$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/22f66e2d-2753-44a1-9aec-16b69cdffad1.roa File: 22f66e2d-2753-44a1-9aec-16b69cdffad1.roa (raw, json) Hash identifier: Ruavs2zBo/iJQQK/9GJD4ynXixxpJ20NDlTxaGUi26s= Subject key identifier: 7F:C6:5E:EE:2A:70:F7:F9:8A:A4:64:03:27:8A:DB:8A:22:E2:03:A0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6F95A6534CE3C2E6D4467B21F208EA5F33C7C9E8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/22f66e2d-2753-44a1-9aec-16b69cdffad1.roa Signing time: Sat 08 Aug 2026 00:00:05 +0000 ROA not before: Sat 08 Aug 2026 00:00:05 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:95:a6:53:4c:e3:c2:e6:d4:46:7b:21:f2:08:ea:5f:33:c7:c9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 8 00:00:05 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=32e8bbd862c623822bbb37bf6f7d21f4c75ff96dc1160c767411847aa59ca9a8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:bd:0c:26:a3:1d:b7:bd:8f:4f:92:b2:f6: 4e:d2:27:ce:81:ad:0d:aa:2e:a0:83:5d:9c:ba:5f: 5b:7c:5b:ea:a3:78:b6:4b:a8:99:80:59:fe:0b:3b: 27:f9:35:a7:84:88:0d:56:51:61:25:b4:f4:a7:c5: cd:2e:e5:c8:41:ef:b2:f6:76:ff:be:bb:59:f7:1f: 3c:e5:9e:d1:9c:5d:27:b3:3e:d9:fe:93:4b:1c:f3: 8c:17:02:80:b8:8a:e4:c4:72:22:57:e8:ce:af:47: 3c:f6:1f:b7:d7:e1:a7:3d:71:2d:c6:3c:c7:38:02: 93:cc:bd:e2:6d:ca:00:31:41:02:37:d8:b7:b5:f9: 45:d2:38:41:fb:98:42:29:bb:f2:99:e1:74:af:31: f1:f2:fc:76:f2:b3:b8:2e:e4:3e:6a:ad:41:39:83: 65:05:ee:c9:e5:cd:ad:d2:32:1e:08:26:05:7b:6f: 65:bf:d4:df:5c:f3:d5:a5:28:ae:34:fe:f8:c6:4b: 86:e4:26:fe:03:4e:48:74:fd:12:21:14:f0:6f:f8: 59:73:7c:aa:de:81:c7:b7:3c:bc:a8:a8:5e:e7:5f: 58:95:dd:7a:62:f2:1e:85:0d:64:cc:43:d6:fb:4e: 44:67:e2:16:16:1b:57:19:b1:81:25:ad:14:c3:ce: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C6:5E:EE:2A:70:F7:F9:8A:A4:64:03:27:8A:DB:8A:22:E2:03:A0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/22f66e2d-2753-44a1-9aec-16b69cdffad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.1.0/24 Signature Algorithm: sha256WithRSAEncryption 67:0e:93:4d:ef:d4:b1:f4:08:1e:c3:01:c4:f0:f8:81:f1:34: bd:56:e3:64:ec:82:fb:41:c3:6f:b9:6b:1e:f9:61:76:41:fc: cf:78:8a:54:04:b3:48:75:97:d0:ec:d0:75:52:3c:a1:37:26: f5:3f:e1:89:73:6c:f6:c5:04:eb:8e:4c:47:bb:70:db:dc:78: 41:7f:cb:4d:25:7f:f1:73:53:87:1e:6b:71:6d:19:d6:8f:9d: 47:05:32:9e:d3:39:66:3e:a0:d5:d7:43:bd:66:71:3b:f8:3e: 5e:26:7b:f0:17:d7:16:e6:b4:66:dc:b7:f4:aa:56:d3:8a:35: b3:d3:1f:0f:d2:51:00:68:71:2f:5a:8c:c3:3d:73:c4:80:4b: 1f:74:89:e1:76:a6:9a:82:1e:fe:8c:b1:5f:19:d3:d1:bc:bc: e8:4f:98:af:c8:28:b7:2d:49:b5:c3:10:13:2e:2a:20:43:b7: 05:50:2d:84:f4:4e:10:17:d4:6e:1b:c2:45:d7:5f:9a:78:77: 2f:5a:ac:84:73:3b:9e:63:43:45:49:d4:13:61:36:08:f1:e9: 98:c1:f3:09:7d:db:03:9b:b3:85:9b:c0:31:c8:36:c4:6b:c6: d7:bf:7f:65:1d:82:20:f5:05:2c:f6:5e:58:13:03:84:b4:cf: c0:e7:a3:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb5WmU0zjwubURnsh8gjqXzPHyegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA4MDAwMDA1WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmU4YmJkODYyYzYyMzgyMmJiYjM3YmY2ZjdkMjFmNGM3 NWZmOTZkYzExNjBjNzY3NDExODQ3YWE1OWNhOWE4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOU70MJqMdt72PT5Ky9k7SJ86BrQ2qLqCDXZy6X1t8W+qj eLZLqJmAWf4LOyf5NaeEiA1WUWEltPSnxc0u5chB77L2dv++u1n3HzzlntGcXSez Ptn+k0sc84wXAoC4iuTEciJX6M6vRzz2H7fX4ac9cS3GPMc4ApPMveJtygAxQQI3 2Le1+UXSOEH7mEIpu/KZ4XSvMfHy/Hbys7gu5D5qrUE5g2UF7snlza3SMh4IJgV7 b2W/1N9c89WlKK40/vjGS4bkJv4DTkh0/RIhFPBv+FlzfKregce3PLyoqF7nX1iV 3Xpi8h6FDWTMQ9b7TkRn4hYWG1cZsYElrRTDzgPJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf8Ze7ipw9/mKpGQDJ4rbiiLiA6AwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzIyZjY2ZTJkLTI3NTMtNDRhMS05YWVjLTE2YjY5Y2RmZmFkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAEwDQYJKoZIhvcNAQELBQADggEBAGcOk03v1LH0CB7DAcTw+IHxNL1W 42TsgvtBw2+5ax75YXZB/M94ilQEs0h1l9Ds0HVSPKE3JvU/4YlzbPbFBOuOTEe7 cNvceEF/y00lf/FzU4cea3FtGdaPnUcFMp7TOWY+oNXXQ71mcTv4Pl4me/AX1xbm tGbct/SqVtOKNbPTHw/SUQBocS9ajMM9c8SASx90ieF2ppqCHv6MsV8Z09G8vOhP mK/IKLctSbXDEBMuKiBDtwVQLYT0ThAX1G4bwkXXX5p4dy9arIRzO55jQ0VJ1BNh Ngjx6ZjB8wl92wObs4WbwDHINsRrxte/f2UdgiD1BSz2XlgTA4S0z8DnowM= -----END CERTIFICATE-----Generated at Fri Aug 21 01:41:37 2026 by rpki-client