
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52d854b0-9bc6-4e7f-ac64-b57c283eae70.roa
File: 52d854b0-9bc6-4e7f-ac64-b57c283eae70.roa (raw, json)
Hash identifier: 63kYuX8PTXWfmyBrY78S0eyysIJnagM+KW9wgot319A=
Subject key identifier: 39:27:52:CC:B7:E4:97:C3:0B:C5:7C:89:20:80:6A:98:5A:E6:49:84
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2E5CD4301858F34E64852D03E306CAF471256E34
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52d854b0-9bc6-4e7f-ac64-b57c283eae70.roa
Signing time: Fri 24 Oct 2025 00:01:17 +0000
ROA not before: Fri 24 Oct 2025 00:01:17 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.220.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5c:d4:30:18:58:f3:4e:64:85:2d:03:e3:06:ca:f4:71:25:6e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 24 00:01:17 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=081fbbad48c8775f9be5aa7434753157559e7ade6aedfe2becf54015d986eb49, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:a1:f4:cc:48:e5:29:b4:44:29:2d:e2:9d:
59:91:de:11:5e:78:0d:fe:3b:88:11:a6:47:2d:1b:
75:a0:c7:5d:1a:1d:f9:9a:5a:fa:26:d3:75:66:ce:
5d:28:2a:40:e8:f3:04:34:f5:ca:0b:36:cf:82:ed:
d0:04:0c:29:cb:23:cf:a5:19:8e:fa:7e:32:32:c1:
85:2d:32:04:57:35:b2:83:29:8e:0a:f3:b2:b0:5b:
cf:27:24:57:6f:df:59:a6:5c:2a:e5:8a:3a:e2:b0:
2b:12:2b:2e:18:15:79:89:8e:58:3e:ec:0b:cd:d2:
c8:3a:17:33:d0:70:c8:be:32:eb:74:fc:92:38:08:
36:d1:ec:51:27:3d:1e:36:a8:02:ac:0c:af:f9:6d:
62:1d:f8:65:d0:d5:91:57:00:ef:e6:ae:37:70:00:
6c:a8:85:3e:47:33:a8:09:af:27:c3:17:51:25:85:
ad:9c:a2:ab:d0:8e:5f:e4:a1:91:01:00:94:9f:99:
d1:e7:91:cf:4c:ac:a6:1c:0b:29:ec:81:11:db:1b:
e2:be:3c:b1:94:ac:aa:29:cb:ea:dd:16:fc:d9:32:
a8:90:26:fa:d4:31:a2:e7:31:cb:66:96:68:5b:96:
e4:c7:86:e3:fa:45:3a:14:54:06:74:c0:35:11:0c:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:27:52:CC:B7:E4:97:C3:0B:C5:7C:89:20:80:6A:98:5A:E6:49:84
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52d854b0-9bc6-4e7f-ac64-b57c283eae70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.220.36.0/23
Signature Algorithm: sha256WithRSAEncryption
22:fc:5c:cd:42:fb:c2:83:eb:00:77:de:b6:3f:46:28:d1:fd:
3b:be:83:50:d2:1e:51:bc:78:9a:c9:49:18:59:54:85:ed:71:
0e:9f:73:e9:70:bc:7d:81:63:1f:e1:fd:94:81:66:7d:30:a7:
34:5c:71:4c:b6:fc:52:6f:f4:d2:27:70:5b:28:ad:ed:be:9a:
83:0c:91:3f:95:76:4e:64:87:b9:f5:fb:3c:ab:23:92:46:c4:
39:01:5d:64:41:da:b2:01:43:58:84:be:53:bc:12:d6:d9:7a:
3d:80:e0:c6:49:66:e1:c8:50:90:1f:9b:28:0e:1d:c1:b6:1e:
2f:52:bc:a3:ed:97:4a:f1:a7:b5:ac:60:e8:c7:83:8a:90:cd:
d1:4e:cb:86:a2:8d:22:97:ca:52:12:24:bc:08:61:8c:b9:ca:
f9:9c:21:bb:57:13:bc:12:29:a9:67:b8:8e:3a:e1:36:e5:0c:
05:17:6a:32:7f:6d:50:93:fe:18:ff:30:92:8b:99:b6:df:74:
9e:18:63:ac:d9:9b:67:88:15:5f:75:b9:75:96:6f:49:16:3e:
e4:95:44:4b:8c:73:5d:0a:74:e6:7e:14:42:02:34:71:e4:2a:
ef:9c:52:52:da:04:79:28:7b:69:88:12:a5:f8:bd:7e:41:1e:
de:83:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:27:30 2025 by rpki-client