$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/33dd038a-1049-4282-b78d-4d1b2a396bd6.roa File: 33dd038a-1049-4282-b78d-4d1b2a396bd6.roa (raw, json) Hash identifier: pfGzyHrRzD1Y7ZJesVN+YiNDiRbwMV2K42iZuvOhovU= Subject key identifier: C7:68:2D:46:84:DA:03:54:C1:41:0C:F8:D3:F4:FC:0D:12:6C:5D:C8 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1C1FDFA6CC0DC76DDC46632C8350C45370886686 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/33dd038a-1049-4282-b78d-4d1b2a396bd6.roa Signing time: Wed 05 Aug 2026 02:00:05 +0000 ROA not before: Wed 05 Aug 2026 02:00:05 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1f:df:a6:cc:0d:c7:6d:dc:46:63:2c:83:50:c4:53:70:88:66:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 5 02:00:05 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=f401efcdad498f8e94a8148d9556b9bb5b543ea623d946177775814f5d4baf65, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:59:58:28:66:98:a1:e3:cf:2c:47:1a:2f: ce:1d:6b:98:1a:d0:86:3f:39:96:c2:bf:6d:7b:0d: a6:ad:f9:1b:11:91:05:63:b9:8d:18:1c:05:c9:cb: 60:37:8e:a1:48:f4:76:82:15:22:ce:eb:ef:83:1a: c9:d1:59:be:69:6b:d7:64:07:4f:ec:1b:1c:1f:f9: 93:62:18:57:3e:ab:20:75:87:15:a3:bd:3b:ad:ac: fe:3a:2d:97:da:5b:e1:08:4b:21:e7:73:4e:42:00: 3b:2e:a7:3b:bb:21:e3:d3:9b:9a:4d:8d:31:be:e4: 14:04:7a:37:42:48:22:3d:52:e8:28:e5:01:92:51: c8:76:0f:d0:37:23:a4:5e:ee:99:dd:07:88:53:d4: 3c:1b:81:8b:ef:23:5f:41:80:f0:a3:9a:c4:a2:92: 19:c7:9e:e6:b8:d8:3d:0f:b0:3a:47:e0:1c:b0:4d: c4:64:bd:e4:16:41:de:58:a4:22:4a:b1:ba:3e:e0: 82:60:c5:37:98:06:d7:6a:54:9b:6c:8b:a3:d0:d2: 8a:cc:7c:09:f6:3c:77:32:75:0f:da:a8:a9:4b:d3: 60:fa:05:d0:e4:da:9d:83:2e:b5:f7:bc:5f:9f:44: 76:2c:77:f5:53:92:69:17:36:f6:65:ef:7b:7a:78: 93:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:68:2D:46:84:DA:03:54:C1:41:0C:F8:D3:F4:FC:0D:12:6C:5D:C8 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/33dd038a-1049-4282-b78d-4d1b2a396bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.42.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:2b:c7:49:59:bc:ef:e4:ca:51:cf:ce:9b:b5:16:24:4b:70: b3:73:d3:82:8d:19:29:90:34:8d:ff:27:14:fd:e6:d4:25:8b: 3d:13:c1:72:b8:d7:8b:92:5f:9a:cb:81:59:7b:89:85:3d:fe: 4f:c0:96:73:4f:b1:6a:1c:4f:7f:e8:7b:ca:7f:8f:59:f2:30: 81:2f:ba:11:71:1b:99:36:40:24:bb:b7:bf:fc:25:31:b9:1e: 9d:36:ba:db:bd:b9:d5:cf:b7:e1:06:57:87:85:ef:51:1a:75: e9:c5:b6:08:fc:ef:61:51:68:6c:9f:2b:f9:b9:20:70:25:99: 65:0a:47:08:2e:02:0b:21:2b:86:ec:33:e9:b1:44:05:0a:40: 9a:dd:8c:eb:bc:b5:50:02:51:da:e0:da:b8:cb:f7:bd:c5:bf: 89:0e:86:ed:61:26:a9:6c:6f:f8:ba:b1:68:4a:94:c0:cc:dd: 5c:79:a4:9c:62:2f:33:92:ed:31:3b:b5:88:d7:af:9e:c8:bb: a1:6a:d4:f1:e5:83:a4:b2:95:c2:2f:18:e3:f2:eb:07:86:21: 40:6f:76:60:82:7b:68:8c:ae:2e:9a:b6:4c:ab:c5:46:10:b5: 32:c8:6d:47:8a:99:09:e7:3a:52:2b:5b:a5:cf:83:87:53:11: 04:16:4f:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHB/fpswNx23cRmMsg1DEU3CIZoYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA1MDIwMDA1WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDAxZWZjZGFkNDk4ZjhlOTRhODE0OGQ5NTU2YjliYjVi NTQzZWE2MjNkOTQ2MTc3Nzc1ODE0ZjVkNGJhZjY1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCix1lYKGaYoePPLEcaL84da5ga0IY/OZbCv217Daat+RsR kQVjuY0YHAXJy2A3jqFI9HaCFSLO6++DGsnRWb5pa9dkB0/sGxwf+ZNiGFc+qyB1 hxWjvTutrP46LZfaW+EISyHnc05CADsupzu7IePTm5pNjTG+5BQEejdCSCI9Uugo 5QGSUch2D9A3I6Re7pndB4hT1DwbgYvvI19BgPCjmsSikhnHnua42D0PsDpH4Byw TcRkveQWQd5YpCJKsbo+4IJgxTeYBtdqVJtsi6PQ0orMfAn2PHcydQ/aqKlL02D6 BdDk2p2DLrX3vF+fRHYsd/VTkmkXNvZl73t6eJNLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx2gtRoTaA1TBQQz40/T8DRJsXcgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzMzZGQwMzhhLTEwNDktNDI4Mi1iNzhkLTRkMWIyYTM5NmJkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCowDQYJKoZIhvcNAQELBQADggEBAEsrx0lZvO/kylHPzpu1FiRLcLNz 04KNGSmQNI3/JxT95tQliz0TwXK414uSX5rLgVl7iYU9/k/AlnNPsWocT3/oe8p/ j1nyMIEvuhFxG5k2QCS7t7/8JTG5Hp02utu9udXPt+EGV4eF71EadenFtgj872FR aGyfK/m5IHAlmWUKRwguAgshK4bsM+mxRAUKQJrdjOu8tVACUdrg2rjL973Fv4kO hu1hJqlsb/i6sWhKlMDM3Vx5pJxiLzOS7TE7tYjXr57Iu6Fq1PHlg6SylcIvGOPy 6weGIUBvdmCCe2iMri6atkyrxUYQtTLIbUeKmQnnOlIrW6XPg4dTEQQWT/Y= -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:45 2026 by rpki-client