$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90fd2cb5-a4cb-4352-acd5-0c3e7b066991.roa File: 90fd2cb5-a4cb-4352-acd5-0c3e7b066991.roa (raw, json) Hash identifier: yxrY1peiOZ3zKnexhlzepbwuYyGF33eFJYHdEWmr2fU= Subject key identifier: F7:E1:0F:F8:B2:9E:7A:5E:4E:CE:3F:53:D0:65:BE:A7:70:12:DF:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 42DD37BB32645E77D5A680E6988562BBAA9E5387 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90fd2cb5-a4cb-4352-acd5-0c3e7b066991.roa Signing time: Thu 25 Sep 2025 20:02:03 +0000 ROA not before: Thu 25 Sep 2025 20:02:03 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:dd:37:bb:32:64:5e:77:d5:a6:80:e6:98:85:62:bb:aa:9e:53:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 20:02:03 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=f1531d0598a69706f317fa5e98b90e384371ed6ff6f4ccaaac5f716b358af707, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:d5:82:ed:7b:2c:89:5b:1f:6e:a7:05:6f: d4:83:25:04:b7:eb:75:bb:a8:17:5d:7e:1d:94:fd: f4:cc:28:8a:e2:52:c6:39:b8:ab:4f:41:41:8b:95: 05:10:f6:5b:6c:02:04:46:8e:2c:ec:5f:17:8d:d7: 7d:68:a2:75:3e:c7:73:a6:0f:de:f8:70:4a:70:90: b7:f2:c5:1c:2f:59:0f:10:55:30:e7:2f:8f:b9:03: de:20:5e:c3:3f:0e:ac:be:7b:fc:b8:09:7e:32:58: d8:bd:07:0a:a0:16:c8:4e:f8:b2:d9:83:48:40:78: 7f:05:42:7b:41:0a:15:29:9a:f8:84:35:43:40:42: dc:cf:c0:8d:fd:ad:c9:a3:f4:8f:3a:f3:4d:41:f4: bb:5c:01:b0:c3:d2:bd:0d:e0:4a:73:63:b6:2e:86: 76:8d:cf:de:36:3b:90:de:d7:33:47:8f:7e:d8:74: 41:dd:35:0c:85:da:30:33:3a:bc:67:4c:15:6d:b0: ae:fa:d9:38:e1:2d:69:71:e3:41:a5:79:12:2e:e3: 98:25:b7:ef:10:cb:d4:52:e7:73:3e:09:e7:8a:20: ab:56:52:2e:14:9d:d2:97:15:27:3a:4a:cb:21:d5: e8:82:6c:c7:e5:4b:f6:a1:d7:6e:03:ac:0a:cc:f1: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:0F:F8:B2:9E:7A:5E:4E:CE:3F:53:D0:65:BE:A7:70:12:DF:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90fd2cb5-a4cb-4352-acd5-0c3e7b066991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.90.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:1e:02:b9:03:e8:0a:39:71:b8:14:3c:49:b6:66:6b:5b:64: 69:04:0e:33:bd:ec:71:04:93:85:84:60:cd:73:7a:37:2c:f9: 0e:eb:e2:b1:a4:0f:e8:99:74:f2:49:35:e6:a2:af:de:09:56: f4:51:4e:53:31:5c:78:5c:4b:50:15:a4:d1:40:87:9f:0e:0e: 29:48:ee:31:ab:db:17:7e:c3:92:73:98:2a:3a:8f:09:33:3c: 1d:51:c4:c5:25:4e:d4:06:19:fb:da:42:08:bb:ce:df:41:38: c8:19:5c:9b:01:35:58:ad:22:60:99:3c:80:6b:b7:6f:b1:d4: 2e:50:83:c7:62:bf:e9:f0:98:4e:1c:29:dd:c8:c9:be:a8:b2: d0:f7:f0:f3:01:86:36:20:5f:bd:df:1e:78:5f:b0:57:87:c9: c7:6f:91:a7:79:06:8e:41:e8:d2:d2:ab:39:5e:a0:71:67:d8: 69:03:b9:ba:78:8b:77:7d:4d:1a:98:72:29:e6:c1:3a:50:fd: e4:22:cc:cd:e8:44:44:2c:d8:32:d5:79:3d:8c:f7:75:d0:a4: bd:ad:3b:8d:d8:2d:4f:17:d3:c5:09:de:7e:24:50:8f:ed:e3: 8a:3e:ee:a7:00:d8:96:53:85:21:e0:9d:a1:58:18:58:5c:4b: 39:83:f1:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQt03uzJkXnfVpoDmmIViu6qeU4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MjAwMjAzWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTUzMWQwNTk4YTY5NzA2ZjMxN2ZhNWU5OGI5MGUzODQz NzFlZDZmZjZmNGNjYWFhYzVmNzE2YjM1OGFmNzA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWmtWC7XssiVsfbqcFb9SDJQS363W7qBddfh2U/fTMKIri UsY5uKtPQUGLlQUQ9ltsAgRGjizsXxeN131oonU+x3OmD974cEpwkLfyxRwvWQ8Q VTDnL4+5A94gXsM/Dqy+e/y4CX4yWNi9BwqgFshO+LLZg0hAeH8FQntBChUpmviE NUNAQtzPwI39rcmj9I86801B9LtcAbDD0r0N4EpzY7YuhnaNz942O5De1zNHj37Y dEHdNQyF2jAzOrxnTBVtsK762TjhLWlx40GleRIu45glt+8Qy9RS53M+CeeKIKtW Ui4UndKXFSc6Sssh1eiCbMflS/ah124DrArM8c1JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9+EP+LKeel5Ozj9T0GW+p3AS3/8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwZmQyY2I1LWE0Y2ItNDM1Mi1hY2Q1LTBjM2U3YjA2Njk5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqlowDQYJKoZIhvcNAQELBQADggEBAG4eArkD6Ao5cbgUPEm2ZmtbZGkE DjO97HEEk4WEYM1zejcs+Q7r4rGkD+iZdPJJNeair94JVvRRTlMxXHhcS1AVpNFA h58ODilI7jGr2xd+w5JzmCo6jwkzPB1RxMUlTtQGGfvaQgi7zt9BOMgZXJsBNVit ImCZPIBrt2+x1C5Qg8div+nwmE4cKd3Iyb6ostD38PMBhjYgX73fHnhfsFeHycdv kad5Bo5B6NLSqzleoHFn2GkDubp4i3d9TRqYcinmwTpQ/eQizM3oREQs2DLVeT2M 93XQpL2tO43YLU8X08UJ3n4kUI/t44o+7qcA2JZThSHgnaFYGFhcSzmD8UU= -----END CERTIFICATE-----Generated at Sat Oct 18 02:19:11 2025 by rpki-client