$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9142ad9d-3e15-4f28-ad73-674e53fb644e.roa File: 9142ad9d-3e15-4f28-ad73-674e53fb644e.roa (raw, json) Hash identifier: Rr2Zo+4lyHOpuW7D6OSBHgfe7HK+It1EJd8BpK9K+Kw= Subject key identifier: 1E:E4:B6:C4:6C:A4:94:5B:05:AD:E8:BD:CF:1C:5F:31:14:E7:43:2F Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 682DA2D476DC04911A2ED3122C27515D60F9EA67 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9142ad9d-3e15-4f28-ad73-674e53fb644e.roa Signing time: Tue 29 Sep 2026 00:00:05 +0000 ROA not before: Tue 29 Sep 2026 00:00:05 +0000 ROA not after: Mon 28 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.99.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2d:a2:d4:76:dc:04:91:1a:2e:d3:12:2c:27:51:5d:60:f9:ea:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 29 00:00:05 2026 GMT Not After : Dec 28 23:59:59 2026 GMT Subject: serialNumber=36d8fb58b552f2c2d84a87c798faf25ea17e7ffe557bf00ecd32cd5a96a9a863, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f5:ba:df:f1:02:22:9a:30:ba:32:8f:b6:4b: 95:74:72:41:fe:4e:96:3c:6f:ef:e8:cc:d5:83:53: 02:a9:13:ec:8f:4d:34:4e:96:13:01:20:63:55:09: c8:e0:27:4b:7d:64:bb:01:32:0b:a8:e3:7d:ea:b4: 52:e0:8d:d2:e6:0d:89:4c:25:ec:4f:b1:a9:f2:34: ec:24:c9:e0:9a:cf:70:47:bd:14:41:95:cd:2e:71: b6:0c:f2:5c:3a:c2:c7:df:2f:9a:07:50:aa:e8:b5: 26:8e:a5:19:62:2b:74:ad:26:b9:2b:f5:43:43:65: b5:b5:cc:eb:8a:1d:fe:50:b9:b4:fa:a7:b3:27:25: 74:8b:87:d9:c6:bb:7f:2d:11:aa:70:ba:99:6e:84: 14:c2:4a:e6:6a:5d:d3:4d:13:74:56:48:4c:ef:05: 4e:a4:14:f3:ce:fd:12:e4:ea:51:41:22:66:11:77: 28:5f:80:e9:c9:d1:f8:3a:15:99:d7:d3:b5:9e:26: 1a:ef:81:15:36:27:7b:f6:57:df:19:db:dc:65:72: a5:2f:ad:35:9f:53:83:78:9b:66:51:2f:c0:48:d9: 9f:14:02:0b:0a:52:29:b6:13:c0:d9:64:5e:4c:54: 33:7d:f9:4e:e3:fe:52:13:cb:6c:51:8f:31:9c:c6: 48:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E4:B6:C4:6C:A4:94:5B:05:AD:E8:BD:CF:1C:5F:31:14:E7:43:2F X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9142ad9d-3e15-4f28-ad73-674e53fb644e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.99.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:d6:88:42:b0:29:5e:30:bc:af:aa:fc:3c:6d:e1:9d:da:6c: cc:3d:ca:26:35:07:23:1e:64:fe:a1:a8:80:72:60:7d:6a:dc: f5:fa:d8:c2:1d:b8:9d:f3:aa:75:94:c6:be:7a:79:ff:65:aa: 5d:e5:eb:cf:a0:4b:a2:bb:bb:da:69:67:bb:dc:a1:65:13:d4: 29:ed:23:44:fb:af:ed:c9:ec:a2:33:ae:29:b7:45:48:b4:6f: 2d:9d:f8:46:23:a6:62:dd:00:94:14:23:b2:7d:d7:0b:e5:90: 9a:a6:9b:9a:56:e9:26:c0:01:da:96:e1:19:a7:9d:2d:b8:02: 09:84:3b:de:a9:75:d5:13:18:77:31:97:43:f8:5b:4a:6a:47: ce:87:7d:0e:2c:5d:e1:5e:38:df:78:2d:4f:41:37:9c:30:7d: 19:11:6c:08:48:ea:8e:81:e0:a8:90:40:ff:ac:58:ff:ca:3e: 32:89:7a:47:bd:ab:5b:9f:72:d5:9f:d0:3a:ec:41:ad:4c:39: b6:22:39:93:b8:b1:89:97:49:b0:aa:9f:8b:73:7c:20:6d:ae: 37:8e:9f:ba:62:c5:e8:88:47:d7:16:a1:ae:5c:b0:46:45:f8: 18:0b:be:fb:d3:b8:95:76:6e:6a:54:a1:6b:ce:e0:9a:66:6e: 13:e1:08:c8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaC2i1HbcBJEaLtMSLCdRXWD56mcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwOTI5MDAwMDA1WhcNMjYxMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmQ4ZmI1OGI1NTJmMmMyZDg0YTg3Yzc5OGZhZjI1ZWEx N2U3ZmZlNTU3YmYwMGVjZDMyY2Q1YTk2YTlhODYzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh9brf8QIimjC6Mo+2S5V0ckH+TpY8b+/ozNWDUwKpE+yP TTROlhMBIGNVCcjgJ0t9ZLsBMguo433qtFLgjdLmDYlMJexPsanyNOwkyeCaz3BH vRRBlc0ucbYM8lw6wsffL5oHUKrotSaOpRliK3StJrkr9UNDZbW1zOuKHf5QubT6 p7MnJXSLh9nGu38tEapwupluhBTCSuZqXdNNE3RWSEzvBU6kFPPO/RLk6lFBImYR dyhfgOnJ0fg6FZnX07WeJhrvgRU2J3v2V98Z29xlcqUvrTWfU4N4m2ZRL8BI2Z8U AgsKUim2E8DZZF5MVDN9+U7j/lITy2xRjzGcxkj1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHuS2xGyklFsFrei9zxxfMRTnQy8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkxNDJhZDlkLTNlMTUtNGYyOC1hZDczLTY3NGU1M2ZiNjQ0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjYzANBgkqhkiG9w0BAQsFAAOCAQEABdaIQrApXjC8r6r8PG3hndpszD3K JjUHIx5k/qGogHJgfWrc9frYwh24nfOqdZTGvnp5/2WqXeXrz6BLoru72mlnu9yh ZRPUKe0jRPuv7cnsojOuKbdFSLRvLZ34RiOmYt0AlBQjsn3XC+WQmqabmlbpJsAB 2pbhGaedLbgCCYQ73ql11RMYdzGXQ/hbSmpHzod9Dixd4V4433gtT0E3nDB9GRFs CEjqjoHgqJBA/6xY/8o+Mol6R72rW59y1Z/QOuxBrUw5tiI5k7ixiZdJsKqfi3N8 IG2uN46fumLF6IhH1xahrlywRkX4GAu++9O4lXZualSha87gmmZuE+EIyA== -----END CERTIFICATE-----Generated at Mon Oct 5 16:08:44 2026 by rpki-client