$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/4f87a95e-4497-4fbd-b628-31fbbacbd027.roa File: 4f87a95e-4497-4fbd-b628-31fbbacbd027.roa (raw, json) Hash identifier: PDgE0crjQ8tYm2gqjpY0RhyRWkBXanflvaqlQrwtEZg= Subject key identifier: F4:E2:FF:97:49:E7:80:78:CE:9C:A5:90:D6:70:33:C3:32:D6:83:19 Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 769634E649448BB5EEE16CEF9A63DEB46C852174 Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/4f87a95e-4497-4fbd-b628-31fbbacbd027.roa Signing time: Tue 15 Sep 2026 18:16:53 +0000 ROA not before: Tue 15 Sep 2026 18:16:53 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 169.143.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:96:34:e6:49:44:8b:b5:ee:e1:6c:ef:9a:63:de:b4:6c:85:21:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:16:53 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=1573a7e9b2ec2027052d624c09bf565b6dc696906c4f52ccc99863d13d68b80d, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:55:38:1f:8b:f7:50:7d:3c:29:6d:fb:a8: cb:17:b3:37:30:0b:db:08:ac:c5:f4:ee:ce:7c:01: d5:6a:e2:9d:d7:6f:bc:98:12:3e:55:28:8a:24:7e: 9b:f1:3f:13:18:ae:69:09:5b:29:e6:60:de:82:31: f5:d2:3a:32:32:4a:36:97:45:ea:e4:94:84:34:a9: 34:ec:2b:1d:9d:0b:19:17:c0:b6:ac:0a:7f:2f:47: 58:be:a0:78:d3:a6:22:b7:67:24:10:4e:50:2f:f1: 00:46:ed:b1:ca:c8:62:31:e1:6b:f1:64:a4:f9:94: df:87:33:aa:8c:1f:cc:39:45:c6:db:e1:a5:d0:b1: 57:56:37:1a:a0:2d:08:b7:4a:4a:89:4e:99:cd:d5: 53:bc:54:01:46:3c:6f:39:2f:61:a9:15:72:62:f1: 98:aa:85:f9:2c:92:d3:b3:e2:61:9b:c2:11:72:45: b0:b1:9b:4c:27:bb:cc:be:9f:45:5c:f5:52:39:59: 65:cf:39:bd:e4:87:10:d5:f8:22:d9:3e:9f:e3:4e: 3a:ef:f6:a6:45:fc:37:47:94:4d:0c:6f:f6:de:4e: c8:57:63:81:69:da:79:bb:05:2d:b7:d8:80:b8:b4: 7d:fb:38:4a:a0:36:1e:33:fa:f1:19:71:5d:07:c6: 73:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E2:FF:97:49:E7:80:78:CE:9C:A5:90:D6:70:33:C3:32:D6:83:19 X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/4f87a95e-4497-4fbd-b628-31fbbacbd027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.251.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:54:76:50:7c:e3:e4:c5:3f:61:71:c8:3b:66:4e:0b:51:06: 5c:c6:44:6b:d8:79:0f:41:35:7c:93:a8:68:bc:ce:23:b4:6e: 31:25:42:e6:bb:b0:25:c8:8e:da:9c:76:16:3d:da:26:50:c0: 1e:e8:4e:e9:3e:96:6e:9c:ce:bb:9f:1b:78:12:47:80:af:81: 6f:95:7a:f3:55:ae:a0:98:d9:4f:af:0c:a2:26:f4:9e:ea:19: ff:e5:02:bf:b5:1d:68:1d:cb:4c:a7:02:8a:d8:1c:f4:5d:9d: d7:5b:7d:8a:f0:18:d9:8a:22:5c:d0:ac:a1:ec:09:29:3b:33: 2c:d5:d8:dc:38:6c:88:bc:81:4f:57:31:5f:93:17:6c:2d:28: 53:81:d0:97:02:ea:c4:51:d1:f6:57:ed:b2:14:40:14:57:06: 0d:2c:a5:90:27:8b:64:d1:ba:98:49:57:85:e2:46:8b:5e:8c: 6c:dc:25:07:31:42:8e:5e:81:71:95:64:62:f0:91:45:14:13: 61:a8:b1:54:6e:78:8c:61:da:d9:84:68:63:b7:f9:a7:b5:d7: 96:44:6f:be:ad:c6:cc:24:47:8b:10:f2:c9:57:b5:78:6e:22: a8:69:5a:ba:00:4a:c3:e4:c6:da:40:85:dc:0a:4e:f6:8d:3d: 2a:50:bf:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdpY05klEi7Xu4WzvmmPetGyFIXQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgxNjUzWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTczYTdlOWIyZWMyMDI3MDUyZDYyNGMwOWJmNTY1YjZk YzY5NjkwNmM0ZjUyY2NjOTk4NjNkMTNkNjhiODBkMS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc2VU4H4v3UH08KW37qMsXszcwC9sIrMX07s58AdVq4p3X b7yYEj5VKIokfpvxPxMYrmkJWynmYN6CMfXSOjIySjaXRerklIQ0qTTsKx2dCxkX wLasCn8vR1i+oHjTpiK3ZyQQTlAv8QBG7bHKyGIx4WvxZKT5lN+HM6qMH8w5Rcbb 4aXQsVdWNxqgLQi3SkqJTpnN1VO8VAFGPG85L2GpFXJi8ZiqhfksktOz4mGbwhFy RbCxm0wnu8y+n0Vc9VI5WWXPOb3khxDV+CLZPp/jTjrv9qZF/DdHlE0Mb/beTshX Y4Fp2nm7BS232IC4tH37OEqgNh4z+vEZcV0HxnOpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9OL/l0nngHjOnKWQ1nAzwzLWgxkwHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1LzRmODdhOTVlLTQ0OTctNGZiZC1iNjI4LTMxZmJiYWNiZDAyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACpj/swDQYJKoZIhvcNAQELBQADggEBAItUdlB84+TFP2FxyDtmTgtRBlzG RGvYeQ9BNXyTqGi8ziO0bjElQua7sCXIjtqcdhY92iZQwB7oTuk+lm6czrufG3gS R4CvgW+VevNVrqCY2U+vDKIm9J7qGf/lAr+1HWgdy0ynAorYHPRdnddbfYrwGNmK IlzQrKHsCSk7MyzV2Nw4bIi8gU9XMV+TF2wtKFOB0JcC6sRR0fZX7bIUQBRXBg0s pZAni2TRuphJV4XiRotejGzcJQcxQo5egXGVZGLwkUUUE2GosVRueIxh2tmEaGO3 +ae115ZEb76txswkR4sQ8slXtXhuIqhpWroASsPkxtpAhdwKTvaNPSpQv1g= -----END CERTIFICATE-----Generated at Sun Sep 20 13:25:37 2026 by rpki-client