$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31a91453-a924-44e1-bca6-905089aa3592.roa File: 31a91453-a924-44e1-bca6-905089aa3592.roa (raw, json) Hash identifier: nvq3e2iSvoK/sHxT1M9N+maLNEv0J0Iqk8VebQ6+iDo= Subject key identifier: D4:66:04:10:42:07:A6:48:45:7E:EC:0D:A2:EE:74:73:E7:7B:D4:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31D31A0E850E0272F7D812CB8E3BC7AF2A8028 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31a91453-a924-44e1-bca6-905089aa3592.roa Signing time: Mon 16 Jun 2025 18:00:10 +0000 ROA not before: Mon 16 Jun 2025 18:00:10 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d3:1a:0e:85:0e:02:72:f7:d8:12:cb:8e:3b:c7:af:2a:80:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:00:10 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=696d26b425678bf9838e04f6b498a6abcf10f50c6afabbdc859f6046d200a076, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:ce:3e:e1:a5:6a:67:16:6c:5e:b9:6a:1b: a2:d3:a2:65:be:1b:cf:7e:aa:f5:30:89:8b:30:69: 26:f2:3f:24:a7:de:44:64:91:7c:cc:df:0f:64:d9: fd:3f:03:4b:3a:81:82:6c:0e:35:c8:c3:f8:05:d4: 6c:a5:23:70:21:ec:03:5a:a3:a9:e4:1e:b3:dc:cf: 94:43:38:f0:25:6e:c5:96:39:98:14:16:14:cd:86: 4a:08:8b:75:2b:86:d3:5e:f8:39:cd:34:87:c7:57: ea:20:e3:19:6c:83:0a:4d:b9:f5:af:97:23:e2:1d: ff:83:a3:69:ba:c2:e6:d9:34:c2:10:d6:fb:e2:09: 14:e0:14:37:2a:39:d1:a8:54:55:fb:11:6c:96:a3: 9b:a2:5e:ee:91:48:ee:a4:f0:4a:ca:9c:7a:b1:35: 34:75:f7:42:a9:73:fa:25:25:5a:01:fa:ff:6e:54: 48:ff:f2:31:e5:9d:a8:46:96:53:5f:f6:e5:94:02: da:6e:85:2f:8b:31:7c:f2:6e:11:99:04:b3:c0:c4: 37:39:01:25:39:d2:a4:88:43:fc:56:3e:55:bf:41: 06:e2:0d:73:b8:a4:1c:c5:da:1d:3c:c5:9e:1c:2f: ae:c2:00:c4:d9:17:66:05:63:9c:0e:99:82:3d:e5: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:66:04:10:42:07:A6:48:45:7E:EC:0D:A2:EE:74:73:E7:7B:D4:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31a91453-a924-44e1-bca6-905089aa3592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.197.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:91:81:3b:ed:71:c1:d8:2e:4a:55:b6:ee:09:c6:4a:63:ce: 30:42:3c:2e:5f:32:c9:6b:8d:68:e8:60:4d:39:ac:5e:3b:63: 36:bf:c5:b2:12:55:24:c1:cf:be:ec:45:c2:9f:74:1c:09:23: 02:17:1f:e6:f3:77:ad:c3:be:f3:3a:b2:e9:e5:e4:f8:d7:b4: 93:b1:8c:69:e5:7e:87:12:c5:1a:79:83:18:a7:95:38:0f:47: e6:8b:32:17:9d:45:f1:2d:79:40:d8:50:6c:67:e0:6d:ff:6d: d3:9e:9a:34:d4:63:51:56:b4:0d:d2:f9:48:13:49:c2:e5:a0: 01:ca:31:ef:84:77:e9:27:35:49:19:44:19:6d:46:ed:dc:1a: b9:0d:f8:98:0c:63:62:fd:bc:79:d1:db:df:b6:6e:88:db:3c: 99:0c:59:be:e0:d0:c1:ed:bf:fb:ec:7d:ef:cb:9e:99:2d:c0: e2:5b:49:e5:a0:4a:25:45:c0:1e:f9:d9:f1:f9:ae:d8:fb:9b: b3:bb:7c:c6:e1:da:41:d0:cc:ff:41:42:f4:e2:a7:68:a4:0e: c3:9b:ca:9a:7f:d0:da:3c:f1:a7:2b:9e:80:05:f3:f6:dd:0d: e1:cc:36:7c:98:87:c7:db:b5:7e:29:e7:c3:bc:82:40:bf:12: cc:f9:ce:cf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITMdMaDoUOAnL32BLLjjvHryqAKDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA2MTYxODAwMTBaFw0yNTA3MjEyMzU5NTla MHoxSTBHBgNVBAUTQDY5NmQyNmI0MjU2NzhiZjk4MzhlMDRmNmI0OThhNmFiY2Yx MGY1MGM2YWZhYmJkYzg1OWY2MDQ2ZDIwMGEwNzYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKLCzj7hpWpnFmxeuWobotOiZb4bz36q9TCJizBpJvI/JKfe RGSRfMzfD2TZ/T8DSzqBgmwONcjD+AXUbKUjcCHsA1qjqeQes9zPlEM48CVuxZY5 mBQWFM2GSgiLdSuG0174Oc00h8dX6iDjGWyDCk259a+XI+Id/4OjabrC5tk0whDW ++IJFOAUNyo50ahUVfsRbJajm6Je7pFI7qTwSsqcerE1NHX3Qqlz+iUlWgH6/25U SP/yMeWdqEaWU1/25ZQC2m6FL4sxfPJuEZkEs8DENzkBJTnSpIhD/FY+Vb9BBuIN c7ikHMXaHTzFnhwvrsIAxNkXZgVjnA6Zgj3lG2UCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTUZgQQQgemSEV+7A2i7nRz53vUrDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMzFhOTE0NTMtYTkyNC00NGUxLWJjYTYtOTA1MDg5YWEzNTkyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADRexTANBgkqhkiG9w0BAQsFAAOCAQEAHJGBO+1xwdguSlW27gnGSmPOMEI8 Ll8yyWuNaOhgTTmsXjtjNr/FshJVJMHPvuxFwp90HAkjAhcf5vN3rcO+8zqy6eXk +Ne0k7GMaeV+hxLFGnmDGKeVOA9H5osyF51F8S15QNhQbGfgbf9t056aNNRjUVa0 DdL5SBNJwuWgAcox74R36Sc1SRlEGW1G7dwauQ34mAxjYv28edHb37ZuiNs8mQxZ vuDQwe2/++x978uemS3A4ltJ5aBKJUXAHvnZ8fmu2Pubs7t8xuHaQdDM/0FC9OKn aKQOw5vKmn/Q2jzxpyuegAXz9t0N4cw2fJiHx9u1finnw7yCQL8SzPnOzw== -----END CERTIFICATE-----Generated at Sun Jun 29 07:19:12 2025 by rpki-client