$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5326ca5e-a778-4b74-be6f-4744733301e8.roa File: 5326ca5e-a778-4b74-be6f-4744733301e8.roa (raw, json) Hash identifier: Kq/B68MSM6FAF2TszRsGwD+H2Lq47pyznOfNqu3F7iE= Subject key identifier: E3:1A:70:BA:EE:35:59:16:FF:70:2F:BE:E2:3D:10:F5:07:6C:DC:FC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6A2A2083C1B497AF6180F73173929FEB3A7CD91D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5326ca5e-a778-4b74-be6f-4744733301e8.roa Signing time: Sun 02 Aug 2026 00:00:06 +0000 ROA not before: Sun 02 Aug 2026 00:00:06 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 35.111.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2a:20:83:c1:b4:97:af:61:80:f7:31:73:92:9f:eb:3a:7c:d9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 2 00:00:06 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=b15f0fc7958470c1d224291bd38e2050179596c055b9305f20086fe142f51d95, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:3b:f4:fd:a7:46:fb:49:f7:e9:ed:1a:3e: 28:e8:a8:47:60:43:17:ad:22:86:ec:bf:49:23:af: 13:63:44:a3:c4:cf:e5:dd:2e:77:92:68:a4:0c:80: e1:0e:b1:8e:c0:ff:9f:3a:94:b5:fb:fb:ab:73:f0: 61:68:5e:3c:fe:08:d1:0f:c1:6e:e7:04:81:10:31: 5a:7d:a7:84:0c:cb:3d:e3:4e:dc:9c:0f:97:1a:d0: 99:2c:cb:4a:2b:5b:f3:95:ec:d1:11:ba:0a:89:86: c4:7d:c2:28:0a:4c:4a:c0:b7:ec:23:df:93:62:23: 22:7f:96:e3:d8:1a:42:bb:64:a6:85:6a:d9:93:f0: 57:7a:12:05:a2:20:42:e8:08:21:f8:46:c5:80:1a: 2e:9c:0f:9e:bd:17:db:df:12:bd:24:be:17:74:a2: ea:81:9b:d9:b3:31:f2:94:a6:b7:90:b8:c1:5c:c6: ec:b4:ad:01:64:fc:85:9e:42:09:cd:fd:f2:4b:06: b7:4b:45:d1:4e:43:ea:55:db:35:5d:0f:63:b6:6b: aa:01:08:36:7d:b7:99:3d:02:c6:5d:93:aa:59:a7: 31:44:23:c7:3b:15:76:f3:96:6b:4f:49:23:a2:3d: b9:1a:80:72:a5:19:d2:2e:f2:20:f8:63:fa:13:51: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1A:70:BA:EE:35:59:16:FF:70:2F:BE:E2:3D:10:F5:07:6C:DC:FC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5326ca5e-a778-4b74-be6f-4744733301e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.253.0/24 Signature Algorithm: sha256WithRSAEncryption 92:32:d9:33:21:4e:3f:2e:d5:14:1f:1a:86:37:be:63:ba:a5: aa:de:22:0d:b3:0d:47:3f:80:ab:bc:55:7b:3c:03:fa:69:89: be:25:a1:00:06:90:be:75:a5:fb:cf:8a:a4:0e:11:63:47:ef: a1:80:13:b1:b6:a9:69:ee:f7:62:7c:2e:04:e4:eb:d7:52:29: f2:21:92:19:d2:3f:35:2d:86:78:a9:42:9c:4a:7e:20:85:28: de:56:ff:60:c9:65:1b:e9:99:41:22:9c:dd:5c:69:59:84:8b: 81:c3:d0:c7:01:37:21:93:d8:17:a4:0e:68:43:78:cd:8d:fa: 17:fb:93:c2:da:2a:46:ba:15:9f:b4:53:de:65:96:af:87:e3: 2e:e1:47:e5:11:b4:ae:10:89:4a:bd:19:7d:30:22:c8:85:39: 29:69:33:66:e6:05:34:d1:4f:79:34:7f:0c:69:73:f1:6a:88: 9b:2b:48:3d:62:d1:12:67:29:d4:7d:60:69:7e:42:3b:88:5f: d4:7b:29:7d:86:d1:59:52:5a:3d:5f:76:40:80:c0:c0:1f:60: d1:84:5c:9a:ae:9e:55:f9:b7:3e:e4:0f:3b:2f:02:96:ef:c8: 8a:45:5a:60:fd:44:84:73:0d:c6:14:86:50:8b:76:9a:a4:e4: 79:e7:1c:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaiogg8G0l69hgPcxc5Kf6zp82R0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODAyMDAwMDA2WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTVmMGZjNzk1ODQ3MGMxZDIyNDI5MWJkMzhlMjA1MDE3 OTU5NmMwNTViOTMwNWYyMDA4NmZlMTQyZjUxZDk1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2gzv0/adG+0n36e0aPijoqEdgQxetIobsv0kjrxNjRKPE z+XdLneSaKQMgOEOsY7A/586lLX7+6tz8GFoXjz+CNEPwW7nBIEQMVp9p4QMyz3j TtycD5ca0Jksy0orW/OV7NERugqJhsR9wigKTErAt+wj35NiIyJ/luPYGkK7ZKaF atmT8Fd6EgWiIELoCCH4RsWAGi6cD569F9vfEr0kvhd0ouqBm9mzMfKUpreQuMFc xuy0rQFk/IWeQgnN/fJLBrdLRdFOQ+pV2zVdD2O2a6oBCDZ9t5k9AsZdk6pZpzFE I8c7FXbzlmtPSSOiPbkagHKlGdIu8iD4Y/oTUbvNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4xpwuu41WRb/cC++4j0Q9Qds3PwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzUzMjZjYTVlLWE3NzgtNGI3NC1iZTZmLTQ3NDQ3MzMzMDFlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/0wDQYJKoZIhvcNAQELBQADggEBAJIy2TMhTj8u1RQfGoY3vmO6pare Ig2zDUc/gKu8VXs8A/ppib4loQAGkL51pfvPiqQOEWNH76GAE7G2qWnu92J8LgTk 69dSKfIhkhnSPzUthnipQpxKfiCFKN5W/2DJZRvpmUEinN1caVmEi4HD0McBNyGT 2BekDmhDeM2N+hf7k8LaKka6FZ+0U95llq+H4y7hR+URtK4QiUq9GX0wIsiFOSlp M2bmBTTRT3k0fwxpc/FqiJsrSD1i0RJnKdR9YGl+QjuIX9R7KX2G0VlSWj1fdkCA wMAfYNGEXJqunlX5tz7kDzsvApbvyIpFWmD9RIRzDcYUhlCLdpqk5HnnHPg= -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:58 2026 by rpki-client