$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e4dfa680-e138-4cd2-9f92-4de31145aeb6.roa File: e4dfa680-e138-4cd2-9f92-4de31145aeb6.roa (raw, json) Hash identifier: dJYxfBSzL6Z/gyqVvay8+RafbMHkeeac27cTw7NL+vY= Subject key identifier: 39:97:81:CA:27:FA:5E:2C:7C:C9:25:A5:6B:C0:2E:0E:C0:E0:A7:FC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5981731210ABF6597CAB7632286208E3E61E1AFF Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e4dfa680-e138-4cd2-9f92-4de31145aeb6.roa Signing time: Mon 03 Aug 2026 00:10:06 +0000 ROA not before: Mon 03 Aug 2026 00:10:06 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:81:73:12:10:ab:f6:59:7c:ab:76:32:28:62:08:e3:e6:1e:1a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 3 00:10:06 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=87747a22e394b83243d5be6f0ec839f3cbee22414508cdf9a451518ea99e948b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:7e:a9:4b:66:de:0a:b5:a5:33:0b:d9:87: 09:7b:36:e3:e8:de:98:e8:1e:c9:b8:ff:2b:fb:31: ef:af:3f:75:f5:a4:24:e7:66:8e:cd:ff:fd:36:0e: e3:60:63:d4:d5:e7:e3:0f:4a:42:bb:21:91:67:00: 0d:50:3a:5d:56:d9:2b:a9:17:75:02:ab:16:b5:5c: 68:11:0c:68:ef:89:29:2c:d5:0f:e6:e4:da:f6:8e: fb:8b:a8:8a:c9:5f:70:9e:b0:db:3d:d3:39:85:7c: 32:68:c9:aa:b8:89:04:1d:30:7a:b1:ca:c1:49:9c: 5f:e3:25:09:d7:d0:de:55:b4:d6:eb:f0:a2:82:1f: 6f:2d:5d:25:c6:1b:9c:99:07:7f:db:20:d6:c0:0c: 27:ac:c6:18:7d:7a:e7:21:e7:cd:ea:16:79:aa:ca: 2e:66:cf:8e:ff:83:37:29:a2:da:36:f7:aa:ae:a6: d3:29:42:04:f9:3e:a3:f1:05:3f:22:86:58:3b:ed: d6:af:d3:1a:cb:f9:0a:94:1a:1d:4a:81:bd:78:3b: c2:80:bb:e6:13:74:f2:f0:06:a0:37:84:82:b2:7a: 05:19:b9:62:aa:8a:4f:d3:9c:f8:0a:da:7f:0c:51: fc:85:90:bb:ef:12:c3:9b:15:b8:f1:6d:a3:53:9f: 9d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:97:81:CA:27:FA:5E:2C:7C:C9:25:A5:6B:C0:2E:0E:C0:E0:A7:FC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e4dfa680-e138-4cd2-9f92-4de31145aeb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.18.0/23 Signature Algorithm: sha256WithRSAEncryption 67:4f:d4:88:28:76:6f:dc:94:73:e2:c5:7e:26:12:bc:3b:83: 4f:7d:19:cf:4e:af:63:5a:82:fa:d0:12:ef:e1:c9:1f:f3:e0: 68:ef:d2:a7:73:44:43:7c:8e:ff:83:a7:aa:c3:b7:3d:62:1e: 5a:14:24:f4:59:5f:6e:19:2c:d4:18:73:f4:e7:13:50:2a:b7: 8a:48:bd:50:e6:9d:44:a6:79:f3:6f:bc:de:fe:70:84:d2:a4: d5:55:4e:bf:17:d3:ca:cf:e5:64:6c:57:39:2b:eb:53:2e:78: d0:5c:fd:2c:c3:30:4b:3a:c9:c7:e4:3f:bb:95:e6:d2:3d:f8: 32:d0:80:62:9b:da:d1:39:c6:74:77:10:60:1b:fa:56:b4:00: d4:51:44:3b:b9:4c:6f:e2:6f:e4:7e:80:f1:c9:2b:35:2a:f3: 52:5f:43:9a:e5:08:39:c7:27:a5:46:77:da:e0:a4:0f:83:9d: e8:49:84:ca:09:9d:9c:3d:97:5d:25:cd:f0:cd:a9:85:b2:dd: 25:c2:b6:d8:30:4d:08:04:2f:87:82:00:9f:70:91:9f:a2:bf: f6:6b:64:ad:4c:4f:35:02:8d:36:52:e3:fa:e7:33:1a:23:49: 23:cc:12:95:4f:ba:6e:41:da:ee:39:3b:d3:1f:bf:73:54:c4: bc:8a:a8:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWYFzEhCr9ll8q3YyKGII4+YeGv8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODAzMDAxMDA2WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Nzc0N2EyMmUzOTRiODMyNDNkNWJlNmYwZWM4MzlmM2Ni ZWUyMjQxNDUwOGNkZjlhNDUxNTE4ZWE5OWU5NDhiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGr36pS2beCrWlMwvZhwl7NuPo3pjoHsm4/yv7Me+vP3X1 pCTnZo7N//02DuNgY9TV5+MPSkK7IZFnAA1QOl1W2SupF3UCqxa1XGgRDGjviSks 1Q/m5Nr2jvuLqIrJX3CesNs90zmFfDJoyaq4iQQdMHqxysFJnF/jJQnX0N5VtNbr 8KKCH28tXSXGG5yZB3/bINbADCesxhh9euch583qFnmqyi5mz47/gzcpoto296qu ptMpQgT5PqPxBT8ihlg77dav0xrL+QqUGh1Kgb14O8KAu+YTdPLwBqA3hIKyegUZ uWKqik/TnPgK2n8MUfyFkLvvEsObFbjxbaNTn50ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOZeByif6Xix8ySWla8AuDsDgp/wwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U0ZGZhNjgwLWUxMzgtNGNkMi05ZjkyLTRkZTMxMTQ1YWViNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBIwDQYJKoZIhvcNAQELBQADggEBAGdP1Igodm/clHPixX4mErw7g099 Gc9Or2NagvrQEu/hyR/z4Gjv0qdzREN8jv+Dp6rDtz1iHloUJPRZX24ZLNQYc/Tn E1Aqt4pIvVDmnUSmefNvvN7+cITSpNVVTr8X08rP5WRsVzkr61MueNBc/SzDMEs6 ycfkP7uV5tI9+DLQgGKb2tE5xnR3EGAb+la0ANRRRDu5TG/ib+R+gPHJKzUq81Jf Q5rlCDnHJ6VGd9rgpA+DnehJhMoJnZw9l10lzfDNqYWy3SXCttgwTQgEL4eCAJ9w kZ+iv/ZrZK1MTzUCjTZS4/rnMxojSSPMEpVPum5B2u45O9Mfv3NUxLyKqAo= -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:36 2026 by rpki-client