$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/14d589f0-87a0-4ca0-a51e-0970817c62bf.roa File: 14d589f0-87a0-4ca0-a51e-0970817c62bf.roa (raw, json) Hash identifier: fSugkL4Q0YXG4DKR0y6RWU+nZZPKfrryYRWswSgn+Hs= Subject key identifier: 1C:A7:22:99:EB:00:15:E4:23:16:57:8D:F0:63:61:95:7D:81:CD:7F Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 7CB3F86EAEADA524B32DF64B4971CA11A3886BBC Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/14d589f0-87a0-4ca0-a51e-0970817c62bf.roa Signing time: Tue 15 Sep 2026 18:37:02 +0000 ROA not before: Tue 15 Sep 2026 18:37:02 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 169.143.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b3:f8:6e:ae:ad:a5:24:b3:2d:f6:4b:49:71:ca:11:a3:88:6b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:37:02 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=c47e63c3007920725a837c08d05539578b177cf04985e2d59e9fda57a582b227, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:01:9d:9a:5a:3d:7e:0a:aa:ea:ea:02:de:5c: 52:b6:5d:48:8b:4d:6f:1f:aa:ec:4d:bc:58:b3:89: 6e:62:ff:5d:df:1f:61:74:9a:49:ba:85:33:d0:95: 6f:da:96:36:7d:a8:02:d0:d5:99:5c:39:72:d6:9c: 40:e3:63:a6:9d:0a:bb:d1:c9:9e:66:39:da:be:82: ef:4a:52:93:1f:8b:54:88:cd:f6:ba:30:2b:f6:d9: aa:3a:74:de:5e:16:13:a7:16:cd:94:46:75:44:f8: 40:a9:8b:56:a8:6f:6b:75:16:65:5b:dc:8a:d0:1d: c9:3b:6b:cb:af:e1:e7:3a:7d:b8:bb:b1:ea:03:c4: 25:65:6a:15:32:ef:6a:75:5a:ef:56:86:89:28:68: df:82:f2:6f:d6:ee:f8:1e:5a:01:c4:ed:e2:b4:eb: 82:2d:e5:3f:05:a2:9d:df:50:1c:35:23:86:2f:a0: 0b:9a:0b:2f:80:d7:ee:fe:3d:1a:c9:c2:ba:3d:c4: f7:a3:2f:b0:25:1b:b1:14:09:b3:3a:20:8f:3a:42: df:d5:b8:b4:7d:43:32:48:b2:59:08:d0:55:fd:5a: 3a:29:6d:c3:dc:84:24:41:92:ec:4d:65:41:84:36: 23:3b:f3:6d:c5:d5:ce:a6:86:c7:c1:32:ca:fd:e7: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A7:22:99:EB:00:15:E4:23:16:57:8D:F0:63:61:95:7D:81:CD:7F X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/14d589f0-87a0-4ca0-a51e-0970817c62bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.184.0/23 Signature Algorithm: sha256WithRSAEncryption b3:45:00:73:fa:76:9e:3a:43:d5:56:c0:14:67:2a:3c:43:05: 8e:e6:5d:cb:5a:6c:a3:9c:96:2d:93:4a:8e:64:a7:11:51:1f: c2:77:02:b9:ce:1a:ae:65:34:b2:36:00:c6:2c:16:ee:f0:93: c9:bd:ff:cd:5e:ec:74:8e:58:cd:9c:22:4e:b5:a1:28:b5:1a: 86:8c:9e:bd:26:17:ef:93:21:c0:45:8b:75:2a:b0:53:b3:9b: 3c:9a:cd:97:21:5a:b1:b5:d0:69:ef:7a:5b:ff:77:98:07:d6: 6e:74:04:5a:6e:51:9d:d8:2e:90:65:72:70:df:c9:05:c7:63: 19:f0:2f:a0:40:24:2b:39:38:36:0c:78:f8:d6:54:70:3a:cf: 04:66:a3:6b:1d:d0:6d:f6:2e:74:8a:bb:6b:b4:d1:9f:5e:c1: 32:1b:d4:ba:33:0b:9f:2d:7c:1e:cb:78:02:6a:a8:e2:d8:84: ad:53:a5:18:4a:d7:b9:1f:99:6b:e7:bd:aa:74:f8:bd:d8:2b: 47:c7:af:9f:71:c1:26:70:17:7c:ba:3a:b9:83:24:32:1b:23: aa:c5:a3:ef:7c:55:e4:7f:4f:ac:df:d9:6c:35:e5:dd:3e:16: 45:30:68:6c:c9:68:56:85:c2:52:e4:45:eb:46:59:cf:bc:da: f1:33:87:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfLP4bq6tpSSzLfZLSXHKEaOIa7wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgzNzAyWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDdlNjNjMzAwNzkyMDcyNWE4MzdjMDhkMDU1Mzk1Nzhi MTc3Y2YwNDk4NWUyZDU5ZTlmZGE1N2E1ODJiMjI3MS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNAZ2aWj1+Cqrq6gLeXFK2XUiLTW8fquxNvFiziW5i/13f H2F0mkm6hTPQlW/aljZ9qALQ1ZlcOXLWnEDjY6adCrvRyZ5mOdq+gu9KUpMfi1SI zfa6MCv22ao6dN5eFhOnFs2URnVE+ECpi1aob2t1FmVb3IrQHck7a8uv4ec6fbi7 seoDxCVlahUy72p1Wu9WhokoaN+C8m/W7vgeWgHE7eK064It5T8Fop3fUBw1I4Yv oAuaCy+A1+7+PRrJwro9xPejL7AlG7EUCbM6II86Qt/VuLR9QzJIslkI0FX9Wjop bcPchCRBkuxNZUGENiM7823F1c6mhsfBMsr958FZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHKcimesAFeQjFleN8GNhlX2BzX8wHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1LzE0ZDU4OWYwLTg3YTAtNGNhMC1hNTFlLTA5NzA4MTdjNjJiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGpj7gwDQYJKoZIhvcNAQELBQADggEBALNFAHP6dp46Q9VWwBRnKjxDBY7m XctabKOcli2TSo5kpxFRH8J3ArnOGq5lNLI2AMYsFu7wk8m9/81e7HSOWM2cIk61 oSi1GoaMnr0mF++TIcBFi3UqsFOzmzyazZchWrG10Gnvelv/d5gH1m50BFpuUZ3Y LpBlcnDfyQXHYxnwL6BAJCs5ODYMePjWVHA6zwRmo2sd0G32LnSKu2u00Z9ewTIb 1LozC58tfB7LeAJqqOLYhK1TpRhK17kfmWvnvap0+L3YK0fHr59xwSZwF3y6OrmD JDIbI6rFo+98VeR/T6zf2Ww15d0+FkUwaGzJaFaFwlLkRetGWc+82vEzhy4= -----END CERTIFICATE-----Generated at Sun Sep 20 23:21:40 2026 by rpki-client