$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/f49f34f8-a6f9-4143-9e70-e3580436f6eb.roa File: f49f34f8-a6f9-4143-9e70-e3580436f6eb.roa (raw, json) Hash identifier: iD6D1hU6ULzYNOP/xCypHYvulloy+MXtAthSIuWNXOI= Subject key identifier: 72:94:16:81:76:80:88:50:B8:BD:2E:9E:99:D0:55:7D:8F:A5:D9:1E Certificate issuer: /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Certificate serial: 4A873B5A05CDD4B5E11FA0E1837200049CD6C5B5 Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/f49f34f8-a6f9-4143-9e70-e3580436f6eb.roa Signing time: Tue 15 Sep 2026 18:16:53 +0000 ROA not before: Tue 15 Sep 2026 18:16:53 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 169.143.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:87:3b:5a:05:cd:d4:b5:e1:1f:a0:e1:83:72:00:04:9c:d6:c5:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa Validity Not Before: Sep 15 18:16:53 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=fc1391885d8e4b9852e5e9221bb220fd804a03d035672815ac1205ced94022d9, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:02:63:a9:9c:7a:99:9b:de:62:e4:5e:1d:15: 91:3d:31:a1:b9:88:68:b8:68:6c:7f:ae:98:53:28: 8c:31:4b:47:30:4c:ff:41:6b:24:e8:b6:6f:49:7f: 17:27:2f:3c:18:d4:49:ae:9a:fe:25:15:3e:91:3d: ac:5a:ee:46:e4:49:87:03:c9:6d:6f:c0:44:7b:3f: 74:40:7c:16:eb:cc:f9:83:ee:0d:d6:65:0f:f8:41: c4:2d:b8:9e:59:3c:7c:3c:f8:66:32:92:7b:7b:49: de:91:1a:d0:27:22:66:de:e9:14:6b:4f:68:27:15: 3c:bc:6f:7a:c1:66:77:dc:b4:6c:6d:9a:b5:73:84: a1:28:f3:11:fd:89:af:ad:30:33:b4:37:d3:2c:f8: f9:93:1f:13:a2:6c:e0:f6:0b:35:70:89:f7:a3:69: aa:df:ca:b0:b1:01:94:fa:13:78:6b:45:27:6e:cf: 3e:72:4b:02:99:d8:e7:32:e2:d1:e2:3e:5b:83:cc: 29:9c:d3:3d:bb:12:26:cb:c2:ca:ff:c0:93:04:e0: 2a:9d:df:06:d2:24:06:76:53:1c:d1:9a:cb:cd:ed: cc:fc:85:2c:50:dd:ee:85:6b:61:d9:77:19:cc:8b: 90:0b:94:e8:6d:3a:10:18:05:03:b6:40:41:15:0c: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:94:16:81:76:80:88:50:B8:BD:2E:9E:99:D0:55:7D:8F:A5:D9:1E X509v3 Authority Key Identifier: keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/f49f34f8-a6f9-4143-9e70-e3580436f6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.143.251.0/24 Signature Algorithm: sha256WithRSAEncryption 15:13:5e:20:4f:54:88:10:e1:ff:63:31:a5:c2:77:a0:a0:8e: 51:3b:6e:88:e1:74:07:d5:3c:d4:3f:bf:20:bb:ae:83:df:9f: d5:91:12:69:db:44:93:4a:32:22:b9:9c:77:a6:e8:8c:bd:d0: 67:27:0a:e1:2f:3e:1c:79:e8:d6:bc:24:42:2a:47:1b:5b:2c: 5c:69:5c:31:fa:db:03:ef:fd:05:8c:79:b2:7c:14:2a:ab:bb: 4d:78:ef:d5:bb:7c:2e:cc:74:c8:44:2d:79:14:61:de:76:e5: 06:a9:b2:13:46:10:cb:22:96:10:51:d1:68:e0:8c:98:26:c5: c9:25:96:d8:80:0d:46:33:ff:4b:3d:3d:16:56:12:1a:97:0e: 26:c1:61:70:81:93:c5:09:a9:53:6e:6f:f6:b5:dc:28:2d:c2: a7:1a:e1:62:1d:6b:67:dc:03:1a:bc:5f:55:d0:ea:4a:ce:bd: df:29:e9:17:71:a8:33:d2:e7:31:f7:45:2a:4b:99:ad:2b:ce: 77:39:35:6e:e1:5b:ca:a6:10:f6:7c:86:68:94:96:1d:37:71: f9:86:9e:48:31:dc:d6:59:a3:b3:66:a0:65:91:3d:e8:05:cc: a0:00:77:fd:4b:01:c0:8b:0a:a2:a7:27:11:e2:c5:01:db:90: bc:6d:2b:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSoc7WgXN1LXhH6Dhg3IABJzWxbUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZkYmJjZjNjMWRhNWE2OGFhZDQzNzE2NjU5NDM1NDY1 ZTc1MDYwYzg1YmE1NDY0YWEwHhcNMjYwOTE1MTgxNjUzWhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzEzOTE4ODVkOGU0Yjk4NTJlNWU5MjIxYmIyMjBmZDgw NGEwM2QwMzU2NzI4MTVhYzEyMDVjZWQ5NDAyMmQ5MS0wKwYDVQQDEyRkMTkxOWZl MS1mYWJiLTRmMWYtYmQzYy1mNjc4YTA4ZDYzYzMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjAmOpnHqZm95i5F4dFZE9MaG5iGi4aGx/rphTKIwxS0cw TP9BayTotm9JfxcnLzwY1Emumv4lFT6RPaxa7kbkSYcDyW1vwER7P3RAfBbrzPmD 7g3WZQ/4QcQtuJ5ZPHw8+GYyknt7Sd6RGtAnImbe6RRrT2gnFTy8b3rBZnfctGxt mrVzhKEo8xH9ia+tMDO0N9Ms+PmTHxOibOD2CzVwifejaarfyrCxAZT6E3hrRSdu zz5ySwKZ2Ocy4tHiPluDzCmc0z27EibLwsr/wJME4Cqd3wbSJAZ2UxzRmsvN7cz8 hSxQ3e6Fa2HZdxnMi5ALlOhtOhAYBQO2QEEVDMMHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcpQWgXaAiFC4vS6emdBVfY+l2R4wHwYDVR0jBBgwFoAUkoUefU+kTmgN 24D4GGjLdQ2tvjcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGQ2N2ZjMi01 NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvZGZkYmJjZjNjMWRhNWE2OGFhZDQz NzE2NjU5NDM1NDY1ZTc1MDYwYzg1YmE1NDY0YWEuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZDFkZmVhMjMtNWUzOC00NDFlLTliZjctZTFj ZWI2ZTg2OTI1L2Y0OWYzNGY4LWE2ZjktNDE0My05ZTcwLWUzNTgwNDM2ZjZlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2QxZGZlYTIzLTVlMzgtNDQxZS05YmY3 LWUxY2ViNmU4NjkyNS8ybHBvcXRRM0ZtV1VOVVplZFFZTWhicFVaS28uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACpj/swDQYJKoZIhvcNAQELBQADggEBABUTXiBPVIgQ4f9jMaXCd6CgjlE7 bojhdAfVPNQ/vyC7roPfn9WREmnbRJNKMiK5nHem6Iy90GcnCuEvPhx56Na8JEIq RxtbLFxpXDH62wPv/QWMebJ8FCqru01479W7fC7MdMhELXkUYd525QapshNGEMsi lhBR0WjgjJgmxcklltiADUYz/0s9PRZWEhqXDibBYXCBk8UJqVNub/a13Cgtwqca 4WIda2fcAxq8X1XQ6krOvd8p6RdxqDPS5zH3RSpLma0rznc5NW7hW8qmEPZ8hmiU lh03cfmGnkgx3NZZo7NmoGWRPegFzKAAd/1LAcCLCqKnJxHixQHbkLxtK34= -----END CERTIFICATE-----Generated at Mon Sep 21 03:44:32 2026 by rpki-client