$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b4af20-fcdc-4748-8f25-2b0606d1a509.roa File: 24b4af20-fcdc-4748-8f25-2b0606d1a509.roa (raw, json) Hash identifier: Q263V2jzcjrBri4tlSpc3U4GtYZzKVjbRmZ/uRnffYs= Subject key identifier: C6:9F:92:06:DB:32:45:04:77:14:E8:79:B0:E2:C0:51:EE:74:8E:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25B6F42B445D3190ED8DAD5DA9E5E7C1C2D96211 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b4af20-fcdc-4748-8f25-2b0606d1a509.roa Signing time: Tue 08 Jul 2025 17:32:02 +0000 ROA not before: Tue 08 Jul 2025 17:32:02 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 31.1.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b6:f4:2b:44:5d:31:90:ed:8d:ad:5d:a9:e5:e7:c1:c2:d9:62:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:32:02 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=70971186303e13ed15eb0dd98d8c6fd9a4745bf977159323039b530781d6baeb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:2f:98:37:52:78:92:cd:d8:e8:1d:57:40: d8:18:b2:8e:cd:e8:15:fb:77:a3:f4:9b:c8:08:95: dd:a1:f5:f4:7f:4c:8f:5b:55:2a:0b:5c:8f:93:c2: ce:26:90:1d:c5:c2:55:64:4a:4b:6c:c3:6d:82:5e: cf:d3:8a:b0:39:04:91:d2:bb:fb:cb:65:e0:2b:ac: 16:bc:8d:47:8b:03:7c:86:fc:ca:9a:1c:0b:0a:0a: c1:cd:6a:bf:99:1c:1a:6a:ff:83:81:83:40:2c:42: 68:20:26:40:3b:f8:b7:3f:5b:fe:24:ab:9f:7e:d3: fe:f5:09:7f:76:0f:31:d4:38:b0:a2:56:55:9e:e1: 37:5a:f7:52:e5:0c:29:2c:4b:85:13:87:7f:16:a8: a4:7a:df:85:10:35:11:ca:f5:d7:d6:7f:98:f0:e4: 84:27:f9:c2:e1:ab:1e:d4:6c:9d:e3:d7:32:18:bf: ce:5e:50:42:11:a9:ba:7f:83:eb:ec:a1:1f:1a:77: 4b:4b:af:fe:60:0e:b4:f3:50:f0:66:1d:a3:a4:b1: 99:fc:d8:de:8e:0a:2f:3b:60:14:bd:9a:c4:da:52: b7:9d:c5:0c:d2:e3:b7:c5:81:21:21:4b:7f:a1:1b: 50:51:4d:61:94:d7:97:d8:57:54:59:c5:8b:01:ea: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:92:06:DB:32:45:04:77:14:E8:79:B0:E2:C0:51:EE:74:8E:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b4af20-fcdc-4748-8f25-2b0606d1a509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.1.0.0/16 Signature Algorithm: sha256WithRSAEncryption 15:84:f9:71:c5:f9:65:b2:17:09:83:53:86:f0:1a:20:25:18: cd:d7:f9:25:d7:03:b1:8d:02:da:0e:de:35:7a:96:1a:2a:78: 68:9f:89:77:af:52:9d:45:0c:66:42:93:c4:0e:0a:14:8a:4f: c3:3d:c6:91:47:21:3c:5f:27:d3:6e:52:97:f0:17:b1:0b:32: 32:69:43:48:bd:fb:50:65:29:0e:08:ea:5d:e4:0b:88:38:9f: 93:ff:82:b3:8f:30:bb:96:05:38:a6:62:cf:6a:2c:e4:51:23: 1c:42:15:55:73:10:9e:6f:b6:2c:40:61:75:69:f5:a2:35:88: 52:66:0f:36:89:a0:41:3d:4e:16:cb:5c:7f:61:51:da:84:67: a6:3d:5d:04:e5:e3:51:a0:c1:bd:cc:08:eb:40:6a:95:ee:96: ef:ed:95:97:85:8f:cc:85:85:b5:86:2f:aa:a1:0c:d1:a5:8c: 72:54:ab:06:20:33:39:1f:40:b5:e6:15:6c:d7:a1:bc:21:14: b4:35:4c:f7:8a:ba:f5:e0:73:03:e7:64:e4:ef:60:0a:23:95: 1a:63:b3:66:a1:af:a2:3f:df:7d:20:48:84:02:ce:e3:bc:53: ab:89:70:6e:2d:d4:ce:60:c3:01:5e:4e:82:74:e4:ed:3e:4b: a7:6e:e3:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJbb0K0RdMZDtja1dqeXnwcLZYhEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTczMjAyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDk3MTE4NjMwM2UxM2VkMTVlYjBkZDk4ZDhjNmZkOWE0 NzQ1YmY5NzcxNTkzMjMwMzliNTMwNzgxZDZiYWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnXC+YN1J4ks3Y6B1XQNgYso7N6BX7d6P0m8gIld2h9fR/ TI9bVSoLXI+Tws4mkB3FwlVkSktsw22CXs/TirA5BJHSu/vLZeArrBa8jUeLA3yG /MqaHAsKCsHNar+ZHBpq/4OBg0AsQmggJkA7+Lc/W/4kq59+0/71CX92DzHUOLCi VlWe4Tda91LlDCksS4UTh38WqKR634UQNRHK9dfWf5jw5IQn+cLhqx7UbJ3j1zIY v85eUEIRqbp/g+vsoR8ad0tLr/5gDrTzUPBmHaOksZn82N6OCi87YBS9msTaUred xQzS47fFgSEhS3+hG1BRTWGU15fYV1RZxYsB6mI/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxp+SBtsyRQR3FOh5sOLAUe50jgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0YjRhZjIwLWZjZGMtNDc0OC04ZjI1LTJiMDYwNmQxYTUwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAfATANBgkqhkiG9w0BAQsFAAOCAQEAFYT5ccX5ZbIXCYNThvAaICUYzdf5 JdcDsY0C2g7eNXqWGip4aJ+Jd69SnUUMZkKTxA4KFIpPwz3GkUchPF8n025Sl/AX sQsyMmlDSL37UGUpDgjqXeQLiDifk/+Cs48wu5YFOKZiz2os5FEjHEIVVXMQnm+2 LEBhdWn1ojWIUmYPNomgQT1OFstcf2FR2oRnpj1dBOXjUaDBvcwI60Bqle6W7+2V l4WPzIWFtYYvqqEM0aWMclSrBiAzOR9AteYVbNehvCEUtDVM94q69eBzA+dk5O9g CiOVGmOzZqGvoj/ffSBIhALO47xTq4lwbi3UzmDDAV5OgnTk7T5Lp27jJw== -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:10 2025 by rpki-client