$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa File: a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa (raw, json) Hash identifier: PX02FuBQ51MwLx5p8AGpeUSezTlhztq4AV7xbWXs/Ow= Subject key identifier: F5:8D:D1:2A:04:98:6B:35:BF:D0:1D:2B:A0:E6:AA:18:A3:31:31:FF Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2502D37A7EEC318D89C4880D44FBC543923B7738 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa Signing time: Wed 05 Aug 2026 01:50:05 +0000 ROA not before: Wed 05 Aug 2026 01:50:05 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:02:d3:7a:7e:ec:31:8d:89:c4:88:0d:44:fb:c5:43:92:3b:77:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 5 01:50:05 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=b86433a3ad2b0f16d3336ad79f85cfe6af0d3960cb10fef4fc5258d39c7b8965, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:97:b7:70:ef:89:fd:c2:c2:43:c9:df:c7: 7d:d5:76:8d:72:79:59:3f:44:37:a9:cc:f8:3c:b1: 25:4a:26:6f:42:84:aa:e4:aa:6a:14:f5:ee:23:dd: 35:87:65:fc:43:5a:b8:fb:6c:27:b3:a1:83:f2:6d: d1:db:d5:83:dd:79:78:4e:b3:19:48:17:a0:a9:a4: a8:27:24:73:1b:0e:e3:c5:f5:9a:15:9d:aa:51:2b: 13:fe:1a:78:a8:d8:4e:71:d7:60:63:33:97:62:37: 10:9b:df:b2:e9:23:ec:06:41:e6:00:ec:02:8f:79: 57:9f:5a:28:86:d5:b3:ee:5b:cd:84:97:50:e7:c3: 22:d8:82:6b:f6:b7:8c:fb:ae:b0:63:f4:95:0a:af: ff:bb:06:7d:94:41:fd:fe:4c:be:ad:d3:d5:37:21: 6a:5f:a3:d1:71:e7:a7:0b:48:1a:c2:52:6f:76:14: ca:11:46:d4:a2:eb:96:a7:48:87:e5:e4:8a:76:75: 26:34:36:5f:7d:4d:35:f9:4b:27:3d:f0:27:c2:9b: 32:f2:f5:8e:36:be:0e:8c:73:7c:57:41:ed:33:c9: f0:4e:30:62:f7:13:63:72:1b:3a:ee:8e:33:ba:18: 8e:d5:b6:5f:f2:d6:7d:1d:d5:9a:ca:44:80:72:9a: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8D:D1:2A:04:98:6B:35:BF:D0:1D:2B:A0:E6:AA:18:A3:31:31:FF X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.43.0/24 Signature Algorithm: sha256WithRSAEncryption 56:f8:10:8a:75:07:ed:61:13:69:b6:04:87:16:0e:76:72:6b: 6e:49:ef:95:9b:20:c5:57:fb:d2:43:dd:d2:4a:e1:74:65:18: 24:e8:9a:3a:69:5e:4d:71:ee:79:60:03:67:a4:06:47:27:df: 44:0a:6d:34:4b:89:20:62:08:47:f7:14:95:f4:e4:d4:ce:51: ac:b2:9d:3b:4d:35:6d:70:2c:b6:76:28:96:b3:52:3d:1f:df: a9:35:da:a2:61:af:d0:a3:69:a2:00:fe:22:fa:0d:78:dd:e5: 00:d6:bf:00:7f:ce:7d:67:ad:d2:58:1e:ee:00:5b:62:df:d8: 98:ce:5a:f8:a1:d6:5e:9e:62:e7:04:e3:af:9e:57:42:c2:f3: 42:6b:fd:5e:c9:f4:f4:1d:57:ff:75:24:b9:c9:03:63:69:93: cd:96:b9:3d:6b:f0:6d:23:84:a4:c7:a5:f7:e1:08:99:ca:79: 37:61:d0:b3:80:b8:61:d3:30:d1:23:97:a1:63:03:e3:2d:be: 7a:c4:ea:bb:98:86:ca:40:0b:1c:c2:f8:14:03:32:59:ca:8d: 1b:b4:57:bd:93:f6:4a:60:a0:ed:ab:01:8e:55:09:e6:c2:6f: da:e6:4a:df:fc:92:b4:af:c8:f8:d1:29:c5:96:e9:b1:be:23: 52:a7:25:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJQLTen7sMY2JxIgNRPvFQ5I7dzgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA1MDE1MDA1WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiODY0MzNhM2FkMmIwZjE2ZDMzMzZhZDc5Zjg1Y2ZlNmFm MGQzOTYwY2IxMGZlZjRmYzUyNThkMzljN2I4OTY1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBOJe3cO+J/cLCQ8nfx33Vdo1yeVk/RDepzPg8sSVKJm9C hKrkqmoU9e4j3TWHZfxDWrj7bCezoYPybdHb1YPdeXhOsxlIF6CppKgnJHMbDuPF 9ZoVnapRKxP+Gnio2E5x12BjM5diNxCb37LpI+wGQeYA7AKPeVefWiiG1bPuW82E l1DnwyLYgmv2t4z7rrBj9JUKr/+7Bn2UQf3+TL6t09U3IWpfo9Fx56cLSBrCUm92 FMoRRtSi65anSIfl5Ip2dSY0Nl99TTX5Syc98CfCmzLy9Y42vg6Mc3xXQe0zyfBO MGL3E2NyGzrujjO6GI7Vtl/y1n0d1ZrKRIBymmpPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9Y3RKgSYazW/0B0roOaqGKMxMf8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2EyY2E3ZTcwLTRiNmUtNDNhNi05M2EyLTU2MjhlYjU0NWQxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCswDQYJKoZIhvcNAQELBQADggEBAFb4EIp1B+1hE2m2BIcWDnZya25J 75WbIMVX+9JD3dJK4XRlGCTomjppXk1x7nlgA2ekBkcn30QKbTRLiSBiCEf3FJX0 5NTOUayynTtNNW1wLLZ2KJazUj0f36k12qJhr9CjaaIA/iL6DXjd5QDWvwB/zn1n rdJYHu4AW2Lf2JjOWvih1l6eYucE46+eV0LC80Jr/V7J9PQdV/91JLnJA2Npk82W uT1r8G0jhKTHpffhCJnKeTdh0LOAuGHTMNEjl6FjA+MtvnrE6ruYhspACxzC+BQD MlnKjRu0V72T9kpgoO2rAY5VCebCb9rmSt/8krSvyPjRKcWW6bG+I1KnJbw= -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:26 2026 by rpki-client