$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c9b53b96-f734-4243-80ac-979ba4083b01.roa File: c9b53b96-f734-4243-80ac-979ba4083b01.roa (raw, json) Hash identifier: xgdMVUYMq0zvxxRUpvznhIqQ2YN7XCtls8DkTPglNLg= Subject key identifier: 88:CC:E5:A2:F2:8B:12:08:54:F1:A3:CD:63:FE:8C:46:D0:9A:6E:50 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5AF22260C2DA6C879C2B9E7DBA436472CA7542C7 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c9b53b96-f734-4243-80ac-979ba4083b01.roa Signing time: Fri 31 Jul 2026 01:50:07 +0000 ROA not before: Fri 31 Jul 2026 01:50:07 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 35.111.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f2:22:60:c2:da:6c:87:9c:2b:9e:7d:ba:43:64:72:ca:75:42:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 31 01:50:07 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=5c40871749f9611d26bcbd2c7f810f1dbade9c38ccc599d97ca3a34f944abe41, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bf:3f:d6:42:11:ce:9a:0e:5b:0b:21:2e:c7: 8e:0f:e4:ec:59:63:78:57:48:23:28:e6:7f:e3:d6: 98:03:35:e4:f6:93:7b:47:a8:ef:ec:ad:6e:aa:97: 5d:80:f8:05:2a:2e:8e:3c:fe:3d:db:97:f2:a8:41: c4:80:51:b9:f1:ee:8b:43:af:6c:f3:e0:ac:e4:93: 6a:cc:be:d2:75:ec:f1:37:73:57:89:92:b2:dd:85: ea:7e:75:75:5f:58:ad:ed:6f:38:a8:d0:55:33:9b: be:81:38:6a:6f:5f:21:cc:7f:7e:f9:cb:65:9d:d5: aa:a6:04:71:66:0c:6b:8a:e5:7f:fc:65:a7:5a:24: 0e:81:67:87:ee:cc:d2:d4:60:6b:0d:34:47:af:3d: d6:bb:a0:d4:e2:00:c2:2f:55:2b:5c:33:47:2e:47: 01:69:3f:2c:7c:19:98:bf:e2:31:5a:b4:9f:84:07: ff:bb:9a:42:5d:6f:d2:c8:54:dd:45:cc:77:5e:0e: 34:5e:66:18:46:40:4f:b1:f0:dc:12:28:e3:ec:72: ad:33:94:5e:5e:1a:a0:8f:ee:49:b4:86:2c:0a:b3: c3:18:9f:cb:af:25:7c:04:67:37:be:92:f7:83:78: 28:1f:68:a3:2c:d9:1c:99:60:5a:96:3d:12:75:da: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CC:E5:A2:F2:8B:12:08:54:F1:A3:CD:63:FE:8C:46:D0:9A:6E:50 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c9b53b96-f734-4243-80ac-979ba4083b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.252.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:44:4e:1e:36:ec:66:a5:4b:9b:b8:64:28:ef:61:1c:eb:89: 73:bc:de:0f:8b:af:42:7e:e7:07:9d:c7:90:55:09:2c:f2:02: 75:13:b8:42:a4:30:87:4e:e0:c0:85:aa:8a:2a:cd:26:96:03: 03:e2:52:5e:e4:29:d8:48:3e:05:b0:91:73:3e:c8:77:66:5d: 73:73:db:f9:0c:47:61:76:eb:a1:75:79:81:b2:d5:74:06:01: 79:d4:42:2d:72:9c:0b:33:73:a1:89:b8:27:bd:71:bc:55:a3: 3a:b6:98:d2:a5:c7:51:f1:3b:59:39:6d:14:10:27:77:d1:f5: f2:22:f7:f3:6c:37:24:c6:d8:5a:52:5a:7c:2d:05:42:e5:d0: a4:29:bd:b6:09:a8:51:66:52:a1:d4:8a:37:ad:e5:79:db:f6: de:0a:5d:d0:3b:38:6f:85:7a:b1:52:a0:c7:c6:f0:5c:dc:09: b9:6d:a4:17:af:ef:74:cc:0d:09:ed:5e:df:ab:6a:57:12:b3: f5:24:eb:32:6c:84:f9:85:b0:7c:76:af:52:3c:b1:9c:ed:4c: ae:a3:f0:ad:31:3f:a3:b7:d6:7a:2c:a0:b1:b7:b0:fe:c4:9d: ac:ff:59:a8:55:eb:12:66:ed:60:a1:d9:2d:92:f9:de:41:ef: 4d:5f:cf:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWvIiYMLabIecK559ukNkcsp1QscwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzMxMDE1MDA3WhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzQwODcxNzQ5Zjk2MTFkMjZiY2JkMmM3ZjgxMGYxZGJh ZGU5YzM4Y2NjNTk5ZDk3Y2EzYTM0Zjk0NGFiZTQxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXvz/WQhHOmg5bCyEux44P5OxZY3hXSCMo5n/j1pgDNeT2 k3tHqO/srW6ql12A+AUqLo48/j3bl/KoQcSAUbnx7otDr2zz4Kzkk2rMvtJ17PE3 c1eJkrLdhep+dXVfWK3tbzio0FUzm76BOGpvXyHMf375y2Wd1aqmBHFmDGuK5X/8 ZadaJA6BZ4fuzNLUYGsNNEevPda7oNTiAMIvVStcM0cuRwFpPyx8GZi/4jFatJ+E B/+7mkJdb9LIVN1FzHdeDjReZhhGQE+x8NwSKOPscq0zlF5eGqCP7km0hiwKs8MY n8uvJXwEZze+kveDeCgfaKMs2RyZYFqWPRJ12l8xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiMzlovKLEghU8aPNY/6MRtCablAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M5YjUzYjk2LWY3MzQtNDI0My04MGFjLTk3OWJhNDA4M2IwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/wwDQYJKoZIhvcNAQELBQADggEBAHxETh427GalS5u4ZCjvYRzriXO8 3g+Lr0J+5wedx5BVCSzyAnUTuEKkMIdO4MCFqooqzSaWAwPiUl7kKdhIPgWwkXM+ yHdmXXNz2/kMR2F266F1eYGy1XQGAXnUQi1ynAszc6GJuCe9cbxVozq2mNKlx1Hx O1k5bRQQJ3fR9fIi9/NsNyTG2FpSWnwtBULl0KQpvbYJqFFmUqHUijet5Xnb9t4K XdA7OG+FerFSoMfG8FzcCbltpBev73TMDQntXt+ralcSs/Uk6zJshPmFsHx2r1I8 sZztTK6j8K0xP6O31nosoLG3sP7Enaz/WahV6xJm7WCh2S2S+d5B701fzwk= -----END CERTIFICATE-----Generated at Fri Aug 21 01:06:35 2026 by rpki-client