$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa File: 8ac8d230-2c50-472b-aaac-384834352fef.roa (raw, json) Hash identifier: 8GN2NywEwrO+fANiLAjill0rfJ98WrzU91lUlOCIzSc= Subject key identifier: 73:22:0A:C8:94:95:5D:12:64:3E:0F:D5:63:E9:B8:3E:08:AC:8D:78 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3D62792BE6B02B6EBDE8C39C24668FC154FE0D41 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa Signing time: Wed 05 Aug 2026 02:00:12 +0000 ROA not before: Wed 05 Aug 2026 02:00:12 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:62:79:2b:e6:b0:2b:6e:bd:e8:c3:9c:24:66:8f:c1:54:fe:0d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 5 02:00:12 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=52e5643b86e0cd16e0b30546f07a170c950e50e6fcd13cce5e90e1dc67e491b9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:37:b6:ff:94:73:ab:a5:09:41:9a:e0:3b: 5d:4e:f0:99:96:80:94:f6:04:4e:83:b9:4f:bb:bb: fa:d4:86:38:3b:78:26:c1:62:7d:a4:b9:b3:d9:27: 2b:85:72:de:59:46:67:6a:04:88:b3:57:d9:9c:b3: 39:90:55:27:5c:97:d8:2f:4e:ba:12:f0:8b:24:07: 56:20:a9:de:c2:e2:38:71:33:45:94:c1:ca:55:16: 8a:aa:e6:1b:b0:0b:9b:6f:42:4d:b9:aa:6e:28:e7: f8:62:f8:14:e2:50:51:ab:36:8c:21:07:ab:62:7f: 82:e7:87:3f:30:5b:c9:77:a6:aa:50:df:f6:83:6d: 11:0d:e8:91:3c:3b:8e:ce:8c:74:e6:63:42:f3:6b: 0f:fd:10:96:ef:6d:d6:e6:23:39:c9:56:f2:5e:84: c9:98:d1:6c:31:78:c4:82:83:74:87:80:ea:72:5a: 8f:bd:5d:39:27:e7:88:77:c5:91:38:3c:f2:ab:f9: ad:3b:35:cb:48:ec:9a:16:16:e3:20:5f:61:c4:aa: 46:9a:46:49:50:35:66:57:96:5d:99:4e:d1:00:0c: 9d:66:f6:fe:16:95:18:03:26:96:42:34:36:c5:55: f6:37:95:d6:e5:cd:cc:ed:50:68:78:38:8f:f3:e1: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:22:0A:C8:94:95:5D:12:64:3E:0F:D5:63:E9:B8:3E:08:AC:8D:78 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.36.0/24 Signature Algorithm: sha256WithRSAEncryption 00:02:57:0f:61:36:35:97:2d:d9:57:fd:df:12:24:37:ff:c8: 0a:bd:07:69:1e:59:48:0a:42:39:eb:4c:0c:46:5b:ac:2c:86: e0:fe:8b:98:f7:95:d7:45:ac:e8:3f:b8:f3:5c:ed:e2:d6:03: 9e:30:b8:d7:1a:26:40:e2:a1:9d:19:d3:f2:ae:82:9c:85:03: 7e:fc:36:65:e1:67:e6:d2:a4:d3:62:f8:53:b1:ed:85:7c:f5: 98:27:58:4c:23:36:b9:b7:ae:d6:55:15:01:92:6e:d1:14:ad: cb:8a:64:ee:e2:4d:c4:a6:e0:87:43:9b:21:c8:7b:78:ab:fd: 10:94:8f:17:49:ec:7d:7e:c8:43:0c:99:bf:16:76:a4:03:75: 86:a5:24:67:46:fb:fd:97:ed:41:3c:61:6b:57:8a:98:8b:82: d9:5b:ad:30:4a:be:5b:1e:79:1d:d9:f9:24:bb:f1:be:fb:48: 1b:09:f0:61:09:d7:b3:cc:12:95:16:d9:b4:9d:a7:d0:03:11: 1a:66:c1:3e:12:2d:07:5e:ac:54:c5:40:bc:f0:3d:76:c1:7b: d8:00:5f:80:fb:68:e4:11:50:cf:7c:e1:8e:e5:8c:9a:31:29: 8f:0b:fb:c9:4a:08:2e:fc:0a:c5:d4:0a:ac:9a:69:15:f1:da: e8:f5:d7:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPWJ5K+awK2696MOcJGaPwVT+DUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA1MDIwMDEyWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmU1NjQzYjg2ZTBjZDE2ZTBiMzA1NDZmMDdhMTcwYzk1 MGU1MGU2ZmNkMTNjY2U1ZTkwZTFkYzY3ZTQ5MWI5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMuje2/5Rzq6UJQZrgO11O8JmWgJT2BE6DuU+7u/rUhjg7 eCbBYn2kubPZJyuFct5ZRmdqBIizV9mcszmQVSdcl9gvTroS8IskB1Ygqd7C4jhx M0WUwcpVFoqq5huwC5tvQk25qm4o5/hi+BTiUFGrNowhB6tif4Lnhz8wW8l3pqpQ 3/aDbREN6JE8O47OjHTmY0Lzaw/9EJbvbdbmIznJVvJehMmY0WwxeMSCg3SHgOpy Wo+9XTkn54h3xZE4PPKr+a07NctI7JoWFuMgX2HEqkaaRklQNWZXll2ZTtEADJ1m 9v4WlRgDJpZCNDbFVfY3ldblzcztUGh4OI/z4U57AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcyIKyJSVXRJkPg/VY+m4PgisjXgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhhYzhkMjMwLTJjNTAtNDcyYi1hYWFjLTM4NDgzNDM1MmZlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBAAACVw9hNjWXLdlX/d8SJDf/yAq9 B2keWUgKQjnrTAxGW6wshuD+i5j3lddFrOg/uPNc7eLWA54wuNcaJkDioZ0Z0/Ku gpyFA378NmXhZ+bSpNNi+FOx7YV89ZgnWEwjNrm3rtZVFQGSbtEUrcuKZO7iTcSm 4IdDmyHIe3ir/RCUjxdJ7H1+yEMMmb8WdqQDdYalJGdG+/2X7UE8YWtXipiLgtlb rTBKvlseeR3Z+SS78b77SBsJ8GEJ17PMEpUW2bSdp9ADERpmwT4SLQderFTFQLzw PXbBe9gAX4D7aOQRUM984Y7ljJoxKY8L+8lKCC78CsXUCqyaaRXx2uj113o= -----END CERTIFICATE-----Generated at Thu Aug 20 21:54:58 2026 by rpki-client