$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/5a0f4bab-1675-4fb2-9e0a-6b7b980e771b.roa File: 5a0f4bab-1675-4fb2-9e0a-6b7b980e771b.roa (raw, json) Hash identifier: cD2GV6tJ0J1AM9U/MIw2HtfkhaRebjRiGxTmaO0RDSE= Subject key identifier: 74:62:B5:66:8C:D9:13:CF:44:33:5F:15:98:CF:45:5B:DA:A2:0A:13 Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 37FD03B46ACB45C066F3F83C8CB7E34666B226D5 Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/5a0f4bab-1675-4fb2-9e0a-6b7b980e771b.roa Signing time: Tue 15 Sep 2026 18:34:49 +0000 ROA not before: Tue 15 Sep 2026 18:34:49 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 169.143.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fd:03:b4:6a:cb:45:c0:66:f3:f8:3c:8c:b7:e3:46:66:b2:26:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:34:49 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=6b8eb8fc40d681a220c2450495024b912542375cca51fb48fbaacd87cb76065b, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4d:0a:56:83:85:c3:e7:2c:52:6a:b7:10:09: e7:5c:81:dc:fc:eb:7a:93:1f:7d:bb:97:57:62:b6: a3:68:f9:17:0d:30:93:5e:34:65:a4:00:8f:45:9c: de:ac:12:83:fb:77:d2:f3:6c:71:d7:37:04:01:93: 9d:09:9a:fb:f4:40:d2:b7:ac:67:47:5f:f2:5a:5b: 96:72:3b:6d:ad:75:7a:0b:a3:3e:97:62:a0:fd:c6: 21:47:03:f6:01:63:9f:3a:c8:6d:17:10:53:b1:c5: e6:64:12:0f:eb:a8:9f:b9:f1:f7:88:a8:fa:67:12: e9:7e:1b:94:6a:bf:f9:75:ef:69:52:7f:34:9f:a1: 1f:4a:fd:a0:3e:fb:5f:4e:f8:85:e0:39:1d:d7:2c: c7:63:cd:d1:75:29:fe:c8:bf:ab:90:87:a4:68:4a: 8a:e0:c3:14:95:71:6a:18:52:e1:55:91:8a:c0:4a: 6c:52:6e:3c:a8:8a:fc:22:01:bc:8f:1d:b4:7d:3f: 7b:69:85:3e:28:1c:32:9a:84:13:f1:0e:dd:4a:4b: 1e:a2:0e:a6:f6:bd:f9:5c:46:9a:2d:6d:85:bc:b6: dd:46:58:89:e7:64:44:eb:34:ea:a5:94:e7:2d:45: de:77:2b:2c:65:50:35:69:f9:58:65:61:7b:1d:51: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:62:B5:66:8C:D9:13:CF:44:33:5F:15:98:CF:45:5B:DA:A2:0A:13 X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/5a0f4bab-1675-4fb2-9e0a-6b7b980e771b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.180.0/23 Signature Algorithm: sha256WithRSAEncryption b6:5d:6c:c2:35:b5:c8:0d:a7:47:03:f4:a9:7e:2f:49:68:b7: 95:38:b4:e7:a6:a8:df:c3:47:85:7d:f5:24:c0:5d:73:ca:00: 5b:da:3c:75:ec:21:8a:18:e2:47:46:ea:6f:53:c9:8c:52:1e: 05:4e:32:c1:90:e6:0e:43:fa:c8:5d:3f:78:f3:a4:47:93:16: ec:2a:7d:c7:c2:24:3c:43:7c:2a:58:16:94:e5:91:80:55:dc: bc:c5:d6:14:14:78:4c:09:56:a4:35:34:58:ee:e3:80:6b:bc: 00:ce:96:dc:95:8c:1d:f4:fe:2f:89:ea:71:cf:59:51:22:49: 04:21:f8:11:7d:e5:23:ee:6a:ef:2a:95:65:eb:25:30:d1:df: 60:e2:8c:d7:c9:9a:fe:b9:94:e6:ab:c0:88:e1:71:b9:63:e8: 4e:7b:68:2f:01:84:84:20:ca:a9:f6:77:a7:55:f2:ca:fb:14: 48:58:17:b7:75:52:cd:be:ed:ef:dd:ef:db:1d:28:c4:c0:8a: 0b:de:6f:76:47:16:dc:ed:51:56:cf:e4:5e:a8:c3:1f:b2:4f: a3:9a:44:1e:d5:39:1c:e5:75:6b:b6:36:04:7d:cf:10:b3:58: a1:99:4e:ad:61:b5:d8:6f:b0:2f:55:c3:3c:a4:34:7e:bd:19: fc:d8:ca:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN/0DtGrLRcBm8/g8jLfjRmayJtUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgzNDQ5WhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjhlYjhmYzQwZDY4MWEyMjBjMjQ1MDQ5NTAyNGI5MTI1 NDIzNzVjY2E1MWZiNDhmYmFhY2Q4N2NiNzYwNjViMS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiTQpWg4XD5yxSarcQCedcgdz863qTH327l1ditqNo+RcN MJNeNGWkAI9FnN6sEoP7d9LzbHHXNwQBk50Jmvv0QNK3rGdHX/JaW5ZyO22tdXoL oz6XYqD9xiFHA/YBY586yG0XEFOxxeZkEg/rqJ+58feIqPpnEul+G5Rqv/l172lS fzSfoR9K/aA++19O+IXgOR3XLMdjzdF1Kf7Iv6uQh6RoSorgwxSVcWoYUuFVkYrA SmxSbjyoivwiAbyPHbR9P3tphT4oHDKahBPxDt1KSx6iDqb2vflcRpotbYW8tt1G WInnZETrNOqllOctRd53KyxlUDVp+VhlYXsdUag1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdGK1ZozZE89EM18VmM9FW9qiChMwHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1LzVhMGY0YmFiLTE2NzUtNGZiMi05ZTBhLTZiN2I5ODBlNzcxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGpj7QwDQYJKoZIhvcNAQELBQADggEBALZdbMI1tcgNp0cD9Kl+L0lot5U4 tOemqN/DR4V99STAXXPKAFvaPHXsIYoY4kdG6m9TyYxSHgVOMsGQ5g5D+shdP3jz pEeTFuwqfcfCJDxDfCpYFpTlkYBV3LzF1hQUeEwJVqQ1NFju44BrvADOltyVjB30 /i+J6nHPWVEiSQQh+BF95SPuau8qlWXrJTDR32DijNfJmv65lOarwIjhcblj6E57 aC8BhIQgyqn2d6dV8sr7FEhYF7d1Us2+7e/d79sdKMTAigveb3ZHFtztUVbP5F6o wx+yT6OaRB7VORzldWu2NgR9zxCzWKGZTq1htdhvsC9VwzykNH69GfzYyuk= -----END CERTIFICATE-----Generated at Sun Sep 20 13:25:38 2026 by rpki-client