$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa File: dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa (raw, json) Hash identifier: 4uKLDJj+KdsfnNwx3F2KsVzX94hQk927+Q0o3UtuF7M= Subject key identifier: 8B:94:26:CF:15:F5:FC:A1:87:02:97:EC:C7:E5:81:9B:A8:1C:D1:39 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2FE63718DF1AC98EB06A30B64128EFEA7361650A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa Signing time: Fri 07 Aug 2026 04:00:21 +0000 ROA not before: Fri 07 Aug 2026 04:00:21 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e6:37:18:df:1a:c9:8e:b0:6a:30:b6:41:28:ef:ea:73:61:65:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 7 04:00:21 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=e4d37cb8a7766dffa558d14a854952e5dd507079544978a70aaa967619577b70, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:bb:a0:eb:6b:16:6d:79:ec:c4:d6:3c:f8: fb:a1:55:81:2c:f6:e6:5e:9c:d8:c4:5e:f0:d7:1b: 86:ba:c3:15:a9:aa:42:12:3c:e5:0f:aa:2e:55:6e: 19:1e:e2:d9:de:00:e6:9e:e2:bc:3f:35:5e:5c:f2: 00:66:07:d3:3e:17:6e:0c:76:bb:72:ef:7b:2b:a3: c9:db:38:41:29:22:71:9e:05:11:de:1d:be:3f:87: 77:39:21:f8:8c:27:02:cb:e5:2b:bc:cd:22:85:65: 11:b7:a6:92:f5:9c:3a:a6:22:01:6c:e3:11:c2:e0: ba:9f:80:6b:fd:70:53:f7:5d:23:78:ee:19:64:38: 33:87:1b:e0:ec:95:19:a2:be:ed:24:e5:88:45:0e: 76:b9:71:61:21:b5:9e:05:0e:c6:27:d5:5f:62:16: b8:5c:f6:17:b9:bd:bf:bd:ff:ba:f9:c0:c6:32:ed: 15:4b:57:b9:b6:07:11:69:d2:d0:45:ac:92:c1:90: 32:0f:1c:ff:a9:87:b7:79:51:31:f0:09:1b:00:db: b6:3b:43:a0:7e:79:ac:00:55:a3:9f:29:a1:86:6c: bf:af:9f:ff:b5:7e:b5:73:b8:35:a1:f2:ad:15:00: cd:ec:17:35:50:d9:73:ec:c5:6b:fe:17:6e:30:d0: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:94:26:CF:15:F5:FC:A1:87:02:97:EC:C7:E5:81:9B:A8:1C:D1:39 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.14.0/24 Signature Algorithm: sha256WithRSAEncryption 31:d4:a6:7c:4a:cb:0f:ba:02:d7:51:cb:ff:6b:03:a1:80:46: a0:24:0d:53:42:f1:92:21:11:66:69:b3:6f:9e:05:8e:b9:81: f1:ad:e5:e8:cb:c5:f5:4c:fa:8d:5a:6b:be:76:e1:27:aa:2c: 9d:0b:6d:e5:b0:22:aa:f9:4f:e6:d6:ab:68:81:12:b7:f0:62: 4b:6b:9b:3e:9d:8c:0d:25:3e:46:6e:45:5b:dc:94:c5:70:86: de:1e:9d:12:62:e9:ed:18:c6:0d:3d:f2:fc:c3:5d:52:f4:d0: 0c:a4:88:17:4f:fa:79:c4:4a:85:f3:5c:46:6d:32:be:75:25: 31:c8:75:58:b6:76:6b:ff:fa:72:88:86:0e:0e:3d:c5:a1:77: e2:5a:e8:64:d2:dc:85:c2:b7:15:7b:cb:ab:41:04:5a:5b:3f: dc:e8:7c:28:23:9f:69:d9:f9:f1:d0:18:9e:dc:ef:bb:c9:b3: 91:94:b5:58:a6:65:fa:1b:9f:fc:b1:32:c3:4d:47:ee:42:5b: 9d:e5:ab:f2:1a:5f:d1:a0:17:10:03:d3:6a:be:b7:8b:a9:0c: 99:95:2e:a1:3e:9d:70:f3:60:37:73:bc:bf:17:3f:cd:fd:d3: fa:9a:cf:af:52:50:04:1a:b5:68:7e:16:b9:d2:3e:98:6a:74: 34:20:f8:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL+Y3GN8ayY6wajC2QSjv6nNhZQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA3MDQwMDIxWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGQzN2NiOGE3NzY2ZGZmYTU1OGQxNGE4NTQ5NTJlNWRk NTA3MDc5NTQ0OTc4YTcwYWFhOTY3NjE5NTc3YjcwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi8bug62sWbXnsxNY8+PuhVYEs9uZenNjEXvDXG4a6wxWp qkISPOUPqi5Vbhke4tneAOae4rw/NV5c8gBmB9M+F24Mdrty73sro8nbOEEpInGe BRHeHb4/h3c5IfiMJwLL5Su8zSKFZRG3ppL1nDqmIgFs4xHC4LqfgGv9cFP3XSN4 7hlkODOHG+DslRmivu0k5YhFDna5cWEhtZ4FDsYn1V9iFrhc9he5vb+9/7r5wMYy 7RVLV7m2BxFp0tBFrJLBkDIPHP+ph7d5UTHwCRsA27Y7Q6B+eawAVaOfKaGGbL+v n/+1frVzuDWh8q0VAM3sFzVQ2XPsxWv+F24w0HnZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi5QmzxX1/KGHApfsx+WBm6gc0TkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RkNzJiMWIzLWJmYzktNDViZi04N2RjLWIwZTkwOTM3ZjE5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYA4wDQYJKoZIhvcNAQELBQADggEBADHUpnxKyw+6AtdRy/9rA6GARqAk DVNC8ZIhEWZps2+eBY65gfGt5ejLxfVM+o1aa7524SeqLJ0LbeWwIqr5T+bWq2iB ErfwYktrmz6djA0lPkZuRVvclMVwht4enRJi6e0Yxg098vzDXVL00AykiBdP+nnE SoXzXEZtMr51JTHIdVi2dmv/+nKIhg4OPcWhd+Ja6GTS3IXCtxV7y6tBBFpbP9zo fCgjn2nZ+fHQGJ7c77vJs5GUtVimZfobn/yxMsNNR+5CW53lq/IaX9GgFxAD02q+ t4upDJmVLqE+nXDzYDdzvL8XP8390/qaz69SUAQatWh+FrnSPphqdDQg+MI= -----END CERTIFICATE-----Generated at Fri Aug 21 01:41:43 2026 by rpki-client