$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/886be413-1230-433e-b3b4-5e1424c355a5.roa File: 886be413-1230-433e-b3b4-5e1424c355a5.roa (raw, json) Hash identifier: aoBs1CRDQ3nfsH6ybjdLjslP4xavzkghhZQ5zPy/jXA= Subject key identifier: 10:1C:77:C3:52:80:73:CB:E8:A0:E0:F0:C6:F2:35:AD:CC:1D:6A:00 Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 16222111B6781F83C2CE33AEB39E6C196DCFC0AC Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/886be413-1230-433e-b3b4-5e1424c355a5.roa Signing time: Tue 15 Sep 2026 18:35:20 +0000 ROA not before: Tue 15 Sep 2026 18:35:20 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 169.143.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:22:21:11:b6:78:1f:83:c2:ce:33:ae:b3:9e:6c:19:6d:cf:c0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:35:20 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=fc393d3210e61f3398dee8a386247ed3fce5d6956b7bcb69bf696ab69f82fcc8, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:ae:31:be:3f:2a:1f:86:6a:84:6a:03:14: 42:76:8e:e0:94:4f:23:21:8d:d8:75:90:81:f1:4f: 23:94:f1:31:1c:91:bf:01:4c:24:ca:31:f6:c3:8d: 95:05:f9:0d:4c:ea:f1:4a:d6:b1:16:f2:93:42:90: 51:7c:38:41:c4:3b:dd:41:0a:50:05:fd:e0:fe:8c: 87:b3:ae:47:39:a9:e2:55:85:5f:ce:aa:b7:c7:84: c2:89:65:d0:10:46:2e:41:75:f3:20:28:8a:01:93: 16:7e:1b:60:df:11:61:b0:e4:94:01:44:bd:ed:68: 57:ed:de:81:cf:a2:66:bb:e3:dd:f2:9a:c5:46:c8: 89:12:e0:04:7a:d8:50:cb:59:78:cb:9a:c2:f0:f8: ee:78:b9:ba:99:19:05:c2:d0:ef:0a:ba:4f:f9:09: 3d:50:31:93:37:db:5a:60:82:21:80:86:df:66:d9: 27:9a:99:9b:21:0a:d7:14:9a:ee:a2:9f:35:14:3e: b6:07:c4:c9:41:89:c8:5c:7d:38:55:f1:35:7e:a5: ee:bf:10:14:c3:c7:ac:41:42:2f:c0:d6:61:f0:05: c2:4d:05:08:0d:7e:57:34:a2:8d:b9:b5:3d:cd:83: e8:15:83:e8:6c:ed:07:19:e3:ff:02:34:4b:a0:93: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1C:77:C3:52:80:73:CB:E8:A0:E0:F0:C6:F2:35:AD:CC:1D:6A:00 X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/886be413-1230-433e-b3b4-5e1424c355a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.186.0/23 Signature Algorithm: sha256WithRSAEncryption 40:13:a5:24:07:2b:58:de:a1:04:5b:b0:5b:f8:3e:36:93:37: fd:ae:07:28:37:eb:c0:2d:d6:af:62:64:48:8a:2b:c3:20:66: a4:75:2d:f6:70:4b:1b:5a:a4:ad:7f:1a:ea:f6:13:06:ea:19: a3:c4:52:16:61:76:3c:06:0a:2c:36:a9:02:bb:24:bc:7a:59: c1:39:b7:53:02:84:72:00:de:51:ac:30:fb:77:1d:09:48:90: 30:6c:78:d2:96:be:76:f3:15:18:8a:0c:af:c6:15:79:df:d0: 07:3d:d0:19:a0:68:9a:4b:c4:c2:0e:b5:6f:7e:4f:86:76:b3: 43:57:6b:b0:f6:33:dc:cd:31:90:20:62:f9:70:7f:00:c7:e0: 14:18:95:77:5a:28:30:2c:dc:39:6e:82:a5:90:91:a5:50:fa: ea:48:d3:af:6b:71:0c:a5:ed:c5:3a:79:ce:4b:1e:05:9c:63: 6a:76:0a:92:70:28:0e:d4:49:2b:44:83:76:43:4b:1a:4b:11: 24:8f:ba:ea:34:57:41:02:f1:b1:93:41:f4:cd:58:ec:e0:10: e9:89:2f:f4:47:2f:f3:d3:62:6f:91:33:71:37:cb:11:b8:1a: 18:01:84:81:1e:db:cb:26:91:da:8f:d5:9d:3d:7b:62:bf:e8: b4:b5:1e:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFiIhEbZ4H4PCzjOus55sGW3PwKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgzNTIwWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzM5M2QzMjEwZTYxZjMzOThkZWU4YTM4NjI0N2VkM2Zj ZTVkNjk1NmI3YmNiNjliZjY5NmFiNjlmODJmY2M4MS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJE64xvj8qH4ZqhGoDFEJ2juCUTyMhjdh1kIHxTyOU8TEc kb8BTCTKMfbDjZUF+Q1M6vFK1rEW8pNCkFF8OEHEO91BClAF/eD+jIezrkc5qeJV hV/OqrfHhMKJZdAQRi5BdfMgKIoBkxZ+G2DfEWGw5JQBRL3taFft3oHPoma7493y msVGyIkS4AR62FDLWXjLmsLw+O54ubqZGQXC0O8Kuk/5CT1QMZM321pggiGAht9m 2SeamZshCtcUmu6inzUUPrYHxMlBichcfThV8TV+pe6/EBTDx6xBQi/A1mHwBcJN BQgNflc0oo25tT3Ng+gVg+hs7QcZ4/8CNEugk34bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEBx3w1KAc8vooODwxvI1rcwdagAwHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1Lzg4NmJlNDEzLTEyMzAtNDMzZS1iM2I0LTVlMTQyNGMzNTVhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGpj7owDQYJKoZIhvcNAQELBQADggEBAEATpSQHK1jeoQRbsFv4PjaTN/2u Byg368At1q9iZEiKK8MgZqR1LfZwSxtapK1/Gur2EwbqGaPEUhZhdjwGCiw2qQK7 JLx6WcE5t1MChHIA3lGsMPt3HQlIkDBseNKWvnbzFRiKDK/GFXnf0Ac90BmgaJpL xMIOtW9+T4Z2s0NXa7D2M9zNMZAgYvlwfwDH4BQYlXdaKDAs3DlugqWQkaVQ+upI 069rcQyl7cU6ec5LHgWcY2p2CpJwKA7USStEg3ZDSxpLESSPuuo0V0EC8bGTQfTN WOzgEOmJL/RHL/PTYm+RM3E3yxG4GhgBhIEe28smkdqP1Z09e2K/6LS1Hr8= -----END CERTIFICATE-----Generated at Sun Sep 20 22:26:08 2026 by rpki-client