:f1:f5:bd:c6:6b:38:68:cb:61:0d:f4: 16:05:f3:6b:b1:1e:10:4d:8c:1b:81:72:02:16:75:cf:dd:fe: 0a:c9:df:d7:69:21:7a:c1:23:62:ba:b0:85:e8:cb:42:87:58: 56:23:c1:d7:2d:62:85:e0:98:d1:eb:b9:15:17:89:de:28:da: 1a:ef:27:42:73:25:e3:3b:78:cc:4e:7b:3d:ea:39:d9:e2:7f: 4f:d9:79:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXmBoLzwp7H1RTbXdPb3C2JfCoYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA1MDE1MDI1WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGMxYTkzMDcxN2Q1ZTIzZDcxMTdkNTM4NzdjMzAxM2Fj NGRhZTRkNWQ2YTdmMjM1Njg0Y2NmNzQzMzc5MmQ4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfRPr/zJcKGDTSuJOduR8UAwWjp0+a3gm7+mYIVn7dA0dv /CDO/bEMWu4Mj7GzMis7r2R0z5BJdtGbbWLFDDzU+XwnNIOtYNwGMwCECk7TLAD7 SjfWTbry0IQJ84pCbjGVg0yDmd5l1Ffdi2mT6KFkIhcQVP2zR5QpmhpJ7tPU4eC2 /nhphdnlj/LH1RQUS/MZ3Yct+BZ0sLvOs85TcvYIdO2IfG96Y/Olpez24LqxkQFY pX7atGti4bqWzLA5474gdYOC6OzonSbvMO/bsE51n15kvZcWU3TRMmKS9VHWfm2i pk2h1cNUB4TOiPXvIrR/a6hR3HmWrvxnTI51yGVfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4HrBe7VBnlGCUS4HJaStYX+BchMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA0MGUzNzVmLTBjYzgtNDZmOC04NDM1LWZhY2MzZDRkMTI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBABluxzGR+8paGg2YPizeMp93Ed0F T4+uPH/qLIj6sByOEiDqz3wkX2kDNJvExGuD0T9dEwgLSfVc6q+rFkmuiWN8lTT+ Jn7IZ6fwfpTi32xdxEwIHnIG/ubQ/C9x8rSY7/cRBEP8e98GrHaBjtXeMoVaRv5z Od82suHM/6aER8Yxn1mYwnbokvjy2yh5VkWyZInN6MM/eu6umNFJkZs/SBaDHnCU gNMIKuLx9b3Gazhoy2EN9BYF82uxHhBNjBuBcgIWdc/d/grJ39dpIXrBI2K6sIXo y0KHWFYjwdctYoXgmNHruRUXid4o2hrvJ0JzJeM7eMxOez3qOdnif0/ZeRU= -----END CERTIFICATE-----Generated at Fri Aug 21 00:16:49 2026 by rpki-client