$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/505554a5-ac18-4ab7-86c3-4c65e7fc6528.roa File: 505554a5-ac18-4ab7-86c3-4c65e7fc6528.roa (raw, json) Hash identifier: GgGo9omWwak6dTg4UYa3Eh2mph9iDA6t+4Sk5Q8OhdY= Subject key identifier: 6C:0A:EB:03:49:83:71:76:17:42:12:CF:37:CD:A0:D6:50:A2:22:3E Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 2DEDAFB90A1E82AF595C69CA3754FA44C20E91F1 Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/505554a5-ac18-4ab7-86c3-4c65e7fc6528.roa Signing time: Tue 15 Sep 2026 18:36:00 +0000 ROA not before: Tue 15 Sep 2026 18:36:00 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 169.143.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ed:af:b9:0a:1e:82:af:59:5c:69:ca:37:54:fa:44:c2:0e:91:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:36:00 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=fddc1360892f2872d8e0a1e3bbee8653bbc2c26c3bc859f622ef2bb5604f6ebe, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:fb:4d:6b:31:e4:34:db:60:5a:3a:e7:0f: a2:84:24:b6:c5:7d:05:3a:48:a7:e5:c0:01:07:41: 83:f6:9d:54:3e:03:d9:19:68:13:2a:d0:b2:be:8c: 9a:cb:9b:5b:0d:37:21:8c:4c:da:d4:34:13:34:13: 7f:cc:7b:87:ff:6f:f6:a3:69:59:aa:18:51:2a:e8: d2:df:ca:f5:61:ed:a7:03:f8:5a:76:6a:ec:c1:a9: a3:78:d5:3d:47:ec:c7:1a:c5:8f:0a:46:e8:44:19: c0:0a:5d:48:24:af:25:03:d1:cc:07:4d:3d:63:74: c8:7d:82:a4:7a:cb:c0:05:45:23:da:a4:bb:82:1f: 09:02:fd:e0:c5:f6:d1:fa:32:a5:7a:de:d4:26:89: d6:b4:7d:1d:6c:59:bc:55:5a:a2:53:38:0a:93:49: df:84:6e:10:6a:07:f8:7e:dc:8f:06:d4:af:67:a8: b8:e2:b8:c4:7d:11:94:4f:66:33:f7:51:8f:90:b2: e1:9d:98:1a:53:e9:01:a8:d9:e2:7d:07:70:f1:09: 31:f6:48:69:ad:0e:e5:68:59:5a:85:92:80:74:5d: c4:62:4d:17:a4:b1:ce:02:52:f7:4c:cf:7b:ad:ae: c1:e1:17:be:2a:0d:a8:91:f8:66:be:8b:b8:43:e8: 66:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0A:EB:03:49:83:71:76:17:42:12:CF:37:CD:A0:D6:50:A2:22:3E X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/505554a5-ac18-4ab7-86c3-4c65e7fc6528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.178.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:33:14:f4:6a:b0:8a:04:b4:26:2e:b6:8a:6d:68:3b:73:fb: a3:95:4c:4f:48:0b:5b:09:9b:f2:c1:48:37:53:29:f8:d1:56: 2b:61:40:bc:a3:67:8d:35:b1:d1:70:a3:ad:aa:0f:8d:39:2d: d1:d3:78:46:8a:e6:e1:6a:61:fd:05:63:4e:7f:c0:75:3c:7f: 52:3c:4c:19:55:04:7d:47:7d:3e:5b:2f:4f:21:9d:22:e5:14: 2b:f7:7b:13:9f:f1:ed:f8:60:4a:b8:58:74:70:ff:58:86:f9: e5:2e:59:02:20:12:c7:98:cf:dc:ed:17:45:23:d9:e4:ff:d3: b3:87:64:98:d8:0a:6a:41:fa:95:c7:52:cb:11:48:3b:c9:a3: b9:64:57:b0:0e:e6:91:12:ca:4a:82:f3:5d:f4:c0:66:32:96: e9:fa:13:30:28:70:01:20:a8:8c:9e:a9:59:f0:41:b7:b6:05: b3:dd:2a:5b:fb:12:81:37:32:76:a8:f4:11:f5:4b:f0:77:0b: 72:18:57:79:9d:47:89:71:80:30:c6:c9:fa:0f:43:3d:e5:10: a1:be:ed:99:03:c2:0a:cd:0f:2a:8e:12:8a:0c:c5:d8:a1:c4: ca:5c:e3:66:19:2b:83:6f:d6:10:da:23:59:11:be:12:64:05: 66:df:ef:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULe2vuQoegq9ZXGnKN1T6RMIOkfEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgzNjAwWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGRjMTM2MDg5MmYyODcyZDhlMGExZTNiYmVlODY1M2Ji YzJjMjZjM2JjODU5ZjYyMmVmMmJiNTYwNGY2ZWJlMS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmy/tNazHkNNtgWjrnD6KEJLbFfQU6SKflwAEHQYP2nVQ+ A9kZaBMq0LK+jJrLm1sNNyGMTNrUNBM0E3/Me4f/b/ajaVmqGFEq6NLfyvVh7acD +Fp2auzBqaN41T1H7McaxY8KRuhEGcAKXUgkryUD0cwHTT1jdMh9gqR6y8AFRSPa pLuCHwkC/eDF9tH6MqV63tQmida0fR1sWbxVWqJTOAqTSd+EbhBqB/h+3I8G1K9n qLjiuMR9EZRPZjP3UY+QsuGdmBpT6QGo2eJ9B3DxCTH2SGmtDuVoWVqFkoB0XcRi TReksc4CUvdMz3utrsHhF74qDaiR+Ga+i7hD6GYhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbArrA0mDcXYXQhLPN82g1lCiIj4wHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1LzUwNTU1NGE1LWFjMTgtNGFiNy04NmMzLTRjNjVlN2ZjNjUyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGpj7IwDQYJKoZIhvcNAQELBQADggEBAAwzFPRqsIoEtCYutoptaDtz+6OV TE9IC1sJm/LBSDdTKfjRVithQLyjZ401sdFwo62qD405LdHTeEaK5uFqYf0FY05/ wHU8f1I8TBlVBH1HfT5bL08hnSLlFCv3exOf8e34YEq4WHRw/1iG+eUuWQIgEseY z9ztF0Uj2eT/07OHZJjYCmpB+pXHUssRSDvJo7lkV7AO5pESykqC8130wGYylun6 EzAocAEgqIyeqVnwQbe2BbPdKlv7EoE3Mnao9BH1S/B3C3IYV3mdR4lxgDDGyfoP Qz3lEKG+7ZkDwgrNDyqOEooMxdihxMpc42YZK4Nv1hDaI1kRvhJkBWbf70U= -----END CERTIFICATE-----Generated at Sun Sep 20 13:25:45 2026 by rpki-client