$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56a8c59e-d501-471a-a9b4-f0953bbc2ef4.roa File: 56a8c59e-d501-471a-a9b4-f0953bbc2ef4.roa (raw, json) Hash identifier: UYMQ57uZUMv3pEGkLKxqFt0WLbbQyX4Skr7swRtKp24= Subject key identifier: 85:2D:4C:14:94:1B:39:3A:45:68:CC:31:77:07:42:C5:E1:2B:E6:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B4C9E36B0049A18FE1B8ACC1C98E9A978FA4CA0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56a8c59e-d501-471a-a9b4-f0953bbc2ef4.roa Signing time: Thu 25 Sep 2025 22:14:56 +0000 ROA not before: Thu 25 Sep 2025 22:14:56 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.165.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4c:9e:36:b0:04:9a:18:fe:1b:8a:cc:1c:98:e9:a9:78:fa:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 22:14:56 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=730114725809774af5422f10cd13295d533479cd09c990c2c04d06ce2e430019, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:f9:a0:02:3f:1c:41:f5:92:75:de:7d:bd: 0a:96:78:31:ac:8d:86:09:8b:9c:c7:40:07:bd:57: 54:27:88:ff:26:e2:26:42:47:a8:40:30:ea:1b:8e: 07:cb:af:e2:22:02:68:5b:47:fc:56:3a:d5:8d:a3: 42:ef:b4:e5:ba:95:41:90:f2:ef:a5:a8:04:45:5a: 88:ed:5a:ef:20:99:47:81:db:31:0f:1f:bd:57:86: 95:d8:f6:06:e0:0e:3e:f1:89:8c:1f:c9:be:cb:dd: 32:c4:91:65:a0:c6:f0:b4:7f:39:79:21:6c:2a:4b: b3:f1:ed:9e:d3:a2:de:4c:65:56:61:52:ac:d5:e4: a0:63:96:e9:23:f3:87:18:26:7c:06:40:44:35:01: 37:ba:94:ad:ad:50:25:d5:87:ab:d7:c5:03:2e:c4: 0f:7e:a1:56:b4:b2:a2:e2:d9:8c:73:29:c3:ad:ce: 59:f7:4f:7e:3e:02:57:ab:37:d6:1b:f0:91:f2:f1: 90:38:fb:9a:c4:fa:64:a9:16:f7:ee:b7:f2:04:9e: d7:94:36:d1:be:40:0c:ad:8b:26:c2:6b:6f:44:db: 30:3f:36:95:f6:8b:cd:b5:32:8f:d8:d4:8f:fb:6c: 00:50:94:6c:d0:b6:7d:38:fa:fe:f6:91:87:33:02: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2D:4C:14:94:1B:39:3A:45:68:CC:31:77:07:42:C5:E1:2B:E6:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56a8c59e-d501-471a-a9b4-f0953bbc2ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.165.202.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:d9:07:7a:ba:ac:aa:77:1a:98:c9:9a:4c:36:c1:68:6a:4f: e3:7e:ac:97:05:3f:91:cc:d0:08:a7:c4:29:f9:e4:e7:27:74: b9:59:43:dd:cd:d2:11:ed:61:c3:ac:cc:9a:89:63:58:b7:0e: 87:a8:03:ab:88:ee:85:fc:87:21:22:92:b9:4b:6b:ee:ed:68: 4e:ea:55:ae:d8:33:b5:aa:e3:2b:ec:00:f0:a0:fe:11:cf:df: 71:e2:4f:2e:f2:ee:80:fd:b4:bb:51:65:f4:a1:05:5a:74:b5: de:96:af:02:f3:cf:7c:69:f9:29:3a:6e:38:6a:0f:f5:e2:7a: cc:73:fb:f4:da:1e:bd:de:58:39:86:33:30:63:77:8b:f6:85: 67:c5:5b:fc:38:9d:c4:37:1c:c5:1b:86:54:f3:5b:b3:3d:98: 06:32:8f:19:a4:67:33:21:eb:57:e7:c9:34:86:da:3b:20:a9: 47:ab:51:43:08:80:39:02:b6:f2:c5:1e:f5:c4:90:6a:3f:40: 12:59:3c:c5:db:9f:03:35:43:e0:c1:62:92:7d:c7:6a:aa:a6: b7:70:00:77:2b:f1:d6:43:10:58:98:a5:d9:04:ed:72:e4:37: a4:a2:7a:a9:e0:24:ea:c9:10:f7:ba:ea:2e:7a:8e:a9:b9:fe: 39:f0:d0:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO0yeNrAEmhj+G4rMHJjpqXj6TKAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjIxNDU2WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzAxMTQ3MjU4MDk3NzRhZjU0MjJmMTBjZDEzMjk1ZDUz MzQ3OWNkMDljOTkwYzJjMDRkMDZjZTJlNDMwMDE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcDPmgAj8cQfWSdd59vQqWeDGsjYYJi5zHQAe9V1QniP8m 4iZCR6hAMOobjgfLr+IiAmhbR/xWOtWNo0LvtOW6lUGQ8u+lqARFWojtWu8gmUeB 2zEPH71XhpXY9gbgDj7xiYwfyb7L3TLEkWWgxvC0fzl5IWwqS7Px7Z7Tot5MZVZh UqzV5KBjlukj84cYJnwGQEQ1ATe6lK2tUCXVh6vXxQMuxA9+oVa0sqLi2YxzKcOt zln3T34+AlerN9Yb8JHy8ZA4+5rE+mSpFvfut/IEnteUNtG+QAytiybCa29E2zA/ NpX2i821Mo/Y1I/7bABQlGzQtn04+v72kYczArO7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhS1MFJQbOTpFaMwxdwdCxeEr5oEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU2YThjNTllLWQ1MDEtNDcxYS1hOWI0LWYwOTUzYmJjMmVmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDpcowDQYJKoZIhvcNAQELBQADggEBAD3ZB3q6rKp3GpjJmkw2wWhqT+N+ rJcFP5HM0AinxCn55OcndLlZQ93N0hHtYcOszJqJY1i3DoeoA6uI7oX8hyEikrlL a+7taE7qVa7YM7Wq4yvsAPCg/hHP33HiTy7y7oD9tLtRZfShBVp0td6WrwLzz3xp +Sk6bjhqD/Xiesxz+/TaHr3eWDmGMzBjd4v2hWfFW/w4ncQ3HMUbhlTzW7M9mAYy jxmkZzMh61fnyTSG2jsgqUerUUMIgDkCtvLFHvXEkGo/QBJZPMXbnwM1Q+DBYpJ9 x2qqprdwAHcr8dZDEFiYpdkE7XLkN6SieqngJOrJEPe66i56jqm5/jnw0B4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:32 2025 by rpki-client