$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/4fa8c56f-7f02-4100-817f-2d0cd027c296.roa File: 4fa8c56f-7f02-4100-817f-2d0cd027c296.roa (raw, json) Hash identifier: Ap90c1n4q1smiq4/fEaAsgmK7SxCl6GIkIZuC4DG2fU= Subject key identifier: 2F:81:5F:E3:6B:0C:55:8D:C5:40:A3:1B:3F:42:28:61:DC:A8:2E:E4 Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 63C4A07CD36D9880D51AC86C9ABEA0665B053A21 Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/4fa8c56f-7f02-4100-817f-2d0cd027c296.roa Signing time: Tue 15 Sep 2026 18:36:21 +0000 ROA not before: Tue 15 Sep 2026 18:36:21 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 169.143.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c4:a0:7c:d3:6d:98:80:d5:1a:c8:6c:9a:be:a0:66:5b:05:3a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:36:21 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=e167c5f8e15cf0f6bd813358c47cb4f65a99e80c78b7021ae4680ee70d3fce97, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fd:ac:63:71:a2:6d:7e:c7:76:f2:b5:95:e9: 63:ee:aa:69:f3:0c:fd:21:6c:95:fa:52:4a:ac:4f: d0:87:ea:f1:57:df:c0:08:d2:f9:3c:50:a2:b8:47: c3:ac:90:50:f2:e3:1e:ee:0f:7c:41:87:b1:7c:bd: b3:6a:6e:e3:27:3e:84:b1:26:08:4f:4d:b4:bb:34: ec:25:8f:b9:20:44:de:54:88:27:96:7f:ef:79:17: 58:8f:80:bf:aa:59:5f:3c:f2:96:bd:db:24:5d:c0: 7c:e3:b4:85:ff:cf:bf:ae:17:71:ec:20:68:d1:01: 22:44:80:85:50:03:09:40:1e:f3:8a:13:6a:a9:15: 87:16:5f:b2:84:61:aa:33:99:ae:ae:1c:bd:71:89: b7:89:d3:f9:a2:06:10:c6:f8:a6:3f:0f:08:08:b4: e1:a7:fc:22:9d:40:a1:25:d8:71:b8:0b:fb:37:15: 7b:2f:02:62:01:33:f1:43:2a:32:27:da:14:2d:e8: f0:3d:45:f8:dc:aa:45:5b:59:c2:72:c2:2c:8b:e0: 00:0e:e9:07:5d:43:c7:e9:fb:4e:b5:3b:ae:b3:eb: 13:9e:77:55:41:d8:21:e4:68:f5:86:7d:5e:68:b0: 5a:ef:67:68:7a:0f:e4:bf:a8:88:47:b0:25:cd:2e: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:81:5F:E3:6B:0C:55:8D:C5:40:A3:1B:3F:42:28:61:DC:A8:2E:E4 X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/4fa8c56f-7f02-4100-817f-2d0cd027c296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.182.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:63:47:2b:4b:88:ef:c2:f7:e6:a1:d6:be:16:64:6c:f2:59: 03:dc:4c:8f:b4:0c:c9:5b:9d:3c:56:7d:c0:ac:8c:b8:fe:ca: 4a:93:c9:2c:3d:aa:67:f2:66:df:f6:15:6b:36:8a:54:f2:b4: cc:64:ba:76:3c:86:ea:48:c7:a2:57:f1:26:1c:ba:17:cd:f9: 48:9e:1d:1c:e0:91:22:a8:eb:38:df:89:8e:b4:0e:16:88:59: e6:28:95:d5:f1:11:28:58:4c:bc:99:b2:6d:9a:0b:6b:9e:d1: 8a:7d:f6:65:47:78:c5:85:35:33:56:e4:a3:9c:f6:39:fa:99: ad:19:9d:42:d1:2e:3b:aa:35:e7:0d:39:18:4d:8d:54:08:f1: 3e:d7:34:91:6d:77:6d:e6:46:d8:6f:74:23:e5:61:b8:be:1d: df:a3:5b:16:0c:55:9c:3b:bd:97:6b:92:50:d2:4a:39:81:2a: 3a:a4:cd:07:cf:38:bd:ff:ad:32:4b:65:df:4e:e0:12:9e:1e: d9:59:53:0e:5b:30:de:c5:d9:53:65:e4:e7:06:d6:20:79:0a: 3c:09:24:fb:3b:9d:28:a9:19:43:02:24:df:1d:24:b4:01:2f: ac:20:e3:75:8b:c8:b6:88:9e:0c:89:70:9c:5a:37:46:00:87: ed:aa:be:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY8SgfNNtmIDVGshsmr6gZlsFOiEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgzNjIxWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTY3YzVmOGUxNWNmMGY2YmQ4MTMzNThjNDdjYjRmNjVh OTllODBjNzhiNzAyMWFlNDY4MGVlNzBkM2ZjZTk3MS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO/axjcaJtfsd28rWV6WPuqmnzDP0hbJX6UkqsT9CH6vFX 38AI0vk8UKK4R8OskFDy4x7uD3xBh7F8vbNqbuMnPoSxJghPTbS7NOwlj7kgRN5U iCeWf+95F1iPgL+qWV888pa92yRdwHzjtIX/z7+uF3HsIGjRASJEgIVQAwlAHvOK E2qpFYcWX7KEYaozma6uHL1xibeJ0/miBhDG+KY/DwgItOGn/CKdQKEl2HG4C/s3 FXsvAmIBM/FDKjIn2hQt6PA9RfjcqkVbWcJywiyL4AAO6QddQ8fp+061O66z6xOe d1VB2CHkaPWGfV5osFrvZ2h6D+S/qIhHsCXNLph3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL4Ff42sMVY3FQKMbP0IoYdyoLuQwHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1LzRmYThjNTZmLTdmMDItNDEwMC04MTdmLTJkMGNkMDI3YzI5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGpj7YwDQYJKoZIhvcNAQELBQADggEBADtjRytLiO/C9+ah1r4WZGzyWQPc TI+0DMlbnTxWfcCsjLj+ykqTySw9qmfyZt/2FWs2ilTytMxkunY8hupIx6JX8SYc uhfN+UieHRzgkSKo6zjfiY60DhaIWeYoldXxEShYTLyZsm2aC2ue0Yp99mVHeMWF NTNW5KOc9jn6ma0ZnULRLjuqNecNORhNjVQI8T7XNJFtd23mRthvdCPlYbi+Hd+j WxYMVZw7vZdrklDSSjmBKjqkzQfPOL3/rTJLZd9O4BKeHtlZUw5bMN7F2VNl5OcG 1iB5CjwJJPs7nSipGUMCJN8dJLQBL6wg43WLyLaIngyJcJxaN0YAh+2qvrY= -----END CERTIFICATE-----Generated at Sun Sep 20 13:25:38 2026 by rpki-client