$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/8393bdec-e2c0-4b0e-95da-a775d843051b.roa File: 8393bdec-e2c0-4b0e-95da-a775d843051b.roa (raw, json) Hash identifier: yKU5yl7FiowdNgLJG0zVhoxSR2AFb757QtGHdDtIIsY= Subject key identifier: 23:27:1D:9B:09:8B:21:59:C1:D9:25:96:72:34:3F:4B:2A:4E:48:5F Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 2C81610CEC60084949E4679EB24EE25AD6CA5FAD Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/8393bdec-e2c0-4b0e-95da-a775d843051b.roa Signing time: Tue 15 Sep 2026 18:16:54 +0000 ROA not before: Tue 15 Sep 2026 18:16:54 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 169.143.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:81:61:0c:ec:60:08:49:49:e4:67:9e:b2:4e:e2:5a:d6:ca:5f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:16:54 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=d6075a7ae338ea60b83de504e50480f189e92f9fa42773299aea6dd3de937a03, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:c0:f8:49:96:5d:8d:02:84:47:c5:48:28: 92:89:b4:20:7f:e0:51:1e:76:98:8a:6f:99:37:11: ed:ce:fc:e2:eb:32:e3:df:32:02:40:27:61:63:61: 4e:ab:ab:de:68:7b:eb:65:e5:27:c3:8c:a9:84:82: 3e:0d:99:97:1b:78:65:91:57:99:45:06:70:19:3f: 34:57:41:4c:3a:53:38:8c:c9:71:74:44:17:6e:8f: 47:06:ed:b2:20:1f:27:37:81:6d:d4:46:91:89:73: 0c:86:26:8b:6e:d1:8c:67:5f:fa:4d:77:05:65:06: a2:b9:30:2d:d8:8f:9d:1d:26:7d:62:58:e4:2f:cc: b7:97:47:99:cc:db:cb:76:d8:e9:ba:b1:bc:8a:07: 37:7c:01:f9:ad:ee:27:b3:ad:f2:94:4c:94:a3:7a: b3:17:38:7b:43:8e:8d:d4:be:38:86:07:12:1c:96: 56:1b:a0:bb:5d:68:36:b4:88:73:9c:62:36:22:b7: 4f:a9:3c:c9:0d:a9:d9:20:d4:9f:3e:b6:9d:15:0c: 46:e9:2c:36:a8:a3:dc:27:0c:b9:d6:a4:24:85:1c: 93:ff:b4:f1:cb:66:44:34:40:6c:de:83:6f:29:aa: a6:12:96:19:df:da:7d:90:25:31:09:30:ec:66:22: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:27:1D:9B:09:8B:21:59:C1:D9:25:96:72:34:3F:4B:2A:4E:48:5F X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/8393bdec-e2c0-4b0e-95da-a775d843051b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.7.0/24 Signature Algorithm: sha256WithRSAEncryption 67:9b:eb:c7:02:90:ae:3f:1d:0c:f0:d4:01:de:29:9d:3c:46: 97:fd:6d:c8:39:cf:90:94:a0:4a:8b:40:e2:d9:31:31:06:91: 72:b3:cb:8b:5d:8b:12:07:f1:5e:49:fa:7e:f2:95:5f:da:2b: 01:a1:9f:54:0c:b3:ce:ca:a1:45:55:b6:81:1c:b5:82:74:f6: 4c:dc:71:25:66:83:e5:74:13:2a:ff:34:e5:56:c4:44:d2:4e: a6:04:71:35:5c:57:9a:60:c8:7e:af:dc:e8:07:d9:ce:3a:bf: b3:83:d5:b6:57:5a:a3:05:f2:cb:9d:2e:ce:6b:c4:be:a8:91: eb:04:27:12:3f:04:6c:26:7e:25:f0:d3:05:53:ee:96:de:92: f7:33:f1:1c:e5:5b:d2:23:3e:7b:51:28:8c:2c:12:ce:ed:09: 08:73:a9:7a:95:b0:6c:93:66:c0:a8:b5:eb:26:b6:a5:a6:b2: 15:17:33:f0:f7:b3:17:fd:8a:27:17:14:d2:de:c3:63:b6:9b: 2a:74:c7:e4:d4:2e:20:58:43:eb:26:31:ee:16:0d:bb:d8:bf: 22:1b:d6:fe:26:f4:4f:34:f4:85:d4:44:b8:48:70:32:ae:fc: 73:09:7e:ff:46:43:dc:09:2a:df:2d:c4:fb:94:cb:57:0d:f4: e1:be:11:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULIFhDOxgCElJ5Geesk7iWtbKX60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgxNjU0WhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjA3NWE3YWUzMzhlYTYwYjgzZGU1MDRlNTA0ODBmMTg5 ZTkyZjlmYTQyNzczMjk5YWVhNmRkM2RlOTM3YTAzMS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC83cD4SZZdjQKER8VIKJKJtCB/4FEedpiKb5k3Ee3O/OLr MuPfMgJAJ2FjYU6rq95oe+tl5SfDjKmEgj4NmZcbeGWRV5lFBnAZPzRXQUw6UziM yXF0RBduj0cG7bIgHyc3gW3URpGJcwyGJotu0YxnX/pNdwVlBqK5MC3Yj50dJn1i WOQvzLeXR5nM28t22Om6sbyKBzd8Afmt7iezrfKUTJSjerMXOHtDjo3UvjiGBxIc llYboLtdaDa0iHOcYjYit0+pPMkNqdkg1J8+tp0VDEbpLDaoo9wnDLnWpCSFHJP/ tPHLZkQ0QGzeg28pqqYSlhnf2n2QJTEJMOxmInrrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIycdmwmLIVnB2SWWcjQ/SypOSF8wHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1LzgzOTNiZGVjLWUyYzAtNGIwZS05NWRhLWE3NzVkODQzMDUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACpjwcwDQYJKoZIhvcNAQELBQADggEBAGeb68cCkK4/HQzw1AHeKZ08Rpf9 bcg5z5CUoEqLQOLZMTEGkXKzy4tdixIH8V5J+n7ylV/aKwGhn1QMs87KoUVVtoEc tYJ09kzccSVmg+V0Eyr/NOVWxETSTqYEcTVcV5pgyH6v3OgH2c46v7OD1bZXWqMF 8sudLs5rxL6okesEJxI/BGwmfiXw0wVT7pbekvcz8RzlW9IjPntRKIwsEs7tCQhz qXqVsGyTZsCotesmtqWmshUXM/D3sxf9iicXFNLew2O2myp0x+TULiBYQ+smMe4W DbvYvyIb1v4m9E809IXURLhIcDKu/HMJfv9GQ9wJKt8txPuUy1cN9OG+EVA= -----END CERTIFICATE-----Generated at Sun Sep 20 13:25:37 2026 by rpki-client