
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e5a6344-7cba-4d5c-b965-f4971532d4bb.roa
File: 1e5a6344-7cba-4d5c-b965-f4971532d4bb.roa (raw, json)
Hash identifier: 8NIGyZa2A7LgN0Fuo+3a3039KAztSJsDQ1Fft7xj3ng=
Subject key identifier: F8:35:23:AF:4B:80:4D:79:A5:FD:61:D6:AF:0F:CB:69:7E:32:9F:22
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 156E4AF8F03117FA9E2EBB1F268EF7DCE427DE96
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e5a6344-7cba-4d5c-b965-f4971532d4bb.roa
Signing time: Tue 04 Nov 2025 00:51:05 +0000
ROA not before: Tue 04 Nov 2025 00:51:05 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.217.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6e:4a:f8:f0:31:17:fa:9e:2e:bb:1f:26:8e:f7:dc:e4:27:de:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 4 00:51:05 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=34a899ab63be86f465f1e800c81a3aab6ecce5f8cef5ccbd60b8a03324e811cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:28:95:3b:e8:7b:bb:08:e3:2b:10:83:75:
e6:0c:4f:c0:b7:2d:db:ae:54:95:b5:5e:f1:16:09:
83:75:79:01:29:54:06:e8:67:83:72:fc:f1:75:2f:
9a:eb:5d:8a:03:0f:bd:63:36:67:6b:5a:65:0f:e9:
da:25:8e:9b:ec:25:68:c6:1f:ac:c8:6c:38:69:4b:
5a:0f:15:2f:ba:e0:ad:6e:e6:fe:6f:29:7a:24:8b:
dd:2e:73:60:d8:d5:64:3d:94:e5:e0:cf:a7:d3:9b:
2a:ed:6d:f9:54:b3:b4:a4:eb:48:e1:e3:7c:32:5b:
b2:2b:eb:d9:ba:05:18:1a:c8:a5:bc:bc:20:3e:8d:
f4:9e:d3:88:68:c0:b4:ef:83:4d:4f:ff:72:26:fe:
c5:3c:5c:df:00:f8:35:c7:85:a9:ef:fa:b9:85:30:
34:36:39:21:8f:a3:28:65:7d:2b:90:96:6a:d4:2e:
5d:12:11:71:5d:3d:3e:a7:95:15:45:3f:16:10:c0:
9b:69:f2:e3:bf:8e:65:47:14:af:c1:40:f6:8c:ef:
05:3d:6e:d3:2d:5c:b3:f3:c0:f8:ce:ea:2f:55:41:
d9:6e:a0:4e:93:eb:bc:4c:10:67:86:cd:50:f4:59:
85:7f:2d:a9:3c:b7:29:f3:0c:57:c4:46:ff:99:5a:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:23:AF:4B:80:4D:79:A5:FD:61:D6:AF:0F:CB:69:7E:32:9F:22
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e5a6344-7cba-4d5c-b965-f4971532d4bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.217.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:46:29:94:d6:d5:d7:cf:f2:8b:30:ad:0e:c6:0f:32:23:a1:
63:61:20:f5:97:a2:9e:0e:ed:36:46:06:2e:49:35:2b:fa:54:
56:5e:ae:8f:56:db:3c:6e:11:71:8b:46:7e:19:ac:29:c4:35:
a0:d4:b2:4c:0b:0b:63:8d:75:21:57:52:24:fa:38:99:bb:f2:
eb:4b:c4:23:dd:f2:15:f6:46:30:9b:5f:48:f2:a6:a2:5b:f8:
91:d0:c7:c7:74:73:b3:da:65:5a:6d:36:c7:fc:f6:e9:29:e9:
7c:3d:7e:ec:77:db:f4:a3:dd:c1:27:f5:32:03:55:f7:aa:ec:
df:c2:4a:ad:47:f9:2f:db:dd:06:b3:85:20:67:9a:2b:f6:98:
24:c0:77:8e:db:30:37:6f:d4:c5:c9:8e:e2:da:23:a3:99:56:
ec:cb:7a:e1:56:54:fb:55:30:23:2c:d2:8d:75:94:ca:20:c7:
a3:37:c8:94:97:90:0c:ad:80:f8:0f:7d:8a:ea:0f:c8:12:e4:
26:1c:92:65:9f:9f:b9:dc:6a:d6:4c:cd:22:aa:7a:fc:0e:f6:
d1:54:3f:b2:e1:4d:ca:3d:ea:39:4c:39:f5:67:ea:62:d3:e4:
4e:ee:ba:f1:8f:43:de:d7:91:0a:1c:31:6c:7f:5c:b2:20:e1:
47:7f:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:15 2025 by rpki-client