$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9142ad9d-3e15-4f28-ad73-674e53fb644e.roa File: 9142ad9d-3e15-4f28-ad73-674e53fb644e.roa (raw, json) Hash identifier: gZ+w3dR1XUK7LVdnve9Cijv4Lvcs6hqGKOGH1FgRqIg= Subject key identifier: 59:DA:A6:C3:8F:5B:C4:1A:8A:A8:F6:D2:03:E6:84:F0:6F:2A:F6:A7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 73E36ACD94DAA261465F3DFC95A3A5EC53E42D65 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9142ad9d-3e15-4f28-ad73-674e53fb644e.roa Signing time: Wed 22 Apr 2026 19:02:55 +0000 ROA not before: Wed 22 Apr 2026 19:02:55 +0000 ROA not after: Tue 21 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.99.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e3:6a:cd:94:da:a2:61:46:5f:3d:fc:95:a3:a5:ec:53:e4:2d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 22 19:02:55 2026 GMT Not After : Jul 21 23:59:59 2026 GMT Subject: serialNumber=6bb49ecc0e4578cbbf6dd78a4f8f774d0a52d1b79758522d5f4367b7065f9fb8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bb:75:11:bf:f8:0d:11:b0:93:30:0c:e8:21: 91:46:27:9e:3a:0a:c3:7b:59:b3:3c:6c:6b:30:9b: 39:0c:2e:27:58:ab:aa:66:e4:e6:31:67:f9:da:0a: 66:f2:7d:ba:05:7a:b4:97:b3:13:d7:d0:51:56:e3: 38:7e:ae:32:aa:1a:20:3a:f7:24:87:be:e0:26:91: cf:ab:df:df:2c:27:b5:6e:cc:9f:ee:d6:78:28:3c: 30:55:13:1d:b3:8d:ac:f8:23:2f:e8:71:e3:e1:14: e0:ff:99:1b:e0:a7:0a:73:be:b1:d4:99:10:7a:ab: 38:b0:e6:db:e4:ae:d1:99:97:9d:95:98:9a:92:fc: f5:a7:6f:50:06:87:54:13:66:01:4a:46:34:39:8d: 72:8e:af:38:4e:6f:40:a4:36:35:5e:e7:ca:d3:4e: 88:ae:76:ce:59:fd:4b:91:dd:81:1d:7c:9f:4a:7c: f3:f7:d1:35:5e:85:5b:38:f4:a4:71:40:a0:50:0e: ce:c8:fd:14:ba:08:f7:e5:6e:58:d3:89:37:ad:ae: 36:f1:11:8b:df:4d:7d:fa:83:8e:03:b2:fa:cd:f2: 3e:28:6c:76:c2:50:98:a9:c0:9f:1c:31:3e:96:b0: 1a:48:fa:55:22:c2:97:ac:28:80:7e:bb:98:e7:f4: 31:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DA:A6:C3:8F:5B:C4:1A:8A:A8:F6:D2:03:E6:84:F0:6F:2A:F6:A7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9142ad9d-3e15-4f28-ad73-674e53fb644e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.99.0.0/16 Signature Algorithm: sha256WithRSAEncryption 92:02:74:1a:c2:5e:90:65:00:7b:b6:1a:ca:6b:aa:1d:79:e4: a4:c7:0f:44:19:e6:0c:ac:c8:22:cf:c4:3e:56:18:cb:51:7e: ee:3c:e7:be:2c:1e:b5:91:c4:28:c8:bc:89:b7:bc:f3:ca:11: 5f:3d:42:0f:ac:bf:87:8d:52:e8:88:6d:39:8d:c2:ba:74:81: b0:f9:c9:85:37:34:47:de:7b:d0:c7:94:19:57:46:cc:65:4b: 69:ca:35:d3:35:6f:d6:33:a5:a5:9e:6b:5f:04:58:b8:a5:1a: 9a:35:1c:c8:c4:d0:02:6d:8f:48:c6:c3:bd:5c:70:d6:a9:9e: 23:fe:e3:fc:9c:e4:09:9d:63:8a:88:a3:8a:20:6d:40:6a:ad: e9:6e:e4:23:ca:33:0f:00:dd:a7:0e:71:d0:30:1d:a2:4f:0b: 7e:0b:54:a9:9c:cb:d4:b3:47:ba:21:46:39:e9:e0:c3:65:51: 37:4b:4e:c7:da:93:d4:de:0a:9c:fc:e9:94:40:bc:20:61:b7: c1:ed:b4:78:48:0d:85:d6:e2:75:c2:38:89:cb:ad:51:e7:63: 70:27:c4:ad:65:f8:aa:cd:62:bf:2b:29:f6:0c:d8:2e:d8:2e: 6f:21:11:0b:2d:50:af:a5:f3:59:91:92:8c:08:5d:89:7e:34: 86:29:f8:0d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUc+NqzZTaomFGXz38laOl7FPkLWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNDIyMTkwMjU1WhcNMjYwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmI0OWVjYzBlNDU3OGNiYmY2ZGQ3OGE0ZjhmNzc0ZDBh NTJkMWI3OTc1ODUyMmQ1ZjQzNjdiNzA2NWY5ZmI4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLu3URv/gNEbCTMAzoIZFGJ546CsN7WbM8bGswmzkMLidY q6pm5OYxZ/naCmbyfboFerSXsxPX0FFW4zh+rjKqGiA69ySHvuAmkc+r398sJ7Vu zJ/u1ngoPDBVEx2zjaz4Iy/ocePhFOD/mRvgpwpzvrHUmRB6qziw5tvkrtGZl52V mJqS/PWnb1AGh1QTZgFKRjQ5jXKOrzhOb0CkNjVe58rTToiuds5Z/UuR3YEdfJ9K fPP30TVehVs49KRxQKBQDs7I/RS6CPflbljTiTetrjbxEYvfTX36g44DsvrN8j4o bHbCUJipwJ8cMT6WsBpI+lUiwpesKIB+u5jn9DFDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWdqmw49bxBqKqPbSA+aE8G8q9qcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkxNDJhZDlkLTNlMTUtNGYyOC1hZDczLTY3NGU1M2ZiNjQ0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjYzANBgkqhkiG9w0BAQsFAAOCAQEAkgJ0GsJekGUAe7YaymuqHXnkpMcP RBnmDKzIIs/EPlYYy1F+7jznviwetZHEKMi8ibe888oRXz1CD6y/h41S6IhtOY3C unSBsPnJhTc0R9570MeUGVdGzGVLaco10zVv1jOlpZ5rXwRYuKUamjUcyMTQAm2P SMbDvVxw1qmeI/7j/JzkCZ1jioijiiBtQGqt6W7kI8ozDwDdpw5x0DAdok8LfgtU qZzL1LNHuiFGOengw2VRN0tOx9qT1N4KnPzplEC8IGG3we20eEgNhdbidcI4icut UedjcCfErWX4qs1ivysp9gzYLtgubyERCy1Qr6XzWZGSjAhdiX40hin4DQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:15:53 2026 by rpki-client