$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa908f7e-f646-465f-9824-601881e9e7c0.roa File: aa908f7e-f646-465f-9824-601881e9e7c0.roa (raw, json) Hash identifier: aYnSyjMtpVxDkauK8BPwC+ZO9li9XInPedWwUDswmao= Subject key identifier: 0D:E7:AE:79:45:2E:F2:C8:68:3B:50:2F:5F:E1:A3:32:2E:05:B2:A6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 739292B203B68382522B8F912971092AE5788758 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa908f7e-f646-465f-9824-601881e9e7c0.roa Signing time: Thu 25 Sep 2025 19:24:39 +0000 ROA not before: Thu 25 Sep 2025 19:24:39 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:92:92:b2:03:b6:83:82:52:2b:8f:91:29:71:09:2a:e5:78:87:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:24:39 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=23e8ca2f374b197fbfeeea17e84b007a161089bd72500b451da8c374096de53f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bf:18:72:81:9f:97:0a:83:7e:6e:aa:74:1f: 85:e4:de:9c:07:ca:54:e3:14:90:32:3a:b7:5e:bf: 95:51:92:bf:35:54:ef:ef:18:b9:07:2b:37:5a:aa: d4:41:0b:d3:88:b3:a2:31:18:40:69:38:7f:60:be: 39:e2:36:b8:5f:71:99:52:ac:20:38:4b:3a:b1:c7: 8d:14:11:1b:91:3c:8c:52:9e:40:e3:32:f9:08:16: 99:0c:d4:c1:c7:be:82:15:d2:53:fb:b9:bc:4c:ec: fc:c3:91:36:a2:27:13:b3:b8:41:a3:13:91:cd:8f: e2:fe:37:c6:b3:e8:30:31:14:e1:8c:c5:09:f2:4e: f0:7b:5e:c2:a7:ea:79:ec:f7:71:e1:ad:38:bc:c9: c8:23:5e:71:bd:4b:3b:82:b5:fa:e1:3d:a3:35:99: 40:fb:f6:b2:10:65:20:34:36:54:58:64:71:bb:8d: b7:f7:12:aa:d2:33:6f:7d:21:c5:f1:32:af:bd:ce: 32:27:fe:b5:03:03:43:a1:e9:f6:0f:8f:a8:7c:5d: ae:42:e3:60:95:f8:69:91:4a:5f:c1:d1:73:de:e0: 9b:40:06:9c:47:b3:59:49:f5:7f:8a:09:bd:36:bd: e7:c2:d9:06:91:0e:15:62:ee:8a:c1:76:ad:64:44: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E7:AE:79:45:2E:F2:C8:68:3B:50:2F:5F:E1:A3:32:2E:05:B2:A6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa908f7e-f646-465f-9824-601881e9e7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.72.0/24 Signature Algorithm: sha256WithRSAEncryption 79:9f:57:95:f6:f3:31:d0:a2:a6:b0:81:5b:9d:f4:4e:53:d1: 2b:d3:a4:19:ca:de:f0:f2:a2:ef:ea:0e:05:e7:38:d9:a4:ef: 9c:49:ae:56:00:11:17:37:14:13:5a:9a:54:b0:80:ce:a7:8b: 8c:77:2a:a6:65:0a:58:65:8b:58:d0:ac:bb:17:90:7c:ea:3d: e3:07:21:0f:cd:3d:40:71:cb:63:50:15:f2:45:e5:5b:9e:6c: cd:c0:4c:24:77:3a:d8:84:a8:eb:2a:ee:85:db:1f:ce:e3:71: 16:0d:c5:43:d3:06:6f:f4:28:2f:e0:84:0d:7e:a3:da:b6:83: 6a:0b:53:f9:cd:3b:49:8a:b9:46:44:e8:b3:73:0c:11:3f:3e: 49:c2:a2:82:02:e7:a7:75:4a:58:9e:9c:51:0c:22:1e:bb:52: a1:66:da:8d:54:fb:b3:d9:1f:ab:52:43:b8:9e:9e:88:0e:e9: 78:9e:f7:d6:0d:a4:35:27:c3:66:b5:e3:63:9d:63:e7:99:f4: 3c:6a:4e:ab:34:44:33:6b:e0:2d:5a:1b:27:61:97:10:99:b7: e5:56:a8:f7:7a:4f:7d:65:3a:6d:83:bc:f4:e4:c9:90:37:cb: f1:66:2d:fc:3b:e5:a5:e1:92:7a:49:34:9d:48:58:2d:5c:e1: 2f:09:2d:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc5KSsgO2g4JSK4+RKXEJKuV4h1gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkyNDM5WhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2U4Y2EyZjM3NGIxOTdmYmZlZWVhMTdlODRiMDA3YTE2 MTA4OWJkNzI1MDBiNDUxZGE4YzM3NDA5NmRlNTNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMvxhygZ+XCoN+bqp0H4Xk3pwHylTjFJAyOrdev5VRkr81 VO/vGLkHKzdaqtRBC9OIs6IxGEBpOH9gvjniNrhfcZlSrCA4Szqxx40UERuRPIxS nkDjMvkIFpkM1MHHvoIV0lP7ubxM7PzDkTaiJxOzuEGjE5HNj+L+N8az6DAxFOGM xQnyTvB7XsKn6nns93HhrTi8ycgjXnG9SzuCtfrhPaM1mUD79rIQZSA0NlRYZHG7 jbf3EqrSM299IcXxMq+9zjIn/rUDA0Oh6fYPj6h8Xa5C42CV+GmRSl/B0XPe4JtA BpxHs1lJ9X+KCb02vefC2QaRDhVi7orBdq1kRA+vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDeeueUUu8shoO1AvX+GjMi4FsqYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhOTA4ZjdlLWY2NDYtNDY1Zi05ODI0LTYwMTg4MWU5ZTdjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqEgwDQYJKoZIhvcNAQELBQADggEBAHmfV5X28zHQoqawgVud9E5T0SvT pBnK3vDyou/qDgXnONmk75xJrlYAERc3FBNamlSwgM6ni4x3KqZlClhli1jQrLsX kHzqPeMHIQ/NPUBxy2NQFfJF5VuebM3ATCR3OtiEqOsq7oXbH87jcRYNxUPTBm/0 KC/ghA1+o9q2g2oLU/nNO0mKuUZE6LNzDBE/PknCooIC56d1SlienFEMIh67UqFm 2o1U+7PZH6tSQ7ienogO6Xie99YNpDUnw2a142OdY+eZ9DxqTqs0RDNr4C1aGydh lxCZt+VWqPd6T31lOm2DvPTkyZA3y/FmLfw75aXhknpJNJ1IWC1c4S8JLSU= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:55 2025 by rpki-client