$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56a1f65b-5d1f-41d2-b516-e0856920258c.roa File: 56a1f65b-5d1f-41d2-b516-e0856920258c.roa (raw, json) Hash identifier: 90IikIzmOYwRs7F/QIOl4JxG0AW0ghNNwA89pNaTHbA= Subject key identifier: 69:BB:C9:99:5E:61:AA:7E:B9:76:CA:F2:03:03:0E:31:1A:E1:E6:E1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32482C47263104B59528F6E3C1A0C718EA78D15D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56a1f65b-5d1f-41d2-b516-e0856920258c.roa Signing time: Wed 24 Sep 2025 18:46:23 +0000 ROA not before: Wed 24 Sep 2025 18:46:23 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.32.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:48:2c:47:26:31:04:b5:95:28:f6:e3:c1:a0:c7:18:ea:78:d1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 18:46:23 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=eb5eb91060db225e94f7153b3e8d8ec5ad9ec7a8abad7d0ff0a31626840b5d6e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:de:7d:8e:62:9c:cd:19:71:3d:2d:76:40:e2: 26:11:d4:95:86:2e:90:70:9d:d1:ca:b4:3f:a8:06: cf:5c:52:5c:d4:da:88:de:88:9e:62:de:68:8f:63: 5a:cf:6c:d7:4a:b8:ec:4b:67:9d:5a:68:0f:2b:98: fe:fd:d6:71:2c:ac:65:ca:76:c9:b8:c0:e0:f1:e5: ee:98:d3:b8:50:65:4a:ce:b5:b2:87:56:1c:24:61: 57:61:48:f3:e2:07:15:9a:38:d8:01:b7:9f:76:f3: b6:a5:87:be:d2:40:f6:00:fe:6d:7e:ed:b3:c2:25: d7:e5:98:ff:85:59:b6:8f:b7:ad:c5:b4:3f:38:68: b9:dd:f9:4a:32:46:96:de:48:ce:14:53:f2:02:ef: 11:53:02:ed:96:bd:99:49:a7:1a:43:00:d4:7a:c4: c7:cc:0f:b5:af:04:63:43:86:d8:dc:97:03:08:91: c9:45:d2:55:8d:2d:65:9f:86:05:56:21:e6:83:89: 68:8c:74:ed:09:9c:fd:92:fd:a6:cf:9c:f0:2e:4a: 45:27:58:45:92:ab:ea:fd:c6:d2:d2:59:f6:ff:c3: 16:21:7d:f9:e9:06:71:9f:69:0f:f2:c5:69:10:32: 7f:24:a8:76:56:0a:fb:2b:30:26:c0:98:44:85:5e: 7c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BB:C9:99:5E:61:AA:7E:B9:76:CA:F2:03:03:0E:31:1A:E1:E6:E1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56a1f65b-5d1f-41d2-b516-e0856920258c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.32.96.0/21 Signature Algorithm: sha256WithRSAEncryption b4:0f:93:79:a4:21:9b:73:a7:3f:ca:a4:ad:f0:5a:30:49:e6: 1d:22:bc:01:06:ec:75:b5:d1:21:71:0a:b9:27:6d:ce:6d:2e: 20:54:ed:94:9b:81:e8:d7:5b:31:d0:7b:e4:95:4b:05:51:bb: e0:c6:98:19:0d:77:a8:82:78:5e:85:34:80:0c:75:b7:11:3b: fa:40:0d:e9:d8:45:a8:b8:34:5b:35:33:96:bd:39:fa:45:ce: 24:b4:55:b9:51:9c:dd:5d:b8:af:9f:f4:85:00:15:a4:ff:0e: f6:3d:fd:4d:71:fd:49:f9:fd:88:36:87:a4:40:9a:15:e5:56: b5:25:48:0d:cf:ba:12:43:04:07:04:53:1f:dc:72:cc:fc:5f: ec:7c:49:f3:d9:53:54:0f:6b:59:56:a8:ee:48:e2:8e:d2:60: e0:87:fb:38:31:63:36:3b:81:56:df:1a:00:02:b8:08:7a:75: 05:80:f2:8b:9c:15:6d:95:6d:f0:b3:5c:dc:00:95:61:85:d1: 95:dc:e4:eb:3f:20:ff:c8:0d:85:37:57:9b:6c:81:7b:11:58: 16:82:1e:0a:a0:88:6f:40:a7:c8:84:0e:85:b0:61:af:25:57: cc:47:cd:6d:9c:10:99:aa:c1:ac:c7:6b:d0:a6:57:b5:9e:df: 8c:81:a2:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMkgsRyYxBLWVKPbjwaDHGOp40V0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MTg0NjIzWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjVlYjkxMDYwZGIyMjVlOTRmNzE1M2IzZThkOGVjNWFk OWVjN2E4YWJhZDdkMGZmMGEzMTYyNjg0MGI1ZDZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDf3n2OYpzNGXE9LXZA4iYR1JWGLpBwndHKtD+oBs9cUlzU 2ojeiJ5i3miPY1rPbNdKuOxLZ51aaA8rmP791nEsrGXKdsm4wODx5e6Y07hQZUrO tbKHVhwkYVdhSPPiBxWaONgBt59287alh77SQPYA/m1+7bPCJdflmP+FWbaPt63F tD84aLnd+UoyRpbeSM4UU/IC7xFTAu2WvZlJpxpDANR6xMfMD7WvBGNDhtjclwMI kclF0lWNLWWfhgVWIeaDiWiMdO0JnP2S/abPnPAuSkUnWEWSq+r9xtLSWfb/wxYh ffnpBnGfaQ/yxWkQMn8kqHZWCvsrMCbAmESFXnzNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUabvJmV5hqn65dsryAwMOMRrh5uEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU2YTFmNjViLTVkMWYtNDFkMi1iNTE2LWUwODU2OTIwMjU4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNIGAwDQYJKoZIhvcNAQELBQADggEBALQPk3mkIZtzpz/KpK3wWjBJ5h0i vAEG7HW10SFxCrknbc5tLiBU7ZSbgejXWzHQe+SVSwVRu+DGmBkNd6iCeF6FNIAM dbcRO/pADenYRai4NFs1M5a9OfpFziS0VblRnN1duK+f9IUAFaT/DvY9/U1x/Un5 /Yg2h6RAmhXlVrUlSA3PuhJDBAcEUx/ccsz8X+x8SfPZU1QPa1lWqO5I4o7SYOCH +zgxYzY7gVbfGgACuAh6dQWA8oucFW2VbfCzXNwAlWGF0ZXc5Os/IP/IDYU3V5ts gXsRWBaCHgqgiG9Ap8iEDoWwYa8lV8xHzW2cEJmqwazHa9CmV7We34yBorc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:01:52 2025 by rpki-client