$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa File: 7c33d577-2251-4085-bace-8c3b8f2bada2.roa (raw, json) Hash identifier: 5TwZaWnxyCvc/R5LqCwvOO2T6soaKQxMOcprP/8Wkr0= Subject key identifier: CE:C5:11:86:A0:CC:27:00:F9:D6:91:63:81:A2:3C:BE:85:53:AD:8F Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4B03FA8A36690177CBA98BCC18CDC3D6AF80D9B2 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa Signing time: Sat 08 Aug 2026 00:00:06 +0000 ROA not before: Sat 08 Aug 2026 00:00:06 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:03:fa:8a:36:69:01:77:cb:a9:8b:cc:18:cd:c3:d6:af:80:d9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 8 00:00:06 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=d76ce4b6e548674a9fede07e6f5cbe5592e95fffa087a211af54ba5b86572ae3, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:6e:3b:ea:d9:81:aa:8f:8c:b4:f3:92:68: 61:4a:57:dd:c0:73:55:9b:d7:5f:d6:bb:11:65:9a: 7d:7d:11:7e:ab:d4:2d:c5:f7:b3:0e:04:42:55:2d: fb:32:34:ae:b4:58:d8:f4:34:46:48:e0:ac:5e:93: 27:69:f0:d7:a0:97:68:04:19:6b:97:f4:08:28:84: ad:22:83:75:2d:23:a9:7a:ff:a0:bd:e4:61:b1:c4: fb:7f:27:2e:79:18:c9:17:b9:1a:dc:68:19:6c:5c: f2:3c:89:30:73:9c:e9:28:cf:cf:b4:b5:2a:06:b4: 4a:8d:50:1d:28:fe:5b:ae:d6:b0:dc:c9:a3:74:e4: 1f:9d:36:f6:bc:e6:33:59:52:e5:01:d3:eb:b3:57: 3b:95:33:97:0d:f9:10:5d:bd:8a:38:96:eb:17:8d: 28:e8:77:0d:0a:c3:55:6c:af:5c:72:a2:c5:4f:d4: 58:ba:04:05:ee:55:f3:e8:1f:ad:d4:bf:93:7b:9f: 8a:e8:3b:a7:fd:0a:4c:94:b1:3d:2e:2d:a0:55:50: fe:af:eb:d2:1f:33:2c:bb:a4:68:ea:2c:53:44:ac: 60:7d:26:c4:c8:19:46:9a:5e:9b:8f:20:ff:a9:06: e1:3f:1d:7d:c5:a5:9b:c1:36:ae:48:0c:e4:ac:80: 5b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C5:11:86:A0:CC:27:00:F9:D6:91:63:81:A2:3C:BE:85:53:AD:8F X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.1.0/24 Signature Algorithm: sha256WithRSAEncryption 84:cc:35:36:c6:2a:39:5e:bb:c5:b3:78:64:76:f0:e3:3a:22: f5:88:f5:f9:01:86:e3:97:d7:8d:a1:ad:e1:eb:1a:19:77:89: c1:5b:e1:ee:c5:b5:70:4f:0d:88:9c:d0:76:bb:13:21:19:5c: f9:8d:25:4b:20:81:e9:43:6c:35:37:7b:19:98:ea:ab:1a:b7: 5a:25:bb:22:86:12:28:17:6b:39:af:dd:29:fe:78:59:5a:54: 03:cb:b9:5f:f8:5b:e6:82:a7:3f:bf:5e:11:34:3f:6d:9b:d1: 0b:52:16:e6:9f:42:00:8e:73:09:c0:5b:cd:0f:f4:e8:ed:10: 75:17:42:b6:c7:c6:3c:b2:4c:b9:e5:37:8d:cd:66:c8:c7:d4: 16:8a:b3:1e:4c:33:1a:13:71:c3:fb:53:13:59:44:91:d8:c3: c8:df:34:65:89:39:05:7d:eb:aa:0d:dd:0d:9b:2e:b1:45:c1: 1b:92:95:a9:eb:09:c1:8b:d1:6a:0e:20:cc:aa:77:46:99:fa: 28:73:55:62:77:6d:be:18:26:de:67:48:b2:29:8a:b1:61:e3: b0:d8:ea:dc:a4:6a:35:0e:9e:dd:1e:ff:fb:e0:1c:56:12:3e: 86:96:11:fa:2e:04:29:86:ba:2b:24:dc:fb:de:ee:24:77:b1: 1d:98:dd:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSwP6ijZpAXfLqYvMGM3D1q+A2bIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA4MDAwMDA2WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzZjZTRiNmU1NDg2NzRhOWZlZGUwN2U2ZjVjYmU1NTky ZTk1ZmZmYTA4N2EyMTFhZjU0YmE1Yjg2NTcyYWUzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWE2476tmBqo+MtPOSaGFKV93Ac1Wb11/WuxFlmn19EX6r 1C3F97MOBEJVLfsyNK60WNj0NEZI4Kxekydp8Negl2gEGWuX9AgohK0ig3UtI6l6 /6C95GGxxPt/Jy55GMkXuRrcaBlsXPI8iTBznOkoz8+0tSoGtEqNUB0o/luu1rDc yaN05B+dNva85jNZUuUB0+uzVzuVM5cN+RBdvYo4lusXjSjodw0Kw1Vsr1xyosVP 1Fi6BAXuVfPoH63Uv5N7n4roO6f9CkyUsT0uLaBVUP6v69IfMyy7pGjqLFNErGB9 JsTIGUaaXpuPIP+pBuE/HX3FpZvBNq5IDOSsgFvHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzsURhqDMJwD51pFjgaI8voVTrY8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzdjMzNkNTc3LTIyNTEtNDA4NS1iYWNlLThjM2I4ZjJiYWRhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAEwDQYJKoZIhvcNAQELBQADggEBAITMNTbGKjleu8WzeGR28OM6IvWI 9fkBhuOX142hreHrGhl3icFb4e7FtXBPDYic0Ha7EyEZXPmNJUsggelDbDU3exmY 6qsat1oluyKGEigXazmv3Sn+eFlaVAPLuV/4W+aCpz+/XhE0P22b0QtSFuafQgCO cwnAW80P9OjtEHUXQrbHxjyyTLnlN43NZsjH1BaKsx5MMxoTccP7UxNZRJHYw8jf NGWJOQV966oN3Q2bLrFFwRuSlanrCcGL0WoOIMyqd0aZ+ihzVWJ3bb4YJt5nSLIp irFh47DY6tykajUOnt0e//vgHFYSPoaWEfouBCmGuisk3Pve7iR3sR2Y3Y4= -----END CERTIFICATE-----Generated at Fri Aug 21 02:24:39 2026 by rpki-client