$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa File: b56fba09-b4fa-43df-b98b-b19d88820996.roa (raw, json) Hash identifier: g6gIu6G18P4FzYXZtbZ+9V5fKTvK5+PI6kiXCBPNGdY= Subject key identifier: B0:06:9D:59:B0:B3:54:71:F9:FE:52:CE:38:CC:48:13:16:36:E1:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 689F48BA05112E6EC541EF0DCBB648B85748BAB7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa Signing time: Fri 19 Sep 2025 00:57:43 +0000 ROA not before: Fri 19 Sep 2025 00:57:43 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9f:48:ba:05:11:2e:6e:c5:41:ef:0d:cb:b6:48:b8:57:48:ba:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:57:43 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=34b58138da96284f22356216242dbd0bbc56bd673f28ede98efff2ce1701b885, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:58:28:61:61:18:13:49:a7:a4:71:1c:33:c3: 09:f5:07:e8:12:89:64:1c:6d:27:5a:53:92:72:58: f7:7e:8b:07:47:4c:50:8c:a1:27:7d:14:0b:8c:00: b7:15:2d:9d:c7:c8:3f:49:86:af:ed:73:f3:51:74: ea:5a:a3:48:69:ff:aa:68:0f:16:5f:fe:59:fd:31: 04:7e:6a:3d:d3:e6:7d:6e:30:8e:60:b4:67:a0:c2: 8c:b9:3b:f0:39:5c:7a:7b:05:e0:14:ff:28:7a:de: 68:f4:b6:ef:12:52:84:56:66:38:d0:16:62:64:c8: b6:cd:15:bf:98:b4:72:c7:6a:2b:4d:ab:59:82:73: c9:75:8e:33:39:8e:a7:77:3b:66:40:48:d8:0a:b8: ec:cb:ee:0c:56:fa:95:8f:09:39:53:8f:2a:44:a9: 46:69:d7:96:3d:0b:3b:46:e9:00:89:1c:15:7f:08: e0:61:44:a8:01:1b:d2:c2:25:7d:dc:11:1d:31:0c: 59:40:bb:c1:64:d2:2e:91:50:70:fa:ce:b8:27:51: 36:dd:db:8d:76:d6:1d:ea:c4:a4:37:45:97:96:90: d4:e9:0c:5d:4c:bf:80:2c:5d:11:79:02:d4:10:aa: c4:87:6c:74:75:ae:b9:01:7a:27:eb:1d:0b:75:b6: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:06:9D:59:B0:B3:54:71:F9:FE:52:CE:38:CC:48:13:16:36:E1:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.232.0/24 Signature Algorithm: sha256WithRSAEncryption b4:8b:1b:65:9e:b9:f2:32:e0:60:7e:fd:bf:ca:bb:db:94:c9: d8:73:98:b8:67:db:01:5e:9b:e4:d6:15:6a:9c:88:e9:11:b8: aa:78:19:24:c3:48:c6:95:b8:48:43:5c:f4:fa:71:98:fb:96: cc:90:f4:11:06:85:a1:22:e8:08:bc:9e:73:8f:81:f6:da:21: 72:ae:b0:88:fa:fc:5c:29:09:f1:7d:f7:63:07:f5:8d:1e:30: aa:d8:62:4e:e4:11:71:40:c1:9a:a0:e4:88:6d:09:53:1b:61: 10:bb:ea:c5:8f:40:92:ef:f7:e1:bc:dc:76:71:02:6c:68:1b: 3e:95:a1:ac:08:98:98:c7:5b:51:1a:ba:98:97:40:3e:1d:91: 1a:ab:5a:56:40:c6:7e:a1:ad:e0:dc:a4:80:9a:94:dd:c3:88: 13:53:d4:92:98:d6:28:ab:04:13:41:60:b0:5b:dd:77:8a:85: f2:8a:e7:72:c4:11:e1:ff:44:78:b2:a0:39:45:22:14:f8:bc: e2:4a:8b:a1:19:7f:10:b1:2e:ce:1d:33:81:21:7f:7a:79:3f: e9:0f:12:48:6a:8f:a4:03:c4:ac:e8:55:34:16:16:fb:3e:9f: 9b:a8:57:6b:f5:a9:a1:22:65:5b:48:5f:fe:e5:61:a6:d2:51: c4:97:1d:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaJ9IugURLm7FQe8Ny7ZIuFdIurcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDA1NzQzWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGI1ODEzOGRhOTYyODRmMjIzNTYyMTYyNDJkYmQwYmJj NTZiZDY3M2YyOGVkZTk4ZWZmZjJjZTE3MDFiODg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcWChhYRgTSaekcRwzwwn1B+gSiWQcbSdaU5JyWPd+iwdH TFCMoSd9FAuMALcVLZ3HyD9Jhq/tc/NRdOpao0hp/6poDxZf/ln9MQR+aj3T5n1u MI5gtGegwoy5O/A5XHp7BeAU/yh63mj0tu8SUoRWZjjQFmJkyLbNFb+YtHLHaitN q1mCc8l1jjM5jqd3O2ZASNgKuOzL7gxW+pWPCTlTjypEqUZp15Y9CztG6QCJHBV/ COBhRKgBG9LCJX3cER0xDFlAu8Fk0i6RUHD6zrgnUTbd24121h3qxKQ3RZeWkNTp DF1Mv4AsXRF5AtQQqsSHbHR1rrkBeifrHQt1tqpBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsAadWbCzVHH5/lLOOMxIExY24VswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1NmZiYTA5LWI0ZmEtNDNkZi1iOThiLWIxOWQ4ODgyMDk5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fOgwDQYJKoZIhvcNAQELBQADggEBALSLG2WeufIy4GB+/b/Ku9uUydhz mLhn2wFem+TWFWqciOkRuKp4GSTDSMaVuEhDXPT6cZj7lsyQ9BEGhaEi6Ai8nnOP gfbaIXKusIj6/FwpCfF992MH9Y0eMKrYYk7kEXFAwZqg5IhtCVMbYRC76sWPQJLv 9+G83HZxAmxoGz6VoawImJjHW1EaupiXQD4dkRqrWlZAxn6hreDcpICalN3DiBNT 1JKY1iirBBNBYLBb3XeKhfKK53LEEeH/RHiyoDlFIhT4vOJKi6EZfxCxLs4dM4Eh f3p5P+kPEkhqj6QDxKzoVTQWFvs+n5uoV2v1qaEiZVtIX/7lYabSUcSXHU0= -----END CERTIFICATE-----Generated at Fri Sep 19 04:35:31 2025 by rpki-client