$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa File: b56fba09-b4fa-43df-b98b-b19d88820996.roa (raw, json) Hash identifier: HXCPF+2hMiKVbVX7il+emT5DERiDBiVy/eH/K2xJKaY= Subject key identifier: 44:0C:80:31:8F:6B:AD:FE:96:9C:09:F2:83:ED:AE:FE:BC:72:58:A0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79C2269A04E40B5FEEDA61E28563D3D851BA3410 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa Signing time: Thu 16 Oct 2025 17:06:16 +0000 ROA not before: Thu 16 Oct 2025 17:06:16 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c2:26:9a:04:e4:0b:5f:ee:da:61:e2:85:63:d3:d8:51:ba:34:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 17:06:16 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=e3ce0f1e3f42cbab2c847b4dcbefce2047aa203ef270e7a2ece2c26be3d2b0c6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:72:e7:d8:6c:4e:f4:20:d4:98:95:f0:99: b4:b1:f0:ed:b0:c9:92:fb:3f:7f:63:19:84:ee:70: 7d:e4:ef:85:23:8b:23:98:e9:ca:12:d4:ec:46:4f: eb:76:67:d7:63:77:e8:e4:51:a0:9b:18:ad:d4:c3: 2f:1e:69:6a:7d:de:1b:89:c3:94:94:a1:3d:92:fd: 46:fe:ce:a7:23:3b:f7:e7:1f:f0:4d:93:9b:ba:2a: a1:c8:37:28:16:dd:3b:01:7f:25:f5:f6:b3:c4:f8: 6a:8f:a2:fc:75:df:1f:c9:e1:17:54:6e:11:f5:89: 5f:e5:2d:dd:54:9e:8b:fe:0e:fc:7c:b1:27:08:e3: be:be:4c:1b:61:b0:e8:43:db:3d:c8:3f:b0:ef:ab: 1d:39:cf:b2:58:a9:46:38:4c:ff:fa:4f:1d:4a:52: 17:c6:24:e7:1e:29:b1:d9:04:44:03:f3:f9:bc:db: 43:e8:c7:71:6a:03:51:a4:40:4c:58:ff:e1:2d:56: 85:eb:17:fc:5d:4c:cc:af:9a:96:eb:ff:64:d2:a6: 01:c5:f6:61:dc:bf:ea:56:c3:b4:e4:44:d1:10:70: b3:8e:71:94:01:e1:d1:26:fe:a8:58:f2:2d:44:f3: bf:82:1b:b4:70:cc:d4:90:91:b5:57:a1:ea:c5:d5: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0C:80:31:8F:6B:AD:FE:96:9C:09:F2:83:ED:AE:FE:BC:72:58:A0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.232.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:47:e2:ce:d4:c0:4d:61:59:f3:e9:8d:ae:11:c1:01:30:1c: bd:58:06:81:56:05:46:ed:22:ec:2e:90:3e:54:7e:ab:80:7e: 61:24:36:f4:01:fb:d5:a2:53:9a:a8:0f:7d:61:c3:35:98:ca: 3e:91:16:d8:dc:c1:cb:62:22:d2:fc:f1:78:5d:25:2b:54:5e: 7d:88:03:96:24:d4:4b:31:98:57:44:2e:1c:82:2e:76:c2:6f: 25:7e:5c:74:29:14:aa:58:fc:d5:a3:31:5d:4a:72:c6:c6:49: a1:f3:39:07:8e:a7:3b:2f:2a:15:9b:91:1f:e5:54:de:ac:ee: c1:1c:0a:04:cb:58:d4:d6:d2:87:a7:6e:4a:6e:36:b1:7c:06: 4d:30:89:b6:e6:30:cc:77:95:85:62:12:b8:b8:05:a6:92:5f: 8a:7e:08:ed:b9:ad:42:2b:89:51:d8:4e:a0:00:10:fc:45:26: e2:0d:76:f1:fd:d1:ca:d9:27:dc:2c:e2:6a:88:b6:1a:c7:4b: 23:4a:2d:7d:b0:07:65:9f:77:31:c1:11:dc:e1:6a:8d:49:43: d6:b4:76:78:5a:a1:e9:59:af:17:e0:c6:4b:ee:66:db:5e:34: 6e:34:a1:9f:36:36:e6:a5:c3:5b:e5:a1:0e:0f:de:2f:65:3e: 0f:68:f4:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUecImmgTkC1/u2mHihWPT2FG6NBAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTcwNjE2WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2NlMGYxZTNmNDJjYmFiMmM4NDdiNGRjYmVmY2UyMDQ3 YWEyMDNlZjI3MGU3YTJlY2UyYzI2YmUzZDJiMGM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9oHLn2GxO9CDUmJXwmbSx8O2wyZL7P39jGYTucH3k74Uj iyOY6coS1OxGT+t2Z9djd+jkUaCbGK3Uwy8eaWp93huJw5SUoT2S/Ub+zqcjO/fn H/BNk5u6KqHINygW3TsBfyX19rPE+GqPovx13x/J4RdUbhH1iV/lLd1Unov+Dvx8 sScI476+TBthsOhD2z3IP7Dvqx05z7JYqUY4TP/6Tx1KUhfGJOceKbHZBEQD8/m8 20Pox3FqA1GkQExY/+EtVoXrF/xdTMyvmpbr/2TSpgHF9mHcv+pWw7TkRNEQcLOO cZQB4dEm/qhY8i1E87+CG7RwzNSQkbVXoerF1elHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURAyAMY9rrf6WnAnyg+2u/rxyWKAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1NmZiYTA5LWI0ZmEtNDNkZi1iOThiLWIxOWQ4ODgyMDk5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fOgwDQYJKoZIhvcNAQELBQADggEBAHtH4s7UwE1hWfPpja4RwQEwHL1Y BoFWBUbtIuwukD5UfquAfmEkNvQB+9WiU5qoD31hwzWYyj6RFtjcwctiItL88Xhd JStUXn2IA5Yk1EsxmFdELhyCLnbCbyV+XHQpFKpY/NWjMV1KcsbGSaHzOQeOpzsv KhWbkR/lVN6s7sEcCgTLWNTW0oenbkpuNrF8Bk0wibbmMMx3lYViEri4BaaSX4p+ CO25rUIriVHYTqAAEPxFJuINdvH90crZJ9ws4mqIthrHSyNKLX2wB2WfdzHBEdzh ao1JQ9a0dnhaoelZrxfgxkvuZtteNG40oZ82Nualw1vloQ4P3i9lPg9o9Lw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:26 2025 by rpki-client