$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/cdc50576-6f70-4d24-a6be-1ca97e957252.roa File: cdc50576-6f70-4d24-a6be-1ca97e957252.roa (raw, json) Hash identifier: LdvfJkFMKm5tx0Qvei3ryy+lvFn8jgoIvhOfs87G4FE= Subject key identifier: 46:F0:89:A2:1C:D5:7A:3E:F1:C9:28:82:29:C1:B1:95:67:BA:1B:37 Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 2366445BCD75E5E571D5832CD468842A28A53315 Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/cdc50576-6f70-4d24-a6be-1ca97e957252.roa Signing time: Tue 15 Sep 2026 18:35:20 +0000 ROA not before: Tue 15 Sep 2026 18:35:20 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 169.143.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:66:44:5b:cd:75:e5:e5:71:d5:83:2c:d4:68:84:2a:28:a5:33:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:35:20 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=a6bfaea5772a9128da400fbafe64fbc548e1b98f977033fc6ab80af222aa2b0b, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:18:7f:b4:27:44:61:f3:a3:1a:c6:56:42: 8e:a3:0c:9a:8e:04:f5:1a:e4:76:75:eb:8f:87:2e: e8:4a:3e:70:b5:c8:57:a3:33:05:39:58:0f:ad:a8: 08:a4:2e:91:2e:e7:f3:b4:a5:a8:00:07:4b:5a:ab: 0d:94:d4:38:d1:47:f3:33:49:80:eb:4c:35:2a:7a: 81:6b:3f:70:97:a7:3d:81:99:d7:7e:ee:4e:b9:ba: 30:92:74:ef:b2:2e:ae:29:a3:ff:65:ec:5c:5b:6a: ef:64:4d:69:b6:1f:ba:06:36:d2:23:67:4a:f8:fa: d9:dc:14:e1:fe:bc:fb:4b:4c:1f:19:74:ac:cd:51: 26:a0:d7:ab:b2:73:b0:24:11:34:fe:da:8e:e6:20: 51:f6:1c:d1:6d:a3:6d:d8:f6:c2:14:45:7b:80:f1: 63:14:fe:5a:b0:bf:b2:03:ec:e7:b7:e9:23:15:89: 85:6a:97:b6:c9:7f:2d:4e:ed:98:aa:44:03:42:c7: ef:6c:a2:08:6d:87:4b:8c:20:d3:d5:28:72:00:bb: e5:14:62:8f:74:bc:74:0f:dc:07:a4:77:09:ff:fe: 4a:21:cf:ef:e8:06:8a:8c:7c:c1:2d:6a:63:00:ac: f7:ed:ba:b0:cf:7e:ef:26:ed:5b:1e:c8:ea:e9:cb: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F0:89:A2:1C:D5:7A:3E:F1:C9:28:82:29:C1:B1:95:67:BA:1B:37 X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/cdc50576-6f70-4d24-a6be-1ca97e957252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.186.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:41:f7:bc:fd:e6:35:c8:c4:c8:09:55:a5:8d:1e:51:26:d8: db:c9:0f:02:6c:3b:f5:f0:e8:ae:59:11:d5:3b:76:40:1a:c2: 60:d1:ee:df:71:d1:ca:21:89:12:8d:0f:00:f2:10:e0:a6:20: 2c:52:06:9a:22:60:ef:82:cc:cf:47:85:d4:61:ec:7d:b8:01: 62:08:d8:88:73:84:66:7e:b5:5c:71:39:2b:8c:f9:19:1a:3b: df:65:d0:0e:34:a3:d2:66:56:c2:7c:47:86:57:67:95:d8:84: ef:46:3e:f3:39:c8:03:e8:d9:d6:0e:28:fa:27:dd:8e:3e:0b: 73:58:43:47:33:b4:b0:af:de:a1:ad:c6:37:93:2a:0e:32:c7: 4b:21:7e:58:59:73:79:97:68:05:8e:35:7e:3d:b2:29:20:8a: 1f:f6:ae:f2:3e:80:dd:ba:3c:d1:5c:24:f2:b8:b5:8c:18:76: ea:70:4e:93:ac:c9:e5:56:c8:29:ff:53:05:c2:c1:28:5a:98: 9d:03:1f:96:ab:5f:4c:d7:94:ca:b8:05:2e:da:51:b6:ba:36: fa:61:cc:df:90:75:87:cf:48:48:24:7f:d4:3c:c1:4d:a1:3a: c2:9c:5b:7d:68:1f:30:d4:c3:57:a8:49:bc:7f:35:95:97:50: 01:ee:b3:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI2ZEW8115eVx1YMs1GiEKiilMxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgzNTIwWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmJmYWVhNTc3MmE5MTI4ZGE0MDBmYmFmZTY0ZmJjNTQ4 ZTFiOThmOTc3MDMzZmM2YWI4MGFmMjIyYWEyYjBiMS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCa0Rh/tCdEYfOjGsZWQo6jDJqOBPUa5HZ164+HLuhKPnC1 yFejMwU5WA+tqAikLpEu5/O0pagAB0taqw2U1DjRR/MzSYDrTDUqeoFrP3CXpz2B mdd+7k65ujCSdO+yLq4po/9l7Fxbau9kTWm2H7oGNtIjZ0r4+tncFOH+vPtLTB8Z dKzNUSag16uyc7AkETT+2o7mIFH2HNFto23Y9sIURXuA8WMU/lqwv7ID7Oe36SMV iYVql7bJfy1O7ZiqRANCx+9soghth0uMINPVKHIAu+UUYo90vHQP3Aekdwn//koh z+/oBoqMfMEtamMArPfturDPfu8m7VseyOrpy519AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURvCJohzVej7xySiCKcGxlWe6GzcwHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1L2NkYzUwNTc2LTZmNzAtNGQyNC1hNmJlLTFjYTk3ZTk1NzI1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGpj7owDQYJKoZIhvcNAQELBQADggEBAExB97z95jXIxMgJVaWNHlEm2NvJ DwJsO/Xw6K5ZEdU7dkAawmDR7t9x0cohiRKNDwDyEOCmICxSBpoiYO+CzM9HhdRh 7H24AWII2IhzhGZ+tVxxOSuM+RkaO99l0A40o9JmVsJ8R4ZXZ5XYhO9GPvM5yAPo 2dYOKPon3Y4+C3NYQ0cztLCv3qGtxjeTKg4yx0shflhZc3mXaAWONX49sikgih/2 rvI+gN26PNFcJPK4tYwYdupwTpOsyeVWyCn/UwXCwShamJ0DH5arX0zXlMq4BS7a Uba6NvphzN+QdYfPSEgkf9Q8wU2hOsKcW31oHzDUw1eoSbx/NZWXUAHus3k= -----END CERTIFICATE-----Generated at Sun Sep 20 13:25:41 2026 by rpki-client