
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d37a0e2-9497-4664-ac8e-d9b71e8e44a6.roa
File: 0d37a0e2-9497-4664-ac8e-d9b71e8e44a6.roa (raw, json)
Hash identifier: u+MIdOa1JbGw7+xUzcIgJmiwlu/+EoeZZhMg48Yj1Ys=
Subject key identifier: 14:7E:89:F2:F3:8C:3C:CD:1E:84:59:FA:AB:66:C7:FF:68:6C:E8:2A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 31224A060409B12631C541B790E9AEA29FD63D0F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d37a0e2-9497-4664-ac8e-d9b71e8e44a6.roa
Signing time: Tue 21 Oct 2025 02:32:55 +0000
ROA not before: Tue 21 Oct 2025 02:32:55 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.174.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:22:4a:06:04:09:b1:26:31:c5:41:b7:90:e9:ae:a2:9f:d6:3d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 02:32:55 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=4a3cf6a4b50b1eb2b5233c4c76cd3568117ecd6b0d5cac3f425fa4304b65e449, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ce:74:0c:64:51:2b:20:0a:ce:89:24:3c:10:
10:7f:2a:86:02:4c:ee:63:87:29:81:13:e6:5e:3f:
f9:ac:4e:6a:94:61:70:d8:51:a6:0c:b3:a7:b7:89:
a3:21:4b:91:d8:61:19:fe:d0:91:22:97:56:3e:ae:
99:89:00:63:7e:74:50:2d:3c:21:c4:22:eb:4b:36:
15:b5:58:da:da:39:8b:ce:9e:08:21:98:c0:7b:74:
c0:86:6a:66:de:9a:f5:5d:4c:c0:be:6f:a6:4b:d2:
df:51:dc:19:99:30:b0:00:3a:28:9e:52:b6:55:48:
29:23:f3:e7:fc:f2:0f:3e:d4:a0:2e:ec:26:bc:71:
f5:f1:0b:c9:eb:5b:d8:35:72:5d:ec:5e:03:c9:9c:
e8:c7:09:bd:7a:63:59:40:e3:e3:48:79:12:6e:1b:
08:d4:a1:51:04:09:e6:33:d1:01:df:2f:1e:09:dc:
1f:3d:58:f3:b2:b3:88:d0:78:0a:ed:42:8d:73:10:
4e:23:c6:a2:e3:7d:de:55:d3:d1:17:2d:f1:c6:0e:
32:a3:91:2a:b0:e1:f5:d7:53:cb:3b:ee:b7:ed:26:
40:cd:f7:dc:9a:ee:84:12:f9:46:d8:ac:b9:3c:aa:
db:32:6a:c4:b4:05:34:4e:35:5f:ae:64:64:2f:a1:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7E:89:F2:F3:8C:3C:CD:1E:84:59:FA:AB:66:C7:FF:68:6C:E8:2A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d37a0e2-9497-4664-ac8e-d9b71e8e44a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.174.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:91:97:52:94:66:c3:ba:93:18:3a:fa:eb:e1:4d:be:66:93:
5c:af:d4:11:28:5b:ac:20:d4:40:37:94:ba:8b:f8:df:1a:5a:
8c:1d:5a:72:62:38:c9:f0:28:58:9d:f6:bf:bb:19:93:1e:ae:
82:e7:7e:54:b8:d7:d6:2f:5d:ae:4c:29:0a:eb:db:e0:db:47:
f7:6f:4f:36:a2:ba:7a:3d:e1:40:9e:55:6f:c1:f5:59:bb:66:
c6:3f:74:31:e3:69:f4:a9:47:2a:5f:43:a2:d2:bf:7c:2b:c0:
a9:15:e3:c3:e1:13:9e:27:11:5d:82:5a:1a:ae:f4:5a:fa:0c:
6a:ac:26:1f:00:9f:cb:5c:46:40:0f:2f:b3:90:38:75:2e:e0:
29:42:64:30:b1:2a:85:a0:13:19:9a:90:e1:41:96:c2:b5:5d:
4a:24:1b:6c:20:6a:54:49:45:13:01:d7:7f:b6:d2:53:91:46:
7c:92:e9:90:58:4b:6c:20:9e:b2:35:53:1c:63:95:20:c9:cf:
ba:75:8c:ed:39:ec:e6:3e:f7:2e:91:d8:90:10:e7:54:2d:2c:
45:9c:8b:f1:c6:b6:ad:cb:bc:e8:59:24:65:ff:bd:d2:07:84:
03:3f:88:57:1b:55:b3:8e:28:e0:18:43:95:da:43:57:79:6d:
54:7e:b4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:05:36 2025 by rpki-client