$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/a4e8e605-a3b6-44f3-b37b-af4cfe963671.roa File: a4e8e605-a3b6-44f3-b37b-af4cfe963671.roa (raw, json) Hash identifier: CYFtIurvEKbSTu/EoB9EQ5sQdLtkJo4HHv5CtloS01A= Subject key identifier: EF:A5:0B:5A:A1:37:64:41:62:26:1D:BD:12:3D:E6:3C:2D:0B:BC:7D Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 53C2D4DDC06AC64050E869E22879C4F1A02A5487 Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/a4e8e605-a3b6-44f3-b37b-af4cfe963671.roa Signing time: Tue 15 Sep 2026 18:33:53 +0000 ROA not before: Tue 15 Sep 2026 18:33:53 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 169.143.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c2:d4:dd:c0:6a:c6:40:50:e8:69:e2:28:79:c4:f1:a0:2a:54:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:33:53 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=475fb8a2fd0317b376c64fdbf9839e7005c5b144a82dd8f9ebc26de98680b1dc, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:b6:61:15:4f:64:e7:77:62:e0:b7:b9:71: 02:88:c0:18:2b:56:22:e5:1e:97:bf:ea:bc:48:49: 44:6e:2e:11:8e:97:24:32:88:50:0f:72:32:2a:78: 82:49:35:4c:7b:68:9b:12:a5:fb:c2:17:d9:4b:c6: 77:0d:ae:fe:ae:92:72:36:6b:44:8f:9b:63:49:71: dc:9a:1a:7d:35:33:fa:cb:76:da:c0:15:47:62:cf: ae:81:fb:4f:d5:84:f6:e1:ea:16:2e:12:ca:b4:13: 34:95:16:5c:3a:f3:8b:2e:1d:78:38:79:6e:f8:59: 23:9e:e7:08:67:bc:8b:59:16:16:2b:12:f0:3d:55: 4e:55:ef:ad:63:85:cd:29:8d:78:0d:ab:fd:ca:97: 8b:67:9d:87:08:ca:76:12:f6:5f:61:ed:9f:09:5e: 5e:b1:83:8d:66:70:e0:86:94:a5:07:b4:f3:48:7b: 6b:61:f8:da:29:2d:50:47:ec:04:07:46:b8:92:c1: b7:c4:e6:06:6e:46:ef:6f:21:d2:ef:c0:ac:f7:4f: e8:ff:6f:04:b3:69:fd:4c:f7:98:82:fe:53:40:59: 5d:c3:e7:4b:88:25:70:26:d0:80:3c:05:62:06:d7: 6a:43:cb:98:e0:a4:ef:3c:89:9f:c8:30:7b:cb:79: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A5:0B:5A:A1:37:64:41:62:26:1D:BD:12:3D:E6:3C:2D:0B:BC:7D X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/a4e8e605-a3b6-44f3-b37b-af4cfe963671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.176.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:df:50:0b:44:91:0c:9c:ce:13:de:bb:ee:01:ca:49:7b:4b: b8:1f:a1:d6:ba:a2:56:75:85:1d:2b:0e:9b:f9:9d:ce:92:f6: f5:cb:d7:a1:ac:b6:41:44:c9:81:fe:16:4d:45:05:8c:9c:db: 1a:00:bf:3f:9e:e7:1b:d7:a1:fa:1d:20:5a:7e:3d:3e:db:a9: 36:26:d0:30:24:ac:86:e3:32:83:c3:cc:b4:e2:ab:49:31:cf: 43:eb:b7:50:28:13:cb:ff:27:14:ff:7c:a6:a8:69:2c:17:9c: ce:96:49:33:fb:a8:86:a2:55:54:d1:37:c2:53:be:b0:27:af: 16:f3:52:89:72:16:c7:25:d2:0b:c9:a4:13:4b:6e:10:55:c4: 26:0e:5e:a0:cf:bd:33:a1:10:51:b3:1e:0f:8c:21:3f:19:ea: ca:07:5c:47:2a:a8:d9:3b:57:ff:7c:e4:19:de:0b:24:2d:cd: 5f:e7:66:bd:08:a7:62:b6:ae:46:15:da:69:16:d1:6d:64:69: 6d:11:ca:41:b4:69:78:94:e2:17:7e:91:f8:ee:a9:04:c0:30: 34:c0:ce:c6:45:2e:9c:dc:a6:92:24:63:da:97:81:9a:ec:51: aa:b1:a9:6c:0b:e8:3f:55:42:ad:3d:bd:f9:e8:ec:2f:d1:a1: da:7d:07:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU8LU3cBqxkBQ6GniKHnE8aAqVIcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgzMzUzWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzVmYjhhMmZkMDMxN2IzNzZjNjRmZGJmOTgzOWU3MDA1 YzViMTQ0YTgyZGQ4ZjllYmMyNmRlOTg2ODBiMWRjMS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHhbZhFU9k53di4Le5cQKIwBgrViLlHpe/6rxISURuLhGO lyQyiFAPcjIqeIJJNUx7aJsSpfvCF9lLxncNrv6uknI2a0SPm2NJcdyaGn01M/rL dtrAFUdiz66B+0/VhPbh6hYuEsq0EzSVFlw684suHXg4eW74WSOe5whnvItZFhYr EvA9VU5V761jhc0pjXgNq/3Kl4tnnYcIynYS9l9h7Z8JXl6xg41mcOCGlKUHtPNI e2th+NopLVBH7AQHRriSwbfE5gZuRu9vIdLvwKz3T+j/bwSzaf1M95iC/lNAWV3D 50uIJXAm0IA8BWIG12pDy5jgpO88iZ/IMHvLebJdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU76ULWqE3ZEFiJh29Ej3mPC0LvH0wHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1L2E0ZThlNjA1LWEzYjYtNDRmMy1iMzdiLWFmNGNmZTk2MzY3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGpj7AwDQYJKoZIhvcNAQELBQADggEBADvfUAtEkQyczhPeu+4Bykl7S7gf oda6olZ1hR0rDpv5nc6S9vXL16GstkFEyYH+Fk1FBYyc2xoAvz+e5xvXofodIFp+ PT7bqTYm0DAkrIbjMoPDzLTiq0kxz0Prt1AoE8v/JxT/fKaoaSwXnM6WSTP7qIai VVTRN8JTvrAnrxbzUolyFscl0gvJpBNLbhBVxCYOXqDPvTOhEFGzHg+MIT8Z6soH XEcqqNk7V/985BneCyQtzV/nZr0Ip2K2rkYV2mkW0W1kaW0RykG0aXiU4hd+kfju qQTAMDTAzsZFLpzcppIkY9qXgZrsUaqxqWwL6D9VQq09vfno7C/Rodp9By8= -----END CERTIFICATE-----Generated at Mon Sep 21 01:00:50 2026 by rpki-client