$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/7b5cc055-231e-450c-931f-9759c3c3c509.roa File: 7b5cc055-231e-450c-931f-9759c3c3c509.roa (raw, json) Hash identifier: lOpYJQopvIbh3NOmm8bi2LSNxaEhwoqBiWbsDZonX8I= Subject key identifier: 17:F5:61:7A:56:C5:8A:47:5A:36:D4:56:28:97:7F:6B:56:28:A9:4A Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 1BDD9EB2CE0CC9BC0851F1B10F594C49F538D70E Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/7b5cc055-231e-450c-931f-9759c3c3c509.roa Signing time: Tue 15 Sep 2026 18:36:01 +0000 ROA not before: Tue 15 Sep 2026 18:36:01 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 169.143.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:dd:9e:b2:ce:0c:c9:bc:08:51:f1:b1:0f:59:4c:49:f5:38:d7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:36:01 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=7c396017ba32d71ec31ffa712605315b77f8e10a8ec41e5656ec6757a869bac7, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:a9:e0:e6:16:bc:69:b3:a9:f5:ce:47:b1: 78:0b:34:30:a4:63:29:0d:ea:da:a5:80:ca:db:bd: 46:b2:e8:72:bb:60:d8:12:33:95:22:7c:4e:60:73: 18:b8:3d:c7:21:14:f0:3d:c6:b1:e7:35:5b:38:f3: bf:ac:99:0a:96:6e:df:77:cb:47:ce:10:be:c0:2b: 41:02:a8:6b:96:ae:11:c1:a6:bf:ae:f2:5d:9a:28: 6f:e7:8c:95:69:a1:77:c3:ab:3e:46:4e:89:fd:9e: 96:ab:6e:1e:05:0e:55:da:85:7f:05:a0:bb:28:f0: 63:ef:a5:a5:04:99:3a:98:17:de:ac:97:d0:24:ef: 76:3a:26:23:d5:24:6b:a7:85:07:86:a5:b3:88:ab: 60:02:c8:ee:22:41:c9:d3:f9:6b:8b:cc:22:38:45: af:c0:6b:17:fe:83:f1:43:08:4d:58:eb:ab:56:cc: 7c:42:c7:56:c2:4d:f7:a9:3e:bb:8e:fd:40:6e:f2: 65:91:3a:e2:2a:c8:5f:e5:20:f5:e7:76:56:02:e0: 06:37:cd:be:da:af:c5:b9:d8:91:a8:7c:7e:3e:b2: a4:2e:cd:9a:d0:13:03:7d:6d:06:d5:96:ef:d7:5c: 12:b8:0e:2e:18:02:c7:4c:8a:ad:5d:a7:28:ee:f0: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F5:61:7A:56:C5:8A:47:5A:36:D4:56:28:97:7F:6B:56:28:A9:4A X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/7b5cc055-231e-450c-931f-9759c3c3c509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.178.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:ba:41:15:d3:80:16:7c:58:f9:fc:2c:26:34:b6:01:66:e9: 25:81:51:68:11:cb:67:da:f8:f0:f0:61:db:c5:2d:72:d3:c3: b0:8c:24:5b:63:98:66:0f:eb:16:dd:ac:1c:33:de:00:27:36: 90:d6:0c:51:e4:b1:a8:b1:c6:57:5f:03:22:df:97:d2:94:da: d2:6d:79:d6:6b:97:da:d8:5c:fc:84:33:27:39:3f:9f:7f:ca: 9a:d9:1f:00:e3:e5:ff:00:4f:7f:9d:12:c0:a7:3b:44:91:4c: de:c3:ab:eb:ce:92:75:78:93:32:67:21:9b:21:6a:e7:ca:09: 98:0a:7c:b9:06:59:5c:cb:af:37:05:14:ad:96:54:58:37:e9: a1:f8:05:0c:1e:33:cb:b6:4c:bf:31:b3:c8:a6:f8:3c:e2:8f: d8:61:b6:83:d7:ac:5a:d7:06:88:79:7b:a2:68:af:41:5d:06: 9b:ec:95:8d:37:2f:7c:42:72:ea:06:ea:06:6c:7d:73:21:62: be:b7:a1:d0:29:0d:58:b2:21:82:1c:60:39:e4:9d:6a:ef:d2: dd:fa:a5:15:d3:d4:17:2c:cd:8a:4b:b5:66:4e:f7:44:41:e5: 59:44:6d:2f:ce:5f:4a:fb:ab:04:19:e4:c6:93:41:9d:e3:e1: df:80:9f:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG92ess4MybwIUfGxD1lMSfU41w4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgzNjAxWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzM5NjAxN2JhMzJkNzFlYzMxZmZhNzEyNjA1MzE1Yjc3 ZjhlMTBhOGVjNDFlNTY1NmVjNjc1N2E4NjliYWM3MS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkW6ng5ha8abOp9c5HsXgLNDCkYykN6tqlgMrbvUay6HK7 YNgSM5UifE5gcxi4PcchFPA9xrHnNVs487+smQqWbt93y0fOEL7AK0ECqGuWrhHB pr+u8l2aKG/njJVpoXfDqz5GTon9nparbh4FDlXahX8FoLso8GPvpaUEmTqYF96s l9Ak73Y6JiPVJGunhQeGpbOIq2ACyO4iQcnT+WuLzCI4Ra/Aaxf+g/FDCE1Y66tW zHxCx1bCTfepPruO/UBu8mWROuIqyF/lIPXndlYC4AY3zb7ar8W52JGofH4+sqQu zZrQEwN9bQbVlu/XXBK4Di4YAsdMiq1dpyju8CqJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUF/VhelbFikdaNtRWKJd/a1YoqUowHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1LzdiNWNjMDU1LTIzMWUtNDUwYy05MzFmLTk3NTljM2MzYzUwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGpj7IwDQYJKoZIhvcNAQELBQADggEBAH+6QRXTgBZ8WPn8LCY0tgFm6SWB UWgRy2fa+PDwYdvFLXLTw7CMJFtjmGYP6xbdrBwz3gAnNpDWDFHksaixxldfAyLf l9KU2tJtedZrl9rYXPyEMyc5P59/yprZHwDj5f8AT3+dEsCnO0SRTN7Dq+vOknV4 kzJnIZshaufKCZgKfLkGWVzLrzcFFK2WVFg36aH4BQweM8u2TL8xs8im+Dzij9hh toPXrFrXBoh5e6Jor0FdBpvslY03L3xCcuoG6gZsfXMhYr63odApDViyIYIcYDnk nWrv0t36pRXT1BcszYpLtWZO90RB5VlEbS/OX0r7qwQZ5MaTQZ3j4d+An4A= -----END CERTIFICATE-----Generated at Mon Sep 21 01:19:56 2026 by rpki-client