
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
File: e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa (raw, json)
Hash identifier: ZkefGUxlAnzTUlj9vJ6yHh3ZvktjchimiZMfLPxljnM=
Subject key identifier: 7E:3F:DA:5A:62:55:F2:1C:F4:49:4D:24:20:5C:B4:63:2D:95:D8:52
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 54B9DC496810DA7233CA6FAA4043CB25535C1570
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
Signing time: Tue 21 Oct 2025 00:10:03 +0000
ROA not before: Tue 21 Oct 2025 00:10:03 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b9:dc:49:68:10:da:72:33:ca:6f:aa:40:43:cb:25:53:5c:15:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Oct 21 00:10:03 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=c77eba7985c23c180166ac91d8d8c93bca7c14dc0abbbae0ec51f9b5d52a9355, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:da:d8:e2:b3:49:6e:19:08:88:84:78:88:
53:c8:59:d8:ce:a2:27:a5:22:c9:aa:8d:eb:54:d5:
db:d2:d4:d2:21:28:c2:ff:02:0f:98:91:cb:c3:0b:
d5:4c:b4:5f:b8:c3:87:0e:34:54:fd:b3:7b:30:45:
74:45:48:fb:f3:a9:74:30:5c:4a:c8:d3:be:73:64:
80:cd:f7:2e:3c:dd:2e:62:40:15:72:54:ac:a9:da:
2d:36:78:0e:63:59:48:a4:6f:dc:72:f8:0e:07:c1:
10:a6:6d:81:55:66:39:de:5c:93:74:3b:8e:2f:66:
5b:a4:3d:98:37:57:79:7e:57:ab:10:b7:b9:8a:4e:
fa:c7:c5:e4:c2:66:c3:e1:cd:8a:0c:92:70:7a:e7:
d2:d2:b4:98:80:4e:df:ab:06:2a:93:8e:a6:58:b4:
25:2d:52:6c:7a:7c:5c:89:ba:5d:60:68:db:cc:ed:
16:9a:e3:1f:af:42:a1:c0:cd:75:d6:05:73:5e:54:
6a:28:97:fd:75:dc:30:28:39:42:0a:20:91:92:ca:
e6:0d:f5:15:1b:de:bc:38:0d:d7:0a:9b:4c:17:a5:
6a:09:f0:f6:21:f1:1a:0b:97:92:f1:49:53:e4:b4:
7c:62:96:b7:98:f4:38:57:cf:97:47:1e:4a:8c:cb:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:DA:5A:62:55:F2:1C:F4:49:4D:24:20:5C:B4:63:2D:95:D8:52
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/e3f8a237-5d8b-4d61-abc8-c129192fb7c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5f:6d:5a:54:14:75:fe:e1:bd:e0:f6:64:91:42:d5:de:19:78:
1b:a9:21:1f:32:9f:3d:cb:b0:48:78:6c:e4:d2:8d:7b:b4:dc:
62:94:c2:65:99:7b:02:75:2b:4b:7f:75:3b:7a:d7:e6:24:49:
04:61:b4:dd:0e:4a:9d:24:b6:a8:32:47:fc:97:b4:47:6b:34:
bc:f0:3a:a3:d0:55:73:c5:f0:c5:62:75:05:26:a6:41:d3:74:
ea:af:53:0a:8d:56:be:e0:31:c6:f2:ad:45:ee:c6:80:aa:9e:
13:20:6b:e0:25:52:8b:06:8a:fa:55:f1:c2:ec:f4:98:84:34:
ce:fd:20:a8:8a:8e:8d:53:4b:f7:93:93:83:1d:1f:88:8a:fc:
4e:60:1a:6c:71:07:13:f0:52:bd:51:22:b7:82:ce:18:1f:19:
84:35:44:54:b9:34:4a:3f:fa:34:6b:dc:d5:70:c2:d7:9d:38:
94:bb:ec:99:ff:f5:49:58:98:66:13:24:83:f0:98:d8:b9:57:
78:c8:f2:b6:da:77:22:11:9c:f0:b0:ae:0c:36:fc:20:45:df:
f5:ce:64:ee:43:6c:8e:1b:9b:ca:f7:68:bb:e5:5e:16:4d:d9:
5f:04:45:37:4f:56:83:1e:4e:fb:d6:b1:c4:1f:80:93:44:a7:
81:07:9a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:29 2025 by rpki-client