$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/b1c7afbd-7bc2-44a2-895b-2fc3d29d48c1.roa File: b1c7afbd-7bc2-44a2-895b-2fc3d29d48c1.roa (raw, json) Hash identifier: N66diOlOHSc0NhrHey7B3Ug9L8VTqTEyp+/+bzSyUKU= Subject key identifier: 5C:E4:09:51:7E:0A:83:73:77:B6:E1:83:10:F1:E7:F6:13:FA:1E:6D Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 2933A1F1D229FDB99EDED405075F16CBBB5662C3 Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/b1c7afbd-7bc2-44a2-895b-2fc3d29d48c1.roa Signing time: Tue 15 Sep 2026 18:36:21 +0000 ROA not before: Tue 15 Sep 2026 18:36:21 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 169.143.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:33:a1:f1:d2:29:fd:b9:9e:de:d4:05:07:5f:16:cb:bb:56:62:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:36:21 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=7e1ac549053fdaf86ec023520836a8587488408e5c6fe0aaf431c6a32b0e0f4d, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:91:06:6d:3c:2c:61:98:6c:c2:37:ae:70: 5c:a1:04:43:8a:db:c5:40:99:c1:0e:13:65:86:48: 05:c7:ae:74:0d:32:96:ea:c4:ea:2e:15:e5:f6:e9: 67:94:91:40:e3:0f:32:98:50:ec:55:04:b2:af:4d: a3:4c:a3:0d:56:cc:46:b3:e5:3f:7a:4d:55:6f:0f: ba:32:74:fa:60:05:7f:c0:3f:0f:12:4d:e0:15:67: 81:b0:4f:87:c1:e4:5f:a0:3c:ad:d2:2a:a0:33:b5: 6b:c7:48:00:b7:5c:61:37:a8:b8:b7:15:f4:6b:b8: e9:fd:f5:51:db:3c:03:5c:53:8a:37:aa:03:c4:7d: 1e:4b:21:77:c3:e2:c0:23:a4:aa:5a:9e:6d:31:63: 78:24:3e:3e:65:5a:a7:1c:21:5d:8b:2c:a2:11:ca: e2:dc:b9:e8:15:4c:20:ef:0e:f1:2d:79:4a:49:cd: 5b:d2:34:ba:21:7a:63:17:b4:c4:54:ed:53:d6:52: 51:56:ea:66:a3:e6:65:2c:46:f2:00:ab:29:dc:e8: 3f:0e:3b:68:14:61:12:11:7c:b5:19:a9:5f:db:8b: 99:e2:63:4f:28:db:33:a4:98:77:71:c2:4f:22:47: aa:7d:7f:51:82:0a:9a:96:09:90:2c:a9:c4:99:f8: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E4:09:51:7E:0A:83:73:77:B6:E1:83:10:F1:E7:F6:13:FA:1E:6D X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/b1c7afbd-7bc2-44a2-895b-2fc3d29d48c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.182.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:1d:d2:a9:49:5f:50:8f:cf:0c:03:89:54:f5:d0:79:ce:65: b4:72:a5:b8:f2:7c:d8:76:f3:0f:a7:43:b5:30:90:e0:5d:86: c0:d2:07:d1:af:5f:5b:9e:0e:89:33:c9:f3:79:b9:5f:10:0a: 28:88:43:97:e3:b6:a6:0c:01:8a:d6:a8:bb:21:cf:d9:da:33: 99:01:c5:59:bd:8c:bc:32:1c:a4:2d:9b:23:92:4d:84:ef:f3: 0d:e6:e0:5b:1e:ac:8a:e1:1f:f0:59:c6:79:e7:66:2b:89:a3: 80:4f:f2:0c:70:c7:2c:ca:b6:88:31:37:7f:a8:6d:f0:d1:dd: 87:f3:dd:f5:3a:8f:1c:1f:b9:35:1d:04:85:7b:c2:b2:36:f0: 74:71:c5:11:a4:cb:19:ea:59:38:13:95:b6:5e:47:ec:39:7a: 3b:e6:4c:6a:96:8d:7e:18:1a:3f:2e:2e:05:bc:6d:b1:df:3d: e7:b8:d3:1e:d6:f4:25:f6:0b:eb:c9:1b:2c:57:c4:04:7b:db: ee:90:c5:3a:65:d2:81:17:ba:8f:df:0f:b4:51:f9:af:34:b1: 52:2b:53:7b:ee:36:77:3b:95:2c:0e:86:90:e4:be:80:95:0d: 5b:ca:b5:0a:4e:19:67:d7:9c:3c:da:3e:7b:5b:85:39:71:f1: 1c:bd:24:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKTOh8dIp/bme3tQFB18Wy7tWYsMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgzNjIxWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTFhYzU0OTA1M2ZkYWY4NmVjMDIzNTIwODM2YTg1ODc0 ODg0MDhlNWM2ZmUwYWFmNDMxYzZhMzJiMGUwZjRkMS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDfZEGbTwsYZhswjeucFyhBEOK28VAmcEOE2WGSAXHrnQN MpbqxOouFeX26WeUkUDjDzKYUOxVBLKvTaNMow1WzEaz5T96TVVvD7oydPpgBX/A Pw8STeAVZ4GwT4fB5F+gPK3SKqAztWvHSAC3XGE3qLi3FfRruOn99VHbPANcU4o3 qgPEfR5LIXfD4sAjpKpanm0xY3gkPj5lWqccIV2LLKIRyuLcuegVTCDvDvEteUpJ zVvSNLohemMXtMRU7VPWUlFW6maj5mUsRvIAqync6D8OO2gUYRIRfLUZqV/bi5ni Y08o2zOkmHdxwk8iR6p9f1GCCpqWCZAsqcSZ+EuRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXOQJUX4Kg3N3tuGDEPHn9hP6Hm0wHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1L2IxYzdhZmJkLTdiYzItNDRhMi04OTViLTJmYzNkMjlkNDhjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGpj7YwDQYJKoZIhvcNAQELBQADggEBAG0d0qlJX1CPzwwDiVT10HnOZbRy pbjyfNh28w+nQ7UwkOBdhsDSB9GvX1ueDokzyfN5uV8QCiiIQ5fjtqYMAYrWqLsh z9naM5kBxVm9jLwyHKQtmyOSTYTv8w3m4FserIrhH/BZxnnnZiuJo4BP8gxwxyzK togxN3+obfDR3Yfz3fU6jxwfuTUdBIV7wrI28HRxxRGkyxnqWTgTlbZeR+w5ejvm TGqWjX4YGj8uLgW8bbHfPee40x7W9CX2C+vJGyxXxAR72+6QxTpl0oEXuo/fD7RR +a80sVIrU3vuNnc7lSwOhpDkvoCVDVvKtQpOGWfXnDzaPntbhTlx8Ry9JB4= -----END CERTIFICATE-----Generated at Mon Sep 21 03:44:29 2026 by rpki-client