$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa File: a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa (raw, json) Hash identifier: qCbmaRIy1yHzm3u9N8qbrU2oJAd9Q63q0Qoz8DtbLpU= Subject key identifier: 52:C4:68:30:C2:9D:75:F6:6A:71:58:7E:A4:FB:F2:51:13:94:95:B3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 30399ED4AC5E82544DCBC22AE6CF80D76713E737 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa Signing time: Wed 05 Aug 2026 01:50:09 +0000 ROA not before: Wed 05 Aug 2026 01:50:09 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:39:9e:d4:ac:5e:82:54:4d:cb:c2:2a:e6:cf:80:d7:67:13:e7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 5 01:50:09 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=0e3a0b23687286949cb36dabbd14421f228ae54bc7e6874ebda43e57f66c3e59, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:64:e9:1e:e9:10:b4:83:09:7d:ae:4e:93: a3:38:f7:c7:1b:e4:5c:1b:61:78:02:4d:49:10:58: c6:e4:71:ac:6f:61:cd:18:79:d1:0b:38:78:2d:53: 7f:99:25:69:2b:91:61:cd:cb:ea:4c:7b:99:d3:56: 39:36:be:4d:7e:b6:99:62:98:8d:80:4a:56:dd:08: 4b:67:2b:c9:77:4e:e8:0a:d6:70:6f:11:5a:b2:08: 35:2f:f7:86:8f:1d:4b:f6:5d:11:e1:02:95:a6:c4: a2:79:08:af:0e:be:31:f3:e2:61:9d:2d:f7:50:f0: 9e:75:a6:fe:99:45:6a:2c:37:7c:fa:51:f9:34:76: 7f:11:03:a1:16:50:6e:28:b2:73:4b:91:5b:40:f5: ef:09:26:5f:f6:5f:bb:2c:c5:ba:3e:93:2f:50:fb: f9:cb:94:63:6b:bb:4e:69:d6:c0:63:e9:69:5f:d8: 43:8e:ab:c6:93:6a:ca:22:52:1a:4e:4b:88:83:7d: 12:53:7c:53:7d:bb:4b:b9:8f:62:9c:e0:7d:13:30: a1:8c:64:38:e4:16:04:02:ef:35:c9:ca:08:53:da: 2f:07:23:05:97:29:ac:1b:23:35:27:8b:23:1c:da: 1a:b0:f8:04:07:f5:32:d8:2f:04:70:d7:1d:7d:9b: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C4:68:30:C2:9D:75:F6:6A:71:58:7E:A4:FB:F2:51:13:94:95:B3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 95:95:78:01:35:b3:50:e8:c2:7f:7a:9d:21:e8:aa:56:96:04: 00:e7:ea:ef:78:62:44:8a:36:fb:af:e5:3c:5c:78:53:98:a5: de:0d:c0:2c:4f:89:40:f6:48:61:89:61:03:ca:7d:ce:5c:8d: d0:81:a1:d9:18:56:77:a1:a8:97:5a:46:cb:b9:8f:b4:68:86: 82:6e:50:65:55:c8:20:72:ed:f7:bf:c0:41:0d:f9:b8:52:b0: 69:29:4c:c9:0b:0d:c4:cb:4f:bf:c3:fb:82:aa:51:74:14:8c: 09:bd:14:2e:36:0d:1e:ae:6d:e4:f4:19:49:f0:6e:63:b5:21: b5:79:d8:ec:78:e1:d6:09:15:c6:f8:3c:a7:06:2e:7b:7d:30: 9f:91:b2:2c:b9:20:55:07:66:c2:b3:66:8f:97:0d:46:e9:14: 42:7e:31:1e:6f:14:05:06:a5:fa:60:4c:91:25:f3:c2:1c:8a: 00:13:16:40:22:b2:44:8f:e2:1b:b9:22:db:c3:70:1c:00:c6: 1a:75:f4:96:84:35:c8:1c:51:80:74:0e:2f:3a:45:32:e0:94: ab:c7:16:43:cb:cf:91:9c:ee:27:98:fc:d7:cb:97:2f:ff:10: 8d:a4:0d:39:ab:23:12:6e:92:bc:9b:e0:74:ce:00:42:f0:e4: b0:dc:a9:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMDme1KxeglRNy8Iq5s+A12cT5zcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA1MDE1MDA5WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTNhMGIyMzY4NzI4Njk0OWNiMzZkYWJiZDE0NDIxZjIy OGFlNTRiYzdlNjg3NGViZGE0M2U1N2Y2NmMzZTU5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4qGTpHukQtIMJfa5Ok6M498cb5FwbYXgCTUkQWMbkcaxv Yc0YedELOHgtU3+ZJWkrkWHNy+pMe5nTVjk2vk1+tplimI2ASlbdCEtnK8l3TugK 1nBvEVqyCDUv94aPHUv2XRHhApWmxKJ5CK8OvjHz4mGdLfdQ8J51pv6ZRWosN3z6 Ufk0dn8RA6EWUG4osnNLkVtA9e8JJl/2X7ssxbo+ky9Q+/nLlGNru05p1sBj6Wlf 2EOOq8aTasoiUhpOS4iDfRJTfFN9u0u5j2Kc4H0TMKGMZDjkFgQC7zXJyghT2i8H IwWXKawbIzUniyMc2hqw+AQH9TLYLwRw1x19mzSXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUsRoMMKddfZqcVh+pPvyUROUlbMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E3ZjZlMGFjLTgxMGEtNGU0MC1hMjg2LWQwNTM5N2ExM2U0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAJWVeAE1s1Down96nSHoqlaWBADn 6u94YkSKNvuv5TxceFOYpd4NwCxPiUD2SGGJYQPKfc5cjdCBodkYVnehqJdaRsu5 j7RohoJuUGVVyCBy7fe/wEEN+bhSsGkpTMkLDcTLT7/D+4KqUXQUjAm9FC42DR6u beT0GUnwbmO1IbV52Ox44dYJFcb4PKcGLnt9MJ+Rsiy5IFUHZsKzZo+XDUbpFEJ+ MR5vFAUGpfpgTJEl88IcigATFkAiskSP4hu5ItvDcBwAxhp19JaENcgcUYB0Di86 RTLglKvHFkPLz5Gc7ieY/NfLly//EI2kDTmrIxJukryb4HTOAELw5LDcqck= -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:36 2026 by rpki-client