$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/5d843e71-5eed-4619-84e3-9599af1aec20.roa File: 5d843e71-5eed-4619-84e3-9599af1aec20.roa (raw, json) Hash identifier: ObhHheBWr6K8l6Th0DFSONbUWJ89bQtl/HiRzDHX7jY= Subject key identifier: A6:C5:C1:E1:70:10:A9:8D:A0:BA:5F:FF:FD:7D:ED:C3:BE:8F:AF:EF Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 07C4FCC29D63D887D79F6894CE35543B72AFF019 Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/5d843e71-5eed-4619-84e3-9599af1aec20.roa Signing time: Tue 15 Sep 2026 18:16:54 +0000 ROA not before: Tue 15 Sep 2026 18:16:54 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 169.143.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c4:fc:c2:9d:63:d8:87:d7:9f:68:94:ce:35:54:3b:72:af:f0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:16:54 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=6544ddad27c1cf44d6cdb07126b20f0017a9b9d6ba39c38409a479e18149b08c, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:77:1a:24:fb:35:0e:2f:f0:0f:21:f0:e1: 39:81:52:82:ae:20:ae:69:86:a8:a5:e1:b2:b4:f7: 50:b3:3e:98:a9:7c:f3:9d:b4:a4:d1:7f:35:f7:28: 31:b2:54:79:c3:cf:b0:c6:e2:81:76:ce:16:b2:66: c6:01:2b:e7:98:63:ad:07:31:a6:d1:21:5d:0b:29: 45:98:de:7a:a4:0a:13:64:46:e5:02:9b:47:9a:59: e4:d0:62:8e:d4:6a:f0:0b:04:ab:cb:42:6b:13:e1: 35:ca:17:26:a0:f9:e5:f8:b6:23:6c:6a:0c:67:bb: 95:8c:e6:7a:63:1b:17:ba:4a:2b:7f:d5:66:6f:06: 9a:34:88:09:23:42:b6:54:81:37:28:8c:d7:44:e2: 52:ce:7f:5c:1d:84:92:05:f5:f9:3f:5c:dc:3c:55: 5f:b2:16:da:6f:1b:4a:68:f1:6a:cb:e3:ef:05:31: 3a:38:2b:13:c0:3a:ae:b3:52:8d:c3:1a:77:56:fb: ff:41:b8:aa:6c:a6:de:fa:6c:17:af:cf:10:ba:9e: 83:cd:bf:46:b0:31:70:80:37:ef:e1:93:c0:f2:d2: f9:ad:f0:06:c0:dd:83:1c:de:1d:8f:5d:d2:c3:11: ff:53:06:31:79:09:5d:b4:78:4e:e9:5e:49:0a:6b: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C5:C1:E1:70:10:A9:8D:A0:BA:5F:FF:FD:7D:ED:C3:BE:8F:AF:EF X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/5d843e71-5eed-4619-84e3-9599af1aec20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.7.0/24 Signature Algorithm: sha256WithRSAEncryption 95:b4:eb:55:fb:d3:69:b4:c8:99:3a:03:f7:5d:1c:01:71:5a: 71:a0:b9:98:59:3e:a2:25:1e:86:a7:e5:a5:d7:fe:94:a4:a9: 54:1c:95:4f:48:42:5f:46:83:e5:ed:96:45:78:93:34:16:9a: 9a:be:25:44:32:bb:a5:a5:30:a1:58:65:5c:cf:9a:a5:75:4b: ae:bb:62:a0:21:28:11:4b:b0:33:55:07:ff:d7:40:f4:b4:e7: 3f:42:97:e6:46:a8:e6:30:5f:92:e4:3a:f8:d8:ff:e0:ed:1a: 61:0c:12:76:ec:d8:aa:9c:7c:de:d6:c4:52:3c:bb:a4:89:dd: 00:e4:2a:ec:44:6c:80:81:07:eb:e8:8f:36:7f:90:f7:8f:a2: 28:86:76:cb:ad:5a:44:70:11:b2:21:8a:c1:cf:e2:68:5f:5d: a5:3b:82:8b:b7:94:ab:ba:2b:6c:07:c1:e5:2d:45:8d:1a:03: 44:0d:6e:59:4a:77:ce:3a:0d:b4:51:75:f7:ee:44:3d:57:b9: a8:3c:ce:2f:e4:d5:22:6e:80:ca:44:e2:50:a8:76:1b:a8:8c: 5c:0d:01:60:37:b7:ef:af:1f:a1:f7:8b:1f:bc:34:ba:44:3b: 0e:cf:a7:37:d2:16:b4:93:3e:39:67:31:65:e5:c0:1e:0f:f1: 59:94:79:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB8T8wp1j2IfXn2iUzjVUO3Kv8BkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgxNjU0WhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTQ0ZGRhZDI3YzFjZjQ0ZDZjZGIwNzEyNmIyMGYwMDE3 YTliOWQ2YmEzOWMzODQwOWE0NzllMTgxNDliMDhjMS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt4HcaJPs1Di/wDyHw4TmBUoKuIK5phqil4bK091CzPpip fPOdtKTRfzX3KDGyVHnDz7DG4oF2zhayZsYBK+eYY60HMabRIV0LKUWY3nqkChNk RuUCm0eaWeTQYo7UavALBKvLQmsT4TXKFyag+eX4tiNsagxnu5WM5npjGxe6Sit/ 1WZvBpo0iAkjQrZUgTcojNdE4lLOf1wdhJIF9fk/XNw8VV+yFtpvG0po8WrL4+8F MTo4KxPAOq6zUo3DGndW+/9BuKpspt76bBevzxC6noPNv0awMXCAN+/hk8Dy0vmt 8AbA3YMc3h2PXdLDEf9TBjF5CV20eE7pXkkKazFPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpsXB4XAQqY2gul///X3tw76Pr+8wHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1LzVkODQzZTcxLTVlZWQtNDYxOS04NGUzLTk1OTlhZjFhZWMyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACpjwcwDQYJKoZIhvcNAQELBQADggEBAJW061X702m0yJk6A/ddHAFxWnGg uZhZPqIlHoan5aXX/pSkqVQclU9IQl9Gg+XtlkV4kzQWmpq+JUQyu6WlMKFYZVzP mqV1S667YqAhKBFLsDNVB//XQPS05z9Cl+ZGqOYwX5LkOvjY/+DtGmEMEnbs2Kqc fN7WxFI8u6SJ3QDkKuxEbICBB+vojzZ/kPePoiiGdsutWkRwEbIhisHP4mhfXaU7 gou3lKu6K2wHweUtRY0aA0QNbllKd846DbRRdffuRD1Xuag8zi/k1SJugMpE4lCo dhuojFwNAWA3t++vH6H3ix+8NLpEOw7PpzfSFrSTPjlnMWXlwB4P8VmUefg= -----END CERTIFICATE-----Generated at Sun Sep 20 23:21:28 2026 by rpki-client