$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/90515f46-7842-4990-8fd3-2073350be0ea.roa File: 90515f46-7842-4990-8fd3-2073350be0ea.roa (raw, json) Hash identifier: 4148y3qrJjiCV7W40ysm69HotaiEm26AZbW78tpsg6A= Subject key identifier: EE:2B:BF:EC:BE:75:FE:0C:32:3A:4E:FF:FA:F5:93:71:95:CD:47:57 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 20EDA6757632B115AF5C4F996917113E67AF2A8B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/90515f46-7842-4990-8fd3-2073350be0ea.roa Signing time: Mon 22 Jun 2026 00:10:04 +0000 ROA not before: Mon 22 Jun 2026 00:10:04 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.98.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ed:a6:75:76:32:b1:15:af:5c:4f:99:69:17:11:3e:67:af:2a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 22 00:10:04 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=af553858a2d9a7e10e2196840e7ce298d47237a15a34d1e8381e8da323349ef5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4e:62:a9:20:5e:8e:3b:48:84:29:60:ab:03: 67:cd:b5:b1:db:e7:71:29:01:a7:e7:fb:0b:2c:f1: c6:7c:ed:73:71:85:83:d9:0e:d9:91:7d:34:af:05: 8c:81:5c:d6:e4:14:59:12:a0:a0:00:35:35:52:0f: 9e:14:58:f8:8a:96:62:eb:52:60:3f:2e:5d:b0:cf: ca:24:24:53:fe:cf:ed:07:c2:de:7a:d9:d9:02:0f: b7:3f:3a:f8:c9:04:c4:ec:0d:10:fa:98:4c:01:20: de:47:15:58:7a:f8:50:88:15:48:28:24:37:e0:f7: bc:62:12:5a:2b:d7:d0:9c:0f:67:4c:8c:16:4a:94: 2c:2a:14:14:4c:ea:21:ea:a1:87:97:47:1a:29:3c: 69:51:3e:86:a6:c1:1e:59:6b:50:04:7c:f4:18:c9: e7:53:07:7f:5e:5d:d3:9f:83:33:64:d8:24:e4:49: ab:3d:5b:5a:c4:d2:8e:3a:99:18:2e:7c:0e:56:ab: cb:7c:07:bd:28:2b:d7:77:2c:57:83:7b:48:5e:e1: d0:34:97:21:fc:83:e7:20:a3:05:09:60:c6:29:85: e8:59:0c:39:1e:9f:57:bb:f5:55:4e:60:b1:7b:a7: 2a:92:ea:49:9b:4f:fe:04:ef:b5:e5:41:06:22:6c: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2B:BF:EC:BE:75:FE:0C:32:3A:4E:FF:FA:F5:93:71:95:CD:47:57 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/90515f46-7842-4990-8fd3-2073350be0ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.98.64.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:b8:e8:11:ff:0f:6b:ad:5c:d6:10:f6:ea:27:4c:44:d8:69: 58:74:50:99:b2:36:e3:db:f3:57:13:d8:f7:b9:68:af:32:4e: 0f:99:bf:fd:3d:9a:59:42:01:18:cd:6f:d0:60:f0:3f:ff:35: d6:4c:b7:18:a6:bc:1a:a5:08:9d:03:f6:70:24:cb:8a:c4:61: 5a:84:6e:18:7b:32:48:2a:74:05:00:58:5c:66:a1:0d:81:43: 1f:51:16:06:48:6c:60:0c:aa:7c:8c:2a:0b:66:d4:60:d0:30: 99:d9:89:cc:2c:32:99:6b:fe:3f:ae:c0:f5:8f:b1:30:b3:1f: b8:bd:71:9b:27:5e:08:c6:32:e8:2e:81:be:7c:0e:30:27:30: ca:ba:6d:06:c3:7f:a9:46:10:17:35:27:85:b5:12:88:fa:ee: b8:b3:f4:24:28:72:82:8e:b4:29:db:ba:ed:f3:76:01:82:47: 76:5b:25:d0:88:50:6c:12:fa:4c:b7:6d:36:da:61:00:7a:80: 5c:a7:fc:09:4a:0f:f0:3f:e0:e1:b2:03:72:ec:18:ee:80:19: 25:c2:0e:e6:bc:0e:3e:8d:ea:ce:20:e9:84:6a:a4:83:79:e6: 7d:4e:4d:0e:44:0e:c8:f0:66:5d:4f:7d:1b:31:48:32:75:c2: 69:4c:af:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIO2mdXYysRWvXE+ZaRcRPmevKoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNjIyMDAxMDA0WhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjU1Mzg1OGEyZDlhN2UxMGUyMTk2ODQwZTdjZTI5OGQ0 NzIzN2ExNWEzNGQxZTgzODFlOGRhMzIzMzQ5ZWY1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtTmKpIF6OO0iEKWCrA2fNtbHb53EpAafn+wss8cZ87XNx hYPZDtmRfTSvBYyBXNbkFFkSoKAANTVSD54UWPiKlmLrUmA/Ll2wz8okJFP+z+0H wt562dkCD7c/OvjJBMTsDRD6mEwBIN5HFVh6+FCIFUgoJDfg97xiElor19CcD2dM jBZKlCwqFBRM6iHqoYeXRxopPGlRPoamwR5Za1AEfPQYyedTB39eXdOfgzNk2CTk Sas9W1rE0o46mRgufA5Wq8t8B70oK9d3LFeDe0he4dA0lyH8g+cgowUJYMYphehZ DDken1e79VVOYLF7pyqS6kmbT/4E77XlQQYibLOdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7iu/7L51/gwyOk7/+vWTcZXNR1cwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkwNTE1ZjQ2LTc4NDItNDk5MC04ZmQzLTIwNzMzNTBiZTBlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYkAwDQYJKoZIhvcNAQELBQADggEBAC646BH/D2utXNYQ9uonTETYaVh0 UJmyNuPb81cT2Pe5aK8yTg+Zv/09mllCARjNb9Bg8D//NdZMtximvBqlCJ0D9nAk y4rEYVqEbhh7MkgqdAUAWFxmoQ2BQx9RFgZIbGAMqnyMKgtm1GDQMJnZicwsMplr /j+uwPWPsTCzH7i9cZsnXgjGMugugb58DjAnMMq6bQbDf6lGEBc1J4W1Eoj67riz 9CQocoKOtCnbuu3zdgGCR3ZbJdCIUGwS+ky3bTbaYQB6gFyn/AlKD/A/4OGyA3Ls GO6AGSXCDua8Dj6N6s4g6YRqpIN55n1OTQ5EDsjwZl1PfRsxSDJ1wmlMryc= -----END CERTIFICATE-----Generated at Mon Jul 6 18:16:37 2026 by rpki-client