$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa File: 0be6e662-afc9-4903-9919-894f035a475c.roa (raw, json) Hash identifier: 6FimZmt4yUywQ1c2B/prxla+4BRJSt8gIk4tIKEdKW0= Subject key identifier: BE:08:AC:DF:80:8F:34:18:F8:F2:9D:B5:B9:4F:F4:0E:CA:79:39:C9 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 19DD0F1B2F5E9AAFCDDB982D842ABC10485C1DAD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa Signing time: Wed 05 Aug 2026 01:50:21 +0000 ROA not before: Wed 05 Aug 2026 01:50:21 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:dd:0f:1b:2f:5e:9a:af:cd:db:98:2d:84:2a:bc:10:48:5c:1d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 5 01:50:21 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=0dc6cf84cd6f62a84540c076fb2a93a30a588b630448142e5936de95f15031ae, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f1:ee:c5:6e:2c:fe:68:08:00:9c:6f:c6:cd: 52:e1:71:66:a5:b3:f4:e4:1b:6f:05:2b:8b:e5:c0: 8a:8a:cb:2a:06:02:0e:c6:c7:3c:12:0e:94:02:76: 66:f7:2a:c7:a7:5f:12:df:0b:45:e1:34:54:79:38: 8b:eb:ca:c4:6d:9d:5f:1b:f6:ec:bc:f1:77:de:66: 95:ad:1c:7a:78:ff:3d:5d:c0:81:62:8d:29:2d:ae: 33:4f:36:c0:29:e4:96:f1:86:d8:11:c0:76:bf:00: 44:cc:f6:83:a0:c2:97:b6:f9:b3:a8:99:9d:93:0c: 8b:32:1a:aa:51:bf:1a:43:98:00:c9:97:21:5d:b1: 9a:a4:f4:8a:8b:36:7f:72:8a:e9:e1:36:33:34:f2: 97:04:00:e0:11:b2:1c:f2:bf:25:fc:52:c8:b0:60: 99:ad:30:0b:ec:99:cf:29:fc:40:bf:cd:10:70:02: d1:f5:f3:af:04:8a:32:ab:58:c9:a1:7c:b8:1d:33: c1:70:f0:88:56:af:ea:08:2b:3e:2c:05:6d:60:95: 90:15:5d:bd:12:de:e9:52:b9:44:37:b1:34:6f:b1: e5:f0:fc:41:18:d4:07:46:10:b8:e3:05:71:8c:90: 44:34:ee:25:32:b0:75:90:ac:57:d6:7d:68:d0:f8: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:08:AC:DF:80:8F:34:18:F8:F2:9D:B5:B9:4F:F4:0E:CA:79:39:C9 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:83:c2:a6:9b:02:42:84:eb:0c:62:23:5f:2f:01:1a:bd:3f: 50:3b:bb:75:34:60:68:20:65:e0:b4:c9:63:b2:43:e2:24:91: a8:64:d4:17:24:4c:88:83:89:83:fa:6f:6e:0d:49:43:ad:bf: fe:12:0d:dc:22:c9:98:fd:4b:f3:8e:7d:dd:e6:eb:6e:dc:ef: 3e:b1:c6:b7:5c:39:9a:4f:90:15:33:b6:39:a9:d0:d4:d5:ef: 40:b4:20:04:4f:f0:74:17:26:e3:e3:db:fe:98:8b:fe:d7:aa: a0:49:d1:d1:b1:fa:7f:d8:c8:6d:b6:83:3e:62:64:d6:2f:a3: 01:84:13:f4:da:08:17:6c:1f:79:28:00:b7:de:87:9b:32:f0: 8f:85:4b:52:be:5a:ea:41:de:78:ac:50:2b:93:54:dc:89:33: 8e:a4:02:3e:34:98:94:d1:23:d8:41:5f:50:80:9f:0a:70:35: c2:88:3b:9c:ee:e0:11:b8:45:ad:4d:ac:49:57:e2:df:1f:60: 21:26:cc:85:36:0c:d6:1d:f3:c0:37:f1:1e:84:90:5d:ea:d7: 9e:0b:5f:ff:fd:b3:20:c2:40:92:e3:c8:bc:83:c0:5f:13:49: 1e:9b:a6:e7:b1:f9:a5:2b:0f:d9:47:4d:1c:ca:d2:21:5f:de: ff:46:c7:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGd0PGy9emq/N25gthCq8EEhcHa0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA1MDE1MDIxWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGM2Y2Y4NGNkNmY2MmE4NDU0MGMwNzZmYjJhOTNhMzBh NTg4YjYzMDQ0ODE0MmU1OTM2ZGU5NWYxNTAzMWFlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDj8e7Fbiz+aAgAnG/GzVLhcWals/TkG28FK4vlwIqKyyoG Ag7GxzwSDpQCdmb3KsenXxLfC0XhNFR5OIvrysRtnV8b9uy88XfeZpWtHHp4/z1d wIFijSktrjNPNsAp5JbxhtgRwHa/AETM9oOgwpe2+bOomZ2TDIsyGqpRvxpDmADJ lyFdsZqk9IqLNn9yiunhNjM08pcEAOARshzyvyX8UsiwYJmtMAvsmc8p/EC/zRBw AtH1868EijKrWMmhfLgdM8Fw8IhWr+oIKz4sBW1glZAVXb0S3ulSuUQ3sTRvseXw /EEY1AdGELjjBXGMkEQ07iUysHWQrFfWfWjQ+KkrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvgis34CPNBj48p21uU/0Dsp5OckwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBiZTZlNjYyLWFmYzktNDkwMy05OTE5LTg5NGYwMzVhNDc1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBACuDwqabAkKE6wxiI18vARq9P1A7 u3U0YGggZeC0yWOyQ+Ikkahk1BckTIiDiYP6b24NSUOtv/4SDdwiyZj9S/OOfd3m 627c7z6xxrdcOZpPkBUztjmp0NTV70C0IARP8HQXJuPj2/6Yi/7XqqBJ0dGx+n/Y yG22gz5iZNYvowGEE/TaCBdsH3koALfeh5sy8I+FS1K+WupB3nisUCuTVNyJM46k Aj40mJTRI9hBX1CAnwpwNcKIO5zu4BG4Ra1NrElX4t8fYCEmzIU2DNYd88A38R6E kF3q154LX//9syDCQJLjyLyDwF8TSR6bpuex+aUrD9lHTRzK0iFf3v9GxwA= -----END CERTIFICATE-----Generated at Fri Aug 21 00:16:14 2026 by rpki-client