$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c9b53b96-f734-4243-80ac-979ba4083b01.roa File: c9b53b96-f734-4243-80ac-979ba4083b01.roa (raw, json) Hash identifier: a3XHDN5aIm5B84ap3dY4WjjDqfEN+4xxGeQhhoEYdPw= Subject key identifier: 88:B8:00:1E:1A:CA:0A:DF:CD:04:D6:F5:0C:2E:E8:2F:E9:17:45:D7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6517C08C5427E22CD410B8F5A04367F7D6E6ACDE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c9b53b96-f734-4243-80ac-979ba4083b01.roa Signing time: Mon 19 Oct 2026 01:50:07 +0000 ROA not before: Mon 19 Oct 2026 01:50:07 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 35.111.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:17:c0:8c:54:27:e2:2c:d4:10:b8:f5:a0:43:67:f7:d6:e6:ac:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 01:50:07 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=e5fa6e809e5ad175531cae3dea7bf7823118aba7e03a5f31a1638779c0c6aaa6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:4a:27:35:51:52:7c:83:77:87:0c:53:48: fb:a1:71:70:6f:67:1f:a9:59:12:43:9f:a4:96:df: e9:57:a7:40:7f:84:fd:08:84:3b:ca:2a:a0:e2:2e: 3e:25:72:8d:17:06:f8:01:75:7c:bf:90:5b:41:fb: a5:78:72:70:18:a4:ef:70:95:2a:73:28:a0:27:86: 1c:07:cf:1c:a6:d7:30:e0:e3:15:0d:0e:53:41:4d: 9d:cc:58:17:ff:5d:48:b2:9f:81:6f:47:a1:7d:82: 93:c6:ce:06:92:e5:fe:cd:61:e8:f7:8a:30:5b:22: 65:4b:89:84:6a:7c:54:3a:50:b5:3a:2f:bb:84:c4: 58:c2:83:44:e8:ff:a2:41:7e:8b:8c:50:32:65:6a: 47:5c:51:ce:f1:2d:31:65:4b:d3:d1:96:5a:27:99: 68:c0:8f:4b:d8:10:3e:60:5d:11:d4:7b:72:f8:99: 85:4d:a6:77:2f:d5:0c:f1:09:87:54:5d:67:dd:98: 33:a2:91:9b:a9:01:c4:ed:30:12:0b:53:b3:14:33: 72:04:08:18:bb:d5:ab:c0:03:ce:6a:e1:4c:05:89: 8a:bd:ef:59:df:11:00:56:cb:14:05:77:48:4f:e3: 9b:e5:26:7c:5f:0b:7e:6e:21:9e:a8:47:6c:5f:ac: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B8:00:1E:1A:CA:0A:DF:CD:04:D6:F5:0C:2E:E8:2F:E9:17:45:D7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c9b53b96-f734-4243-80ac-979ba4083b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.252.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:00:c3:30:26:cd:19:76:cf:43:e2:45:5a:0e:1d:8c:13:41: 37:4d:2e:78:b4:00:df:91:6b:95:90:dc:f8:bf:ce:07:89:d0: 96:33:fb:08:b0:1e:40:29:f7:ef:e9:1d:3c:48:a7:b5:dd:ce: a5:f7:ac:a3:3c:4f:9f:8e:ce:30:5c:70:ee:d8:e2:6e:26:47: f4:ad:6b:64:f7:9b:19:57:df:14:2f:5d:a6:df:60:73:8d:4e: 24:51:3f:dc:88:d5:77:ce:bd:84:da:a1:52:e5:cf:b4:4c:9d: ef:35:ac:93:7f:1c:d6:1e:a1:c4:d6:56:b9:3e:a6:6a:ac:3c: 9b:c5:bf:8c:c2:25:49:46:c3:e2:00:58:a6:e9:9b:bf:25:19: 39:4e:b7:c0:d7:63:2f:71:41:81:74:3b:44:ae:fb:ff:b7:a3: 02:25:bf:d4:3c:17:a8:cd:cf:9a:d2:d4:ca:ca:9b:34:7a:03: b2:fb:1d:bb:9e:fa:8c:77:5b:ce:9f:8c:59:a6:ac:2c:bf:c0: f2:cb:53:27:ee:36:8e:0c:da:e5:6d:84:ab:87:8a:a9:2a:5d: 61:33:a6:09:eb:03:6d:e8:3f:e9:63:45:8d:e2:0f:50:88:57: 89:4a:4a:50:dd:1b:d0:b3:6a:5e:9a:34:3f:af:03:a7:84:7d: 02:0b:2d:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZRfAjFQn4izUELj1oENn99bmrN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE5MDE1MDA3WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWZhNmU4MDllNWFkMTc1NTMxY2FlM2RlYTdiZjc4MjMx MThhYmE3ZTAzYTVmMzFhMTYzODc3OWMwYzZhYWE2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdNkonNVFSfIN3hwxTSPuhcXBvZx+pWRJDn6SW3+lXp0B/ hP0IhDvKKqDiLj4lco0XBvgBdXy/kFtB+6V4cnAYpO9wlSpzKKAnhhwHzxym1zDg 4xUNDlNBTZ3MWBf/XUiyn4FvR6F9gpPGzgaS5f7NYej3ijBbImVLiYRqfFQ6ULU6 L7uExFjCg0To/6JBfouMUDJlakdcUc7xLTFlS9PRllonmWjAj0vYED5gXRHUe3L4 mYVNpncv1QzxCYdUXWfdmDOikZupAcTtMBILU7MUM3IECBi71avAA85q4UwFiYq9 71nfEQBWyxQFd0hP45vlJnxfC35uIZ6oR2xfrMIzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiLgAHhrKCt/NBNb1DC7oL+kXRdcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M5YjUzYjk2LWY3MzQtNDI0My04MGFjLTk3OWJhNDA4M2IwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/wwDQYJKoZIhvcNAQELBQADggEBAH8AwzAmzRl2z0PiRVoOHYwTQTdN Lni0AN+Ra5WQ3Pi/zgeJ0JYz+wiwHkAp9+/pHTxIp7XdzqX3rKM8T5+OzjBccO7Y 4m4mR/Sta2T3mxlX3xQvXabfYHONTiRRP9yI1XfOvYTaoVLlz7RMne81rJN/HNYe ocTWVrk+pmqsPJvFv4zCJUlGw+IAWKbpm78lGTlOt8DXYy9xQYF0O0Su+/+3owIl v9Q8F6jNz5rS1MrKmzR6A7L7Hbue+ox3W86fjFmmrCy/wPLLUyfuNo4M2uVthKuH iqkqXWEzpgnrA23oP+ljRY3iD1CIV4lKSlDdG9Czal6aND+vA6eEfQILLU4= -----END CERTIFICATE-----Generated at Mon Oct 19 21:57:48 2026 by rpki-client