$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4a9d31bb-156d-4541-a999-3e892b23c6d5.roa File: 4a9d31bb-156d-4541-a999-3e892b23c6d5.roa (raw, json) Hash identifier: JUzrkGxo99LiZAURQeuyAfXWMFekQT8Vgu09rP8RAys= Subject key identifier: BA:E1:63:11:38:66:0E:64:AD:2A:B7:E1:D2:81:07:51:08:7C:70:DD Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2CBA354675CB5151B92B90CB368B8A892A51D16F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4a9d31bb-156d-4541-a999-3e892b23c6d5.roa Signing time: Fri 31 Jul 2026 01:50:09 +0000 ROA not before: Fri 31 Jul 2026 01:50:09 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ba:35:46:75:cb:51:51:b9:2b:90:cb:36:8b:8a:89:2a:51:d1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 31 01:50:09 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=b3f181abe1b531839c82bebe90cba02247c0015571de9116e1ce9f75123a183d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:85:c8:07:36:d9:61:dd:f4:4e:38:cb:59:c3: b9:ff:5c:37:af:c2:6b:53:94:ee:43:f5:78:bd:b4: aa:8c:25:21:95:63:dd:f9:9f:52:bc:18:92:bf:97: f3:be:aa:74:05:38:4f:b1:bf:12:a9:56:d4:ce:1b: 8d:1d:f9:6b:f5:a7:ff:c3:67:47:82:f6:39:ac:a0: 96:67:2c:de:f5:d4:2f:e7:7b:13:8a:3c:bd:6e:77: 5c:57:ed:c7:38:2d:d3:6f:4e:b3:dc:56:77:29:dd: a3:8d:a2:29:c4:87:b6:f9:b8:00:09:10:41:cb:c2: 00:a4:11:bc:d0:2a:a3:84:60:22:c2:7f:3a:70:17: ea:df:2d:79:db:e3:17:6f:f9:ed:95:c6:35:95:2c: 4d:12:65:6b:24:0c:19:1e:c4:a7:09:77:3c:85:64: 8c:1c:7c:92:fe:b8:8e:d1:72:3d:0a:ed:e6:26:12: 54:a0:54:65:1b:67:15:41:90:e7:0e:3a:be:c4:4b: 2a:0b:15:e7:09:d1:60:68:b4:96:fe:29:5a:0b:01: 94:ed:fe:21:3d:34:be:be:35:8f:b7:a6:13:d3:4b: 4f:d6:c9:36:f4:b7:d3:6a:c7:dd:bc:0b:5a:0e:5f: b2:06:cf:ba:5a:d5:9a:95:07:cc:ed:11:5b:cc:45: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:63:11:38:66:0E:64:AD:2A:B7:E1:D2:81:07:51:08:7C:70:DD X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4a9d31bb-156d-4541-a999-3e892b23c6d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.51.0/24 Signature Algorithm: sha256WithRSAEncryption 16:1f:5a:c6:ef:dd:98:22:8e:72:a0:0c:05:8b:5f:28:86:b5: ea:19:e5:03:15:21:30:50:5e:28:c5:90:f7:25:1c:2f:d9:cd: c4:e4:7b:99:f1:9a:b8:6e:2e:7f:47:23:11:ad:61:a1:aa:ce: 32:6c:f7:d1:7e:de:ff:6b:20:fd:a4:ab:5e:1c:c4:00:77:cc: 47:0f:16:80:34:17:f5:ca:c9:2d:a2:89:78:39:bb:dc:3f:91: 91:d9:57:cf:a3:20:0d:58:0c:f9:53:0a:e5:c4:49:79:b5:14: ac:e0:ec:52:d5:ec:12:65:c1:fb:9f:84:d6:eb:ef:9c:8e:bc: c1:9e:e1:d6:50:45:7c:c4:28:fd:53:3f:10:98:47:0b:f4:fd: 10:ee:ce:ab:55:31:6a:cc:2b:42:29:44:03:84:26:e0:f4:a7: ab:8d:01:35:3d:41:89:ed:d9:6f:d2:de:08:5f:33:50:5c:97: 43:79:68:dd:08:2c:6d:3d:7e:13:d8:58:5a:a7:d9:b3:57:25: ea:d7:79:70:13:22:2b:93:4b:10:0a:a2:2c:5b:14:e8:74:ac: a2:71:c0:05:14:2c:5c:39:4b:e6:1d:c5:ca:2a:73:40:50:e7: 73:27:09:b3:a5:64:53:4c:c7:1f:45:5f:1c:0e:7b:24:47:b9: 36:b5:e9:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULLo1RnXLUVG5K5DLNouKiSpR0W8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzMxMDE1MDA5WhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2YxODFhYmUxYjUzMTgzOWM4MmJlYmU5MGNiYTAyMjQ3 YzAwMTU1NzFkZTkxMTZlMWNlOWY3NTEyM2ExODNkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDshcgHNtlh3fROOMtZw7n/XDevwmtTlO5D9Xi9tKqMJSGV Y935n1K8GJK/l/O+qnQFOE+xvxKpVtTOG40d+Wv1p//DZ0eC9jmsoJZnLN711C/n exOKPL1ud1xX7cc4LdNvTrPcVncp3aONoinEh7b5uAAJEEHLwgCkEbzQKqOEYCLC fzpwF+rfLXnb4xdv+e2VxjWVLE0SZWskDBkexKcJdzyFZIwcfJL+uI7Rcj0K7eYm ElSgVGUbZxVBkOcOOr7ESyoLFecJ0WBotJb+KVoLAZTt/iE9NL6+NY+3phPTS0/W yTb0t9Nqx928C1oOX7IGz7pa1ZqVB8ztEVvMRTchAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuuFjEThmDmStKrfh0oEHUQh8cN0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzRhOWQzMWJiLTE1NmQtNDU0MS1hOTk5LTNlODkyYjIzYzZkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDMwDQYJKoZIhvcNAQELBQADggEBABYfWsbv3ZgijnKgDAWLXyiGteoZ 5QMVITBQXijFkPclHC/ZzcTke5nxmrhuLn9HIxGtYaGqzjJs99F+3v9rIP2kq14c xAB3zEcPFoA0F/XKyS2iiXg5u9w/kZHZV8+jIA1YDPlTCuXESXm1FKzg7FLV7BJl wfufhNbr75yOvMGe4dZQRXzEKP1TPxCYRwv0/RDuzqtVMWrMK0IpRAOEJuD0p6uN ATU9QYnt2W/S3ghfM1Bcl0N5aN0ILG09fhPYWFqn2bNXJerXeXATIiuTSxAKoixb FOh0rKJxwAUULFw5S+Ydxcoqc0BQ53MnCbOlZFNMxx9FXxwOeyRHuTa16Xs= -----END CERTIFICATE-----Generated at Fri Aug 21 02:24:38 2026 by rpki-client