$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa File: e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa (raw, json) Hash identifier: u6JqugbeDglgaE5zYk+6slO5zXQDpTxON6TCIoPURdk= Subject key identifier: A0:C4:D9:9F:5C:2E:4D:99:03:0F:AC:E6:DB:10:88:77:FC:5D:6B:D3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 27E0BD6A8E950B1DC276D09D84B97C18AEEA4B47 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa Signing time: Fri 07 Aug 2026 04:00:07 +0000 ROA not before: Fri 07 Aug 2026 04:00:07 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e0:bd:6a:8e:95:0b:1d:c2:76:d0:9d:84:b9:7c:18:ae:ea:4b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 7 04:00:07 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=bbd3e3548e9f01d243e59f4b25c0fa1370956cc5c3521189fcf32e6f470de08f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:5f:df:12:21:f4:c1:ae:bc:13:d6:31:fe: 7a:a0:33:64:db:03:d3:6a:44:3b:16:86:46:ab:e7: 72:70:02:24:54:88:47:a8:3b:65:73:bb:d7:7f:62: fc:63:36:a8:dc:d4:25:b3:a8:97:67:16:29:bf:8c: 56:22:fe:af:a0:ff:0f:ea:4a:12:44:39:4d:51:80: 2a:33:46:35:bd:98:19:8a:b1:38:32:aa:4f:95:a4: a1:4a:e4:de:38:d8:91:20:50:8f:cc:e7:7f:37:09: f9:ad:fe:52:ed:0c:6f:08:c5:ff:e2:77:b3:40:3a: 28:11:36:17:d4:2b:72:1b:3c:60:3e:73:1e:7b:c9: d3:71:5b:b5:0b:b4:7e:00:b9:db:83:4b:55:09:66: 15:5e:e3:2c:ba:30:7a:3c:8b:d0:ed:86:d7:4b:bb: 80:c5:10:e3:a1:37:d8:78:a4:50:da:65:a8:10:6d: 7c:d1:35:a5:cb:e7:a4:5b:f4:90:68:c2:6a:45:ec: 71:13:ea:43:59:b6:08:f3:9d:89:6c:e3:ed:5d:35: c3:fa:6b:5d:64:cc:26:5c:ac:bc:a5:fe:f5:3b:8b: d4:9f:81:c5:97:f3:54:1f:e2:21:d8:bc:a6:64:e1: 38:de:ea:35:03:10:a5:73:f4:4e:cf:f7:0f:d3:c8: 13:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C4:D9:9F:5C:2E:4D:99:03:0F:AC:E6:DB:10:88:77:FC:5D:6B:D3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.4.0/24 Signature Algorithm: sha256WithRSAEncryption 49:6f:fd:a7:72:0a:02:70:a1:f2:b9:08:8d:48:c9:dc:f5:1c: 57:66:17:ee:9c:0b:ea:b2:20:7f:d3:bd:71:19:47:80:13:d6: 11:d3:1b:fa:3f:90:4f:a3:fd:fd:68:7c:fd:dd:1d:5e:72:42: 9a:5d:50:a5:a8:c4:81:2c:59:e6:da:f2:19:7b:46:d5:6c:2f: 72:85:a0:71:aa:34:ed:a8:f3:1c:fe:b0:cf:88:fd:12:ca:5f: 1f:52:68:8e:55:81:be:16:55:1a:2d:1d:2d:40:36:9e:f1:33: 2d:aa:f6:54:5e:c9:5d:60:25:84:49:83:45:53:38:66:2d:a2: 7c:30:23:98:6d:8a:3a:1d:2d:e4:12:20:5c:c1:ce:a2:b5:3a: 9e:b9:e2:c9:f7:24:c4:a8:e0:22:e0:05:d9:39:11:b8:f2:ed: e3:dc:ca:a0:d1:75:93:d2:69:df:20:8d:ab:09:cb:79:48:bd: b6:d3:99:fc:ee:47:2c:96:b9:cd:4e:74:02:82:20:5e:a4:fd: c0:ea:80:0a:34:7e:15:2a:05:88:b4:83:46:9d:84:3c:12:5e: 4c:8f:70:f8:d2:42:eb:d3:6e:89:d8:0d:c5:4b:98:c1:4f:92: 3e:ae:e8:c2:69:a7:70:4b:9b:fe:9f:d1:41:48:cc:05:8a:fd: a6:da:be:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ+C9ao6VCx3CdtCdhLl8GK7qS0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA3MDQwMDA3WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmQzZTM1NDhlOWYwMWQyNDNlNTlmNGIyNWMwZmExMzcw OTU2Y2M1YzM1MjExODlmY2YzMmU2ZjQ3MGRlMDhmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe+V/fEiH0wa68E9Yx/nqgM2TbA9NqRDsWhkar53JwAiRU iEeoO2Vzu9d/YvxjNqjc1CWzqJdnFim/jFYi/q+g/w/qShJEOU1RgCozRjW9mBmK sTgyqk+VpKFK5N442JEgUI/M5383Cfmt/lLtDG8Ixf/id7NAOigRNhfUK3IbPGA+ cx57ydNxW7ULtH4AuduDS1UJZhVe4yy6MHo8i9DthtdLu4DFEOOhN9h4pFDaZagQ bXzRNaXL56Rb9JBowmpF7HET6kNZtgjznYls4+1dNcP6a11kzCZcrLyl/vU7i9Sf gcWX81Qf4iHYvKZk4Tje6jUDEKVz9E7P9w/TyBNhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoMTZn1wuTZkDD6zm2xCId/xda9MwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U1YzFiOWI4LTk3ZjAtNDRlMC1hNGI1LTJmNmMyYTI1MzFjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAQwDQYJKoZIhvcNAQELBQADggEBAElv/adyCgJwofK5CI1Iydz1HFdm F+6cC+qyIH/TvXEZR4AT1hHTG/o/kE+j/f1ofP3dHV5yQppdUKWoxIEsWeba8hl7 RtVsL3KFoHGqNO2o8xz+sM+I/RLKXx9SaI5Vgb4WVRotHS1ANp7xMy2q9lReyV1g JYRJg0VTOGYtonwwI5htijodLeQSIFzBzqK1Op654sn3JMSo4CLgBdk5Ebjy7ePc yqDRdZPSad8gjasJy3lIvbbTmfzuRyyWuc1OdAKCIF6k/cDqgAo0fhUqBYi0g0ad hDwSXkyPcPjSQuvTbonYDcVLmMFPkj6u6MJpp3BLm/6f0UFIzAWK/abavpE= -----END CERTIFICATE-----Generated at Fri Aug 21 00:15:13 2026 by rpki-client