
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5df2a928-96d7-40de-aef9-cc18858ee87d.roa
File: 5df2a928-96d7-40de-aef9-cc18858ee87d.roa (raw, json)
Hash identifier: SoeOuiI6kmlpHysUxeBG9hEZ7Azkl4Zvlgi4yk5+VJQ=
Subject key identifier: D9:D9:83:92:9A:61:05:EA:CA:13:20:BC:4E:A3:FA:FD:5F:FA:9F:DC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7C522BC68F3418A0D2297B9B178838A3F23FE659
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5df2a928-96d7-40de-aef9-cc18858ee87d.roa
Signing time: Thu 30 Oct 2025 00:06:46 +0000
ROA not before: Thu 30 Oct 2025 00:06:46 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.46.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:52:2b:c6:8f:34:18:a0:d2:29:7b:9b:17:88:38:a3:f2:3f:e6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 30 00:06:46 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=948b5a8076f68778233d8b97c1255ed56a5f6c37bd10026d9fafbc92c0231037, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:dd:f8:8d:2a:e2:f7:0b:23:9c:a4:ca:f7:
3f:e0:73:3a:94:74:b2:8b:6e:3f:10:04:48:ae:0f:
cb:31:70:24:3b:cf:ea:e8:59:d9:9b:56:49:e3:bb:
fa:b6:5d:08:e1:d7:fb:b0:09:50:d5:05:27:1c:24:
58:95:93:30:d9:2b:24:cc:1f:a9:f1:08:82:d6:33:
52:39:d5:77:17:78:d1:81:e0:4a:dc:c8:af:07:cf:
aa:81:54:a6:16:44:7c:53:45:34:35:c3:18:09:94:
94:83:0c:ed:98:e9:11:78:08:ee:42:fb:be:ca:fe:
2b:83:6a:11:31:ae:25:00:91:cd:18:88:1f:73:9d:
81:96:16:52:f5:7a:c1:e7:95:09:f2:69:cf:aa:51:
e1:4d:2c:e6:36:ba:56:df:77:c4:91:db:4c:ef:ae:
28:37:73:9c:89:72:c2:9e:09:6e:97:b9:1b:e6:3c:
85:da:64:ee:97:89:98:01:d6:86:46:2a:50:ca:97:
4c:c8:0a:c1:46:16:83:e9:d8:86:31:37:2c:a9:77:
e1:66:3b:66:0a:9e:98:94:df:43:53:95:1d:41:bc:
c3:d8:75:2f:02:0b:95:1e:46:38:3c:3f:89:93:45:
c9:0f:3f:f5:9e:e4:60:5d:b3:4e:ab:ba:91:09:29:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:83:92:9A:61:05:EA:CA:13:20:BC:4E:A3:FA:FD:5F:FA:9F:DC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5df2a928-96d7-40de-aef9-cc18858ee87d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.46.16.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:a3:dd:00:f6:80:c5:19:42:91:01:2e:93:fd:dc:97:f5:74:
02:2f:fc:a6:64:c3:3f:74:05:fe:99:c5:3d:98:5d:7b:7c:ed:
85:92:87:7e:49:c4:31:c8:a3:1a:53:3c:1e:23:e6:fc:ae:28:
24:b6:13:0a:27:8e:3b:9d:72:61:e2:9d:ab:93:a8:af:65:78:
47:04:03:e3:47:0c:54:76:d8:98:62:c2:57:d9:07:48:02:ea:
ea:92:d8:3c:b1:0e:b9:79:2c:83:88:64:34:dd:91:aa:43:66:
35:da:2e:17:ae:17:17:27:5e:b5:6b:39:01:96:0a:83:c5:25:
48:f1:1c:87:d0:02:f6:39:97:dd:72:fb:72:f1:82:fb:3b:7f:
1e:97:4f:b5:21:ad:b2:5a:1e:55:14:ed:59:a6:e9:16:18:45:
9b:a9:f8:d7:88:47:7c:9a:11:61:ff:65:1f:90:a7:67:85:f1:
cd:54:3d:18:e9:ee:88:db:0e:40:c2:c6:70:22:20:8d:2c:3e:
91:88:3f:67:a8:7f:59:7f:08:99:3e:cb:f6:c4:3d:0f:3e:3f:
fe:22:68:5a:aa:4a:3a:04:0f:1d:91:5e:60:c4:38:8f:cf:d7:
59:28:e0:38:28:86:00:23:db:97:1b:a1:7c:b8:b9:7d:28:a3:
91:a3:df:fa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfFIrxo80GKDSKXubF4g4o/I/5lkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMwMDAwNjQ2WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDhiNWE4MDc2ZjY4Nzc4MjMzZDhiOTdjMTI1NWVkNTZh
NWY2YzM3YmQxMDAyNmQ5ZmFmYmM5MmMwMjMxMDM3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChrt34jSri9wsjnKTK9z/gczqUdLKLbj8QBEiuD8sxcCQ7
z+roWdmbVknju/q2XQjh1/uwCVDVBSccJFiVkzDZKyTMH6nxCILWM1I51XcXeNGB
4ErcyK8Hz6qBVKYWRHxTRTQ1wxgJlJSDDO2Y6RF4CO5C+77K/iuDahExriUAkc0Y
iB9znYGWFlL1esHnlQnyac+qUeFNLOY2ulbfd8SR20zvrig3c5yJcsKeCW6XuRvm
PIXaZO6XiZgB1oZGKlDKl0zICsFGFoPp2IYxNyypd+FmO2YKnpiU30NTlR1BvMPY
dS8CC5UeRjg8P4mTRckPP/We5GBds06rupEJKcBDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2dmDkpphBerKEyC8TqP6/V/6n9wwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzVkZjJhOTI4LTk2ZDctNDBkZS1hZWY5LWNjMTg4NThlZTg3ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAE0LhAwDQYJKoZIhvcNAQELBQADggEBAByj3QD2gMUZQpEBLpP93Jf1dAIv
/KZkwz90Bf6ZxT2YXXt87YWSh35JxDHIoxpTPB4j5vyuKCS2EwonjjudcmHinauT
qK9leEcEA+NHDFR22JhiwlfZB0gC6uqS2DyxDrl5LIOIZDTdkapDZjXaLheuFxcn
XrVrOQGWCoPFJUjxHIfQAvY5l91y+3Lxgvs7fx6XT7UhrbJaHlUU7Vmm6RYYRZup
+NeIR3yaEWH/ZR+Qp2eF8c1UPRjp7ojbDkDCxnAiII0sPpGIP2eof1l/CJk+y/bE
PQ8+P/4iaFqqSjoEDx2RXmDEOI/P11ko4DgohgAj25cboXy4uX0oo5Gj3/o=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:42:18 2025 by rpki-client