
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e02ab7-bd82-472f-8b7f-770a4796eff5.roa
File: 29e02ab7-bd82-472f-8b7f-770a4796eff5.roa (raw, json)
Hash identifier: WjnNlNo67CeYcFvmia/yPzxaaWB8eVQS8GqJX/gBOkY=
Subject key identifier: 48:71:C6:28:8D:3B:05:95:1F:E9:5B:5A:28:02:A2:9B:AC:4C:C2:96
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 357406537DD62131155C9DA0E9A3AA8547A4AB0B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e02ab7-bd82-472f-8b7f-770a4796eff5.roa
Signing time: Tue 04 Nov 2025 01:21:49 +0000
ROA not before: Tue 04 Nov 2025 01:21:49 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:74:06:53:7d:d6:21:31:15:5c:9d:a0:e9:a3:aa:85:47:a4:ab:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 4 01:21:49 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=19a33df87490e46354a70e6d075b990dc75e24f67a647f4ec98781e1b4c8ce50, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:6a:ab:8a:94:7c:cb:df:2b:8c:9f:9c:b5:
d6:d0:c2:2a:a1:7d:85:7e:62:d1:bd:06:d6:1d:8a:
88:10:b1:ed:34:e8:96:2a:5e:ec:af:d7:b0:27:37:
3c:42:0f:43:be:6d:53:d9:8b:6f:ea:6a:9d:92:44:
5d:8c:fb:4f:61:50:1d:b8:08:7e:67:b5:13:2f:9c:
7d:2e:24:d3:42:f1:23:5a:23:a7:3b:3c:b6:e0:5d:
f1:72:7b:79:87:25:d9:60:5e:4b:f0:37:00:e8:b6:
04:1f:06:cf:70:36:5c:2b:43:5f:b4:17:e4:e7:13:
c5:b1:d3:8b:2f:9f:59:17:ea:22:0d:34:8b:36:4f:
7e:8d:e5:78:2a:e7:59:77:bb:d3:89:8f:d2:05:c3:
f3:10:e4:1a:14:ee:66:75:1c:25:d9:61:41:29:99:
1d:1c:e9:6a:7d:98:b1:64:7c:8c:32:93:d2:af:43:
d6:60:4e:df:3d:31:05:0e:a3:98:40:14:5f:75:51:
6e:32:ff:74:df:f0:79:78:d6:d5:1f:23:10:8c:2a:
98:61:bf:86:cb:1c:73:5b:b6:f6:68:94:1d:42:ce:
23:d7:52:b7:e2:81:e4:bd:74:b4:1b:9c:a1:79:65:
2e:27:3e:e9:a3:17:56:54:26:26:b9:44:b2:a0:8d:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:71:C6:28:8D:3B:05:95:1F:E9:5B:5A:28:02:A2:9B:AC:4C:C2:96
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e02ab7-bd82-472f-8b7f-770a4796eff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fa:42:9a:d2:4e:84:45:95:91:f6:eb:7a:55:7a:07:6b:45:
5b:34:72:1b:9a:6c:b1:48:9c:c9:07:ee:cc:ec:d9:37:7c:ec:
fd:78:44:35:8e:d4:c0:78:c0:64:f5:65:2c:6c:43:69:43:9f:
e2:77:de:c2:e4:c6:76:a0:f6:7a:85:1f:3c:f2:3b:93:83:fd:
84:a8:79:c4:ae:40:16:4d:dd:1d:32:6a:40:51:64:a8:ec:6a:
cd:2b:fe:b8:15:f6:fe:e2:85:0a:18:de:1b:5a:9b:f2:19:ff:
68:cd:70:40:45:ec:2c:1a:d2:a1:65:91:bb:f1:3d:9e:f7:23:
6a:98:3c:ab:86:f0:62:97:01:aa:e5:eb:3a:92:c0:52:9a:83:
3e:e3:3d:6a:d5:ec:02:78:63:ef:cc:01:60:20:a8:5f:a5:fb:
a7:db:0f:5a:55:1b:5a:ce:90:79:ef:7f:a0:87:6b:4e:6e:a8:
d2:74:40:de:d1:ef:1a:72:79:85:51:b8:c9:c6:84:aa:7e:dd:
08:e6:89:dd:e2:0b:5d:bb:da:a3:dc:40:af:c8:f2:0d:1d:50:
b6:c9:9c:1b:34:33:f4:1b:9a:d0:a2:4b:b3:ff:f4:b3:2b:34:
fc:7b:c7:c4:4c:b3:06:29:43:8e:74:1b:0d:2b:5f:a0:03:31:
4c:2d:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:27:31 2025 by rpki-client