$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa File: c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa (raw, json) Hash identifier: 2sCTPzTBM/Rlp8eXRQcOKYCqT1q+8+aiRR4xvxG/zYw= Subject key identifier: 39:57:BA:44:5E:E2:82:2F:A7:03:05:91:38:1F:B1:0E:9A:D4:5F:31 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1EA3CED380EE92D3C14BEF9D7D645BBEB207B58E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa Signing time: Fri 13 Feb 2026 14:50:10 +0000 ROA not before: Fri 13 Feb 2026 14:50:10 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a3:ce:d3:80:ee:92:d3:c1:4b:ef:9d:7d:64:5b:be:b2:07:b5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 13 14:50:10 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=38fa6694bbf2b3525144af2e646927285e9092ac07e10011a7a4490e17fce06a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:69:7b:c7:d3:94:be:b9:33:8a:b5:fb:a1: b7:5b:95:a8:a4:d0:cd:62:04:6e:e8:33:63:03:0a: 61:9e:be:3e:69:38:09:9a:76:cf:2f:f7:0b:16:ce: 74:6a:2c:85:26:a0:de:87:12:ff:7c:fb:b3:b3:d7: dc:35:8a:d5:fd:58:43:1a:8d:3d:01:a9:9a:d8:57: 11:f2:83:0f:5a:89:ca:bd:e1:f9:68:f0:2b:5d:09: 1d:e0:ca:f8:47:57:ab:8c:f9:b5:f2:6b:f2:ed:be: 3a:19:ad:51:57:2c:1b:67:e3:29:48:28:cc:21:e3: 2c:63:28:7e:6a:9d:c2:8f:55:62:47:8c:72:9a:ac: 36:59:ee:4e:1a:f0:4f:33:06:98:f0:5e:ad:97:40: 00:4b:67:af:48:b7:80:d1:fb:ed:d0:01:b0:75:a7: 32:8c:2d:62:a0:0b:b8:11:35:a1:59:09:89:1e:2d: a8:42:85:61:74:2a:13:fc:23:6d:5e:58:f5:d4:3c: 7d:1d:61:6f:42:f2:70:a3:c3:65:2f:9a:dc:6e:97: b5:f1:e6:29:fb:7b:46:72:04:e2:60:d1:10:0d:35: bc:bc:e8:e4:3e:0d:d1:fe:1b:e5:88:2a:7f:7a:ce: 09:19:58:0e:da:db:6b:4f:70:ed:48:f2:d9:f2:7b: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:57:BA:44:5E:E2:82:2F:A7:03:05:91:38:1F:B1:0E:9A:D4:5F:31 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.5.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:fe:cf:fb:7c:76:63:09:1e:d9:06:19:3c:f1:af:f1:b2:45: 87:1a:f6:9c:b7:a3:9c:4c:74:cb:fb:e7:f9:76:88:f3:a2:ec: 65:74:31:60:a1:85:85:21:97:a1:7e:bf:b7:ae:6f:74:17:21: db:6a:96:de:cd:2b:18:21:10:41:85:6d:cc:4f:d6:7e:24:2b: 6c:07:4d:29:19:7e:c0:62:c2:3f:bf:a8:9f:57:09:aa:79:8c: 9c:f1:9b:1d:08:bd:92:82:2d:9f:74:37:54:88:29:14:88:7c: 58:12:4e:99:cc:02:6b:5b:c5:26:3b:c5:23:cc:cc:53:24:ea: 70:dc:b9:2c:47:36:8c:a0:2f:68:ad:98:33:c0:d8:18:dc:09: df:dd:b8:22:43:79:14:8f:c7:d4:41:f3:85:e1:7a:fb:55:6d: cf:a3:e9:ce:ac:05:9f:2f:40:38:23:7b:39:6b:b5:db:d2:df: 95:8d:d9:de:11:93:6a:7d:96:1e:55:f6:48:55:f4:e3:6d:ce: ac:0f:d0:9e:a6:ba:d3:fb:d2:c1:5f:bf:d4:4f:93:32:3a:52: 2f:14:91:65:68:17:e6:d5:ee:a3:41:30:e0:41:3a:3a:f8:f6: 50:97:d3:51:d6:fb:15:bb:15:f9:4e:5a:af:d3:b9:bf:a5:71: a1:8f:bf:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHqPO04DuktPBS++dfWRbvrIHtY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjEzMTQ1MDEwWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOGZhNjY5NGJiZjJiMzUyNTE0NGFmMmU2NDY5MjcyODVl OTA5MmFjMDdlMTAwMTFhN2E0NDkwZTE3ZmNlMDZhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCfGl7x9OUvrkzirX7obdblaik0M1iBG7oM2MDCmGevj5p OAmads8v9wsWznRqLIUmoN6HEv98+7Oz19w1itX9WEMajT0BqZrYVxHygw9aicq9 4flo8CtdCR3gyvhHV6uM+bXya/LtvjoZrVFXLBtn4ylIKMwh4yxjKH5qncKPVWJH jHKarDZZ7k4a8E8zBpjwXq2XQABLZ69It4DR++3QAbB1pzKMLWKgC7gRNaFZCYke LahChWF0KhP8I21eWPXUPH0dYW9C8nCjw2Uvmtxul7Xx5in7e0ZyBOJg0RANNby8 6OQ+DdH+G+WIKn96zgkZWA7a22tPcO1I8tnye9rzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOVe6RF7igi+nAwWROB+xDprUXzEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2MyMGNlZjAxLWQ2YzQtNDQ0Mi04ZmNjLTc2YmMyNGE3YWZhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAUwDQYJKoZIhvcNAQELBQADggEBAI3+z/t8dmMJHtkGGTzxr/GyRYca 9py3o5xMdMv75/l2iPOi7GV0MWChhYUhl6F+v7eub3QXIdtqlt7NKxghEEGFbcxP 1n4kK2wHTSkZfsBiwj+/qJ9XCap5jJzxmx0IvZKCLZ90N1SIKRSIfFgSTpnMAmtb xSY7xSPMzFMk6nDcuSxHNoygL2itmDPA2BjcCd/duCJDeRSPx9RB84XhevtVbc+j 6c6sBZ8vQDgjezlrtdvS35WN2d4Rk2p9lh5V9khV9ONtzqwP0J6mutP70sFfv9RP kzI6Ui8UkWVoF+bV7qNBMOBBOjr49lCX01HW+xW7FflOWq/Tub+lcaGPv7U= -----END CERTIFICATE-----Generated at Mon Feb 23 05:14:10 2026 by rpki-client