
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37c1aa0e-64c5-4c09-b85f-6bdc6b19db00.roa
File: 37c1aa0e-64c5-4c09-b85f-6bdc6b19db00.roa (raw, json)
Hash identifier: SlE9IS3YJShhtHWlEhB4PEGAZkE61oM5cEPsTptH8eA=
Subject key identifier: 2D:E4:9C:B9:43:6E:A9:CD:69:C6:4E:D2:92:F6:60:00:F8:3C:C8:E2
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0DC2B85580418CFAAD93CAF12BF52C6DF0784E69
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37c1aa0e-64c5-4c09-b85f-6bdc6b19db00.roa
Signing time: Fri 17 Oct 2025 22:42:09 +0000
ROA not before: Fri 17 Oct 2025 22:42:09 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c2:b8:55:80:41:8c:fa:ad:93:ca:f1:2b:f5:2c:6d:f0:78:4e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 17 22:42:09 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=8ae2641810b270bff98fca7cb24598ded78fb3d0055d84fa011faf4713ce7519, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:04:32:ce:ed:c4:cb:e1:45:a7:f6:94:09:
2c:50:cc:ef:6c:43:d5:68:1f:c6:c3:29:37:53:eb:
c3:38:19:69:f8:e0:a6:22:db:0c:2b:fb:be:d0:81:
a0:76:2a:b4:b8:1f:87:fd:ac:10:90:68:23:3c:8f:
57:41:dc:a2:74:eb:42:23:65:01:17:c3:dd:9f:64:
f9:f2:e0:b4:73:aa:92:6d:35:5d:cd:1c:99:81:6c:
db:ab:b0:5d:ba:dc:df:29:bd:8c:0c:95:f2:27:04:
2f:b4:f7:3d:9e:75:75:13:15:59:f0:d0:a8:02:a5:
c4:4d:98:2e:f5:e8:1f:3b:d3:ae:79:74:0f:60:46:
26:0f:90:31:6b:62:a1:79:d7:ed:a2:cb:39:46:2d:
56:c6:f8:62:81:c7:e3:fa:c4:7b:dd:b8:c1:b3:55:
2f:71:2e:84:ce:84:1e:6b:25:43:ca:60:ec:a0:4a:
a5:40:8f:ad:4f:1c:70:f8:c5:77:9d:8c:13:ab:d6:
6d:0e:cb:d0:40:0b:91:65:01:26:ad:a2:77:aa:65:
10:c7:85:f5:b0:41:0d:68:fe:d6:9a:39:da:5a:be:
df:8d:05:2e:06:12:24:71:a9:de:50:95:9f:05:c2:
08:63:df:d2:cb:23:6e:af:56:9d:f4:76:51:58:96:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E4:9C:B9:43:6E:A9:CD:69:C6:4E:D2:92:F6:60:00:F8:3C:C8:E2
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37c1aa0e-64c5-4c09-b85f-6bdc6b19db00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.82.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:28:33:55:b7:62:c3:26:81:72:8e:ff:24:f4:bb:2d:6d:62:
0b:92:8f:8a:61:96:e4:19:ee:03:82:dd:87:e5:1b:0a:45:2c:
d3:7e:f7:26:47:84:dc:a4:59:71:2c:72:56:85:5b:19:b9:b8:
28:0b:d9:9d:18:46:b7:9c:2f:28:c6:0b:ae:a1:c2:bc:ea:f9:
f2:3f:77:74:52:68:a3:5e:94:dd:eb:e7:de:48:62:b5:90:1e:
07:77:d8:b1:4d:a9:d7:a5:e8:ef:34:1d:47:07:f5:fc:d0:76:
72:13:c8:0f:5b:30:54:5c:58:40:a4:03:91:f4:1a:8f:1f:0d:
f3:94:08:46:7f:3c:c5:0d:20:2e:fa:86:27:77:c4:f8:4b:ef:
80:7c:ec:e6:94:cb:a3:d8:71:9b:f7:f8:20:39:66:4b:e9:7e:
75:b4:e3:4f:b5:21:c7:ee:a0:b7:57:03:3d:46:16:58:b5:52:
72:cd:db:25:16:a4:29:71:1e:08:6d:c9:d9:4b:e0:c5:17:5c:
a1:78:a1:9f:8a:58:a5:74:ed:55:0a:22:49:5d:4b:f7:bd:db:
41:56:a0:ce:e1:f8:d9:c7:2f:33:c6:8b:05:f4:b1:e5:4c:dd:
29:a3:cd:66:c2:e2:d9:03:fc:05:76:08:ed:cd:7b:09:d7:b0:
bc:31:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:44 2025 by rpki-client