$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04db2f61-0fda-4bc9-838b-f44c225734df.roa File: 04db2f61-0fda-4bc9-838b-f44c225734df.roa (raw, json) Hash identifier: e/bO0pfmWpJAXOAuXK/Pns36S1Nb5E/rxJdhptz5n7U= Subject key identifier: 2C:DF:80:D2:ED:AA:2A:2B:7B:2B:E9:C3:0C:08:FD:59:B9:E0:A0:39 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2D155F8D2C419D9ABC4BA47161109F56758EF45F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04db2f61-0fda-4bc9-838b-f44c225734df.roa Signing time: Wed 05 Aug 2026 01:50:04 +0000 ROA not before: Wed 05 Aug 2026 01:50:04 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:15:5f:8d:2c:41:9d:9a:bc:4b:a4:71:61:10:9f:56:75:8e:f4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 5 01:50:04 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=8c9fd717a4172c09aa3152801d150feb8cd5be34b7e43d5e1badcccc7c65a525, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b7:79:3f:1b:a8:32:8b:07:67:0c:11:bf:83: f8:fd:04:b9:7f:cb:57:23:74:28:4e:a6:5b:56:d8: 25:e3:94:0d:36:0b:bc:37:0f:2a:9c:c3:b7:1b:2f: db:00:e8:22:65:01:51:0c:c6:0b:e4:b7:f2:7c:84: 96:72:83:fb:7d:05:e0:61:bc:27:e7:0a:28:0b:b1: ba:d3:bc:eb:2e:f2:e2:88:8a:6c:e3:6a:5c:42:e3: d5:56:b9:26:8f:7e:26:eb:42:29:c2:9e:d7:da:37: fe:f3:f3:dd:35:fd:51:8c:c6:35:42:e5:8b:af:c1: 15:49:9a:42:20:4b:0f:17:27:10:66:80:05:dd:0b: 1e:80:ba:07:5e:c5:ae:12:ff:b2:2d:b8:1d:b8:34: 25:37:c9:e2:28:c6:18:aa:14:29:c2:f4:86:7d:3b: ea:a8:09:7f:f4:a4:d1:56:19:a2:7f:8e:f0:3c:c0: c2:a1:8e:0c:50:8e:eb:82:dd:43:88:6e:29:00:a2: 44:9e:36:fa:78:6a:dd:35:05:58:09:e4:9f:e8:7b: b6:a1:a6:8c:7b:ad:6f:74:49:bd:0b:95:ad:ae:68: ba:be:c3:4c:30:e5:98:37:ba:bd:bf:fe:5b:49:13: 66:38:19:5d:29:fc:b8:8c:52:0b:dc:3b:27:08:6f: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:80:D2:ED:AA:2A:2B:7B:2B:E9:C3:0C:08:FD:59:B9:E0:A0:39 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04db2f61-0fda-4bc9-838b-f44c225734df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.43.0/24 Signature Algorithm: sha256WithRSAEncryption 80:bf:94:62:32:2d:26:5a:39:aa:9c:8f:2f:73:89:4e:58:40: ab:03:2b:0a:4f:76:d0:64:05:dd:50:e5:2a:86:2d:e0:72:60: 7a:64:42:9a:25:a9:8e:df:dc:6d:81:46:4f:6c:d9:45:a9:b8: 2a:b4:22:ae:7d:92:bd:94:20:a6:11:41:26:81:98:6b:4b:85: 00:77:2e:41:e8:a1:34:db:e1:e4:28:b7:9e:ed:18:6c:95:3b: da:c0:0b:3a:08:ef:ee:d9:ac:6b:c2:2d:9d:d2:56:a8:b5:01: bb:1e:4c:c6:18:1f:24:2a:99:86:bf:57:74:6d:7c:9f:f8:7f: f9:c8:e7:1a:37:e9:9f:64:89:28:a8:8d:24:86:c9:72:56:f0: f0:99:4d:77:06:96:3f:07:79:0b:68:bb:69:04:4a:bd:11:57: 50:c2:ac:92:48:75:31:68:cf:ba:e3:d2:bf:a6:f7:e0:ac:80: d0:71:78:f1:4e:90:79:91:12:72:32:03:f5:4a:85:79:f7:a2: 1f:e0:cd:65:74:da:dc:cd:44:ee:67:66:fb:b3:7c:5d:87:e8: 30:a9:88:b7:02:44:df:4f:3e:ae:99:48:c8:7a:35:bb:f5:74: 9c:89:db:99:c7:07:d2:3d:61:da:18:91:e1:93:b1:51:bf:a0: 29:cc:04:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULRVfjSxBnZq8S6RxYRCfVnWO9F8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA1MDE1MDA0WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzlmZDcxN2E0MTcyYzA5YWEzMTUyODAxZDE1MGZlYjhj ZDViZTM0YjdlNDNkNWUxYmFkY2NjYzdjNjVhNTI1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3t3k/G6gyiwdnDBG/g/j9BLl/y1cjdChOpltW2CXjlA02 C7w3Dyqcw7cbL9sA6CJlAVEMxgvkt/J8hJZyg/t9BeBhvCfnCigLsbrTvOsu8uKI imzjalxC49VWuSaPfibrQinCntfaN/7z8901/VGMxjVC5YuvwRVJmkIgSw8XJxBm gAXdCx6Augdexa4S/7ItuB24NCU3yeIoxhiqFCnC9IZ9O+qoCX/0pNFWGaJ/jvA8 wMKhjgxQjuuC3UOIbikAokSeNvp4at01BVgJ5J/oe7ahpox7rW90Sb0Lla2uaLq+ w0ww5Zg3ur2//ltJE2Y4GV0p/LiMUgvcOycIb7mzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULN+A0u2qKit7K+nDDAj9WbngoDkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA0ZGIyZjYxLTBmZGEtNGJjOS04MzhiLWY0NGMyMjU3MzRkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCswDQYJKoZIhvcNAQELBQADggEBAIC/lGIyLSZaOaqcjy9ziU5YQKsD KwpPdtBkBd1Q5SqGLeByYHpkQpolqY7f3G2BRk9s2UWpuCq0Iq59kr2UIKYRQSaB mGtLhQB3LkHooTTb4eQot57tGGyVO9rACzoI7+7ZrGvCLZ3SVqi1AbseTMYYHyQq mYa/V3RtfJ/4f/nI5xo36Z9kiSiojSSGyXJW8PCZTXcGlj8HeQtou2kESr0RV1DC rJJIdTFoz7rj0r+m9+CsgNBxePFOkHmREnIyA/VKhXn3oh/gzWV02tzNRO5nZvuz fF2H6DCpiLcCRN9PPq6ZSMh6Nbv1dJyJ25nHB9I9YdoYkeGTsVG/oCnMBCM= -----END CERTIFICATE-----Generated at Fri Aug 21 00:15:30 2026 by rpki-client