$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa File: cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa (raw, json) Hash identifier: A4ERJI3XJUQLdthAz5G0596eGZSk9f4D7N3mC6O1YF0= Subject key identifier: 81:06:12:64:B0:46:DA:43:49:F9:C5:83:E4:2C:6C:FE:F0:91:53:36 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 249B6714E4CC03971297FC2130AA5BC92B70B2E6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa Signing time: Fri 07 Aug 2026 04:00:06 +0000 ROA not before: Fri 07 Aug 2026 04:00:06 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9b:67:14:e4:cc:03:97:12:97:fc:21:30:aa:5b:c9:2b:70:b2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 7 04:00:06 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=d56b28030c2dbc729745e794c2b8b2f2ff400c056b0cd88f4f3a825cd155fb43, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:8b:bd:f9:37:32:1d:85:ae:57:89:02:4a: 70:ae:34:1c:a6:b9:42:16:9f:91:aa:15:55:58:16: 44:ea:7e:72:5e:75:28:36:bb:61:ce:a3:a7:25:a8: 57:51:4b:66:64:26:66:bc:bc:c3:69:f4:b1:24:63: 86:19:59:9f:8f:8a:67:5e:89:f7:48:7f:65:50:70: 03:5e:16:d0:f7:0e:b5:ea:fb:19:54:6d:73:e1:e9: 81:03:10:77:4b:9f:b4:88:be:84:73:5d:23:df:64: 3d:e8:89:b8:0b:93:ec:6d:1d:09:ca:ed:9e:9f:e4: b8:95:cd:20:3a:c9:a0:37:66:e2:f6:26:76:c1:88: 4b:d9:b5:3e:2d:b2:a5:47:9f:fb:92:29:26:cd:e8: e0:d2:3c:86:87:27:24:09:f7:4f:50:73:92:f3:08: ae:76:ce:0b:1d:51:b4:41:d6:2d:80:e1:55:70:7a: 87:3f:a8:d8:3a:bd:19:63:33:8d:e7:cc:4a:7d:d1: e8:fd:34:7f:29:7a:57:f0:a2:75:bf:bc:97:c4:f4: 9b:f4:19:06:f7:27:d4:6c:85:f1:10:27:86:b3:0e: 8c:db:02:08:ba:00:bb:0f:c5:a8:2d:fa:be:93:f6: 42:f9:92:83:e2:96:4a:7e:f6:d9:1b:5b:0d:7d:e8: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:06:12:64:B0:46:DA:43:49:F9:C5:83:E4:2C:6C:FE:F0:91:53:36 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.9.0/24 Signature Algorithm: sha256WithRSAEncryption 94:c0:9c:6e:7d:60:9f:50:98:a7:a5:63:1c:74:82:24:ac:0e: e5:7e:f1:0b:32:2e:5e:3a:51:31:76:e8:3f:98:8c:30:8c:d8: 7a:8a:bd:af:dc:75:ff:e7:25:90:04:0b:dd:79:c0:61:fe:1d: 0f:97:bd:5f:36:60:0c:56:a5:5f:4c:69:ec:0f:48:e8:d4:db: ec:2b:c0:27:77:5d:ff:0f:4b:96:77:1e:77:a0:fb:58:65:a9: 01:c5:2c:03:e3:14:a1:cf:d6:62:e6:1c:c8:be:84:fc:b9:ab: aa:03:90:6d:a1:76:25:5c:36:97:50:ef:d5:c0:b5:fc:dd:e3: 75:4b:09:c2:8c:43:8a:b0:1f:80:2d:04:20:94:8b:26:bd:cc: 3e:ba:31:1e:bf:97:d1:2a:f8:c7:4a:46:00:41:b8:ec:f7:11: 56:0f:bc:64:b3:a3:a9:d1:8a:f7:32:e1:0e:ff:e0:8e:b1:11: 9f:29:a3:06:03:bc:cd:bf:27:72:04:3d:00:30:31:2c:31:a0: ca:a0:76:f0:42:11:18:8f:b9:62:9a:7a:95:45:16:d2:24:47: 07:0e:a0:d1:65:a1:56:3a:96:78:42:1f:43:3e:0b:98:1a:b4: cf:c5:08:b3:c6:04:c5:7c:b8:42:fa:b2:44:8f:40:b1:a0:8c: bd:94:60:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJJtnFOTMA5cSl/whMKpbyStwsuYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA3MDQwMDA2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTZiMjgwMzBjMmRiYzcyOTc0NWU3OTRjMmI4YjJmMmZm NDAwYzA1NmIwY2Q4OGY0ZjNhODI1Y2QxNTVmYjQzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIBYu9+TcyHYWuV4kCSnCuNBymuUIWn5GqFVVYFkTqfnJe dSg2u2HOo6clqFdRS2ZkJma8vMNp9LEkY4YZWZ+PimdeifdIf2VQcANeFtD3DrXq +xlUbXPh6YEDEHdLn7SIvoRzXSPfZD3oibgLk+xtHQnK7Z6f5LiVzSA6yaA3ZuL2 JnbBiEvZtT4tsqVHn/uSKSbN6ODSPIaHJyQJ909Qc5LzCK52zgsdUbRB1i2A4VVw eoc/qNg6vRljM43nzEp90ej9NH8pelfwonW/vJfE9Jv0GQb3J9RshfEQJ4azDozb Agi6ALsPxagt+r6T9kL5koPilkp+9tkbWw196IaVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgQYSZLBG2kNJ+cWD5Cxs/vCRUzYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2NmN2M4ZjRhLTA4MjctNDQ0Yi1iNmU0LTlhNDVjYTY5ZjYwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAkwDQYJKoZIhvcNAQELBQADggEBAJTAnG59YJ9QmKelYxx0giSsDuV+ 8QsyLl46UTF26D+YjDCM2HqKva/cdf/nJZAEC915wGH+HQ+XvV82YAxWpV9MaewP SOjU2+wrwCd3Xf8PS5Z3Hneg+1hlqQHFLAPjFKHP1mLmHMi+hPy5q6oDkG2hdiVc NpdQ79XAtfzd43VLCcKMQ4qwH4AtBCCUiya9zD66MR6/l9Eq+MdKRgBBuOz3EVYP vGSzo6nRivcy4Q7/4I6xEZ8powYDvM2/J3IEPQAwMSwxoMqgdvBCERiPuWKaepVF FtIkRwcOoNFloVY6lnhCH0M+C5gatM/FCLPGBMV8uEL6skSPQLGgjL2UYJU= -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:23 2026 by rpki-client