$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa File: d45c754b-55fa-459b-9d5e-9107618580af.roa (raw, json) Hash identifier: ahwZ2XVSUyoqug7n4cm1/S8fvXn1+7UNcFS1zyLKkYI= Subject key identifier: 3C:8D:86:42:76:6A:83:58:9D:22:98:58:9E:53:22:4E:FE:63:D3:C2 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3A967DC70312CA1E1C6E79D9B44FB6EDAC2ED881 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa Signing time: Wed 05 Aug 2026 01:50:10 +0000 ROA not before: Wed 05 Aug 2026 01:50:10 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:96:7d:c7:03:12:ca:1e:1c:6e:79:d9:b4:4f:b6:ed:ac:2e:d8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 5 01:50:10 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=8c55205ef7b740dd6bf38cdf89d8a47a569e1675f6f8d475c5e8937e45428591, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:df:f0:a7:57:03:6f:4f:e1:51:a6:87:e5: a5:06:68:c6:c0:2d:04:2c:f4:00:eb:e0:4e:25:9b: db:d8:c6:e0:49:82:67:5f:a4:55:fe:3d:8a:bd:72: 0a:a3:30:86:92:d8:9b:ac:37:dc:c9:ca:c4:07:6c: 4c:75:a6:ca:f4:40:13:d2:11:a9:16:79:6a:da:d0: a4:42:08:e6:58:64:34:1b:1f:6d:0f:0b:49:05:82: ab:37:95:89:24:e1:be:01:16:db:4b:73:51:8a:b9: 81:56:7d:0f:76:4b:3c:0e:d6:1f:54:37:1b:da:08: be:92:9a:36:a7:40:bb:94:97:52:e1:56:f1:79:52: 69:7c:bc:fd:2d:40:b7:36:f4:eb:2f:ba:0a:c1:d0: b1:00:49:66:f9:e0:11:f9:8c:80:21:cb:ec:0a:00: 2f:ea:23:3a:b5:62:da:65:55:a3:51:05:f7:eb:5a: 82:8f:25:5e:ec:c0:57:f1:67:80:9f:46:55:bc:f8: e8:4d:78:54:aa:6c:7a:34:59:9d:49:03:5f:92:21: 0b:74:16:55:80:f2:f9:4a:27:3c:85:12:6b:2b:6f: 4d:e8:db:04:1d:d5:e6:eb:c5:5f:07:37:60:d7:dc: 73:90:a3:56:8c:b4:1a:ff:20:1d:b7:ac:3c:d0:c8: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8D:86:42:76:6A:83:58:9D:22:98:58:9E:53:22:4E:FE:63:D3:C2 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 56:f3:9d:b8:07:ff:6e:18:64:18:a8:a3:ae:37:83:e4:f3:31: 67:04:e1:10:d7:e3:7f:d8:a4:2a:a8:43:15:c7:1b:fc:03:ef: 89:73:6d:ed:57:2f:4c:30:34:26:57:dc:61:ab:b4:b5:d0:9d: cd:55:6b:79:8c:de:5c:1f:9b:16:79:5c:29:a3:20:bc:c9:8d: c7:6c:ba:ab:88:05:fc:0f:5d:e8:f9:22:9c:e2:83:8e:08:07: 60:a9:47:a0:41:3d:b8:d1:10:6e:30:aa:8f:21:b0:57:d2:3c: 95:66:dd:bd:ba:1a:5d:b4:f9:57:9d:6b:af:f4:8b:6f:90:09: 0f:d7:eb:f0:d4:33:74:c5:26:5d:d0:96:3c:64:e7:7b:a1:c0: d7:68:d1:9c:fa:69:59:7d:18:90:d2:d0:8c:df:d9:ec:61:15: 7e:59:e7:6d:33:ed:ff:d8:e0:6b:71:fb:6b:4b:b9:b1:f3:c3: 8a:1b:b1:a1:88:54:05:ad:29:7c:4f:e6:d8:46:ea:b1:e1:44: f7:0e:6d:2a:90:b1:e7:19:78:72:4a:76:35:56:4f:5e:31:4d: 0e:eb:2f:5c:06:dd:d9:b9:ba:ce:0c:70:82:93:c3:06:9d:1f: 41:0e:01:24:be:3c:be:f8:36:99:66:db:7b:5a:df:be:6b:ce: 5f:62:07:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOpZ9xwMSyh4cbnnZtE+27awu2IEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA1MDE1MDEwWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzU1MjA1ZWY3Yjc0MGRkNmJmMzhjZGY4OWQ4YTQ3YTU2 OWUxNjc1ZjZmOGQ0NzVjNWU4OTM3ZTQ1NDI4NTkxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr2d/wp1cDb0/hUaaH5aUGaMbALQQs9ADr4E4lm9vYxuBJ gmdfpFX+PYq9cgqjMIaS2JusN9zJysQHbEx1psr0QBPSEakWeWra0KRCCOZYZDQb H20PC0kFgqs3lYkk4b4BFttLc1GKuYFWfQ92SzwO1h9UNxvaCL6SmjanQLuUl1Lh VvF5Uml8vP0tQLc29OsvugrB0LEASWb54BH5jIAhy+wKAC/qIzq1YtplVaNRBffr WoKPJV7swFfxZ4CfRlW8+OhNeFSqbHo0WZ1JA1+SIQt0FlWA8vlKJzyFEmsrb03o 2wQd1ebrxV8HN2DX3HOQo1aMtBr/IB23rDzQyCbnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPI2GQnZqg1idIphYnlMiTv5j08IwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q0NWM3NTRiLTU1ZmEtNDU5Yi05ZDVlLTkxMDc2MTg1ODBhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAFbznbgH/24YZBioo643g+TzMWcE 4RDX43/YpCqoQxXHG/wD74lzbe1XL0wwNCZX3GGrtLXQnc1Va3mM3lwfmxZ5XCmj ILzJjcdsuquIBfwPXej5Ipzig44IB2CpR6BBPbjREG4wqo8hsFfSPJVm3b26Gl20 +Veda6/0i2+QCQ/X6/DUM3TFJl3Qljxk53uhwNdo0Zz6aVl9GJDS0Izf2exhFX5Z 520z7f/Y4Gtx+2tLubHzw4obsaGIVAWtKXxP5thG6rHhRPcObSqQsecZeHJKdjVW T14xTQ7rL1wG3dm5us4McIKTwwadH0EOASS+PL74Nplm23ta375rzl9iBxk= -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:21 2026 by rpki-client