
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/831f0d82-fb6f-4c60-a3a3-f9a2d6b9afde.roa
File: 831f0d82-fb6f-4c60-a3a3-f9a2d6b9afde.roa (raw, json)
Hash identifier: hBIQDrCIrfkqrF8eqYGaGqXDulhYa+YDSq1MtNRwhjI=
Subject key identifier: FD:B6:A3:F7:4B:03:17:8C:7C:84:8E:1C:6E:B9:B1:9B:10:44:1A:E0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 31AC10C4F5CB30B01D893E6AC38DD59976ADB684
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/831f0d82-fb6f-4c60-a3a3-f9a2d6b9afde.roa
Signing time: Tue 28 Oct 2025 17:21:55 +0000
ROA not before: Tue 28 Oct 2025 17:21:55 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.164.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ac:10:c4:f5:cb:30:b0:1d:89:3e:6a:c3:8d:d5:99:76:ad:b6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 28 17:21:55 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=c3b43a45708592f6651afaa2d11dae0bc1d33de51474b2dfd6c98c0fefa55a65, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:ce:67:8d:88:f1:56:b6:1d:49:3b:a7:32:
e9:1f:bd:93:8e:c5:8b:e4:8b:99:9e:fa:19:1d:a5:
e6:f0:d2:5a:eb:bb:92:7c:8a:97:f7:e2:4e:f8:8f:
06:e6:92:4b:3f:37:62:42:42:86:8a:02:a6:ad:60:
bb:b6:a0:6c:64:96:3e:68:f5:34:7b:ab:8e:31:77:
37:95:d0:dc:35:2b:8c:4f:e9:bd:c8:77:db:04:8d:
97:56:34:ab:17:bc:b7:34:04:69:9f:24:57:de:69:
a6:0e:89:45:ce:d1:93:80:91:a9:13:d7:6a:63:11:
39:ec:a0:c8:a4:aa:30:e0:03:a6:71:28:ce:ca:39:
a3:2a:ef:0f:f8:73:01:9c:09:13:ca:66:1b:4f:ee:
63:25:56:46:d3:77:c8:92:89:49:60:dd:7e:b0:4f:
70:3d:30:fa:23:97:55:66:93:05:4e:41:94:cc:11:
97:a8:a2:0e:d9:24:21:ed:5d:21:9b:92:46:e8:fe:
20:25:d1:7a:ea:fd:f3:5e:5d:0f:06:26:4b:91:4e:
46:7f:3f:0a:58:01:72:d0:f5:75:99:9a:f4:90:de:
e0:7d:54:7b:ac:19:d3:24:76:f2:af:83:e4:ed:2d:
0c:52:a8:ee:90:1f:92:1f:9a:26:84:a3:3a:b0:36:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:A3:F7:4B:03:17:8C:7C:84:8E:1C:6E:B9:B1:9B:10:44:1A:E0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/831f0d82-fb6f-4c60-a3a3-f9a2d6b9afde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.164.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1e:c2:72:57:d4:73:18:06:cb:af:b9:a2:e6:b7:02:15:62:78:
7f:95:66:4d:93:ae:54:07:6f:aa:1c:bd:ea:6b:9f:ae:8a:95:
a7:1f:21:3c:7d:02:c5:3a:c3:4d:f4:a9:3a:c8:b8:6e:3b:3c:
e9:ad:9d:26:a5:78:33:a5:0b:9d:68:c9:38:eb:f9:44:4f:d8:
e5:7b:a1:e5:27:98:46:75:7c:37:08:43:39:5d:13:06:c5:58:
2d:4e:c3:d8:64:34:65:fb:8c:a9:58:23:84:f8:49:5b:a6:c4:
4e:45:0f:33:af:3a:e8:ba:2f:ec:19:38:15:98:11:43:9d:1c:
85:ca:f4:4b:c4:fb:a8:93:e7:82:db:28:ff:4c:29:a9:19:aa:
de:84:78:d0:f8:73:16:71:22:be:53:05:34:8a:47:a6:c3:28:
82:8a:93:9a:21:bb:07:ea:fe:69:36:24:9c:7e:dc:35:ed:b8:
d0:c3:36:64:86:60:fc:1e:09:07:9e:07:a5:98:70:cc:c3:b0:
2d:78:ce:46:7b:8c:ee:ef:00:a4:a6:47:4c:b6:21:5d:2b:2d:
68:96:4d:5d:07:76:d6:bb:e8:5a:6c:e0:59:07:1a:f1:c7:ca:
d4:cc:d5:33:e0:c9:52:13:3b:11:6d:2d:d2:1e:ae:c6:36:be:
02:7b:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:54:54 2025 by rpki-client