
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f4b3f9-2f97-48ff-932c-3f8db5d15a56.roa
File: a8f4b3f9-2f97-48ff-932c-3f8db5d15a56.roa (raw, json)
Hash identifier: 7rIU99wTwn2NnAh0st8AJIUpwiM+YXmCC1Hrl5GD4E4=
Subject key identifier: 6D:27:36:ED:A9:9A:45:F1:F2:CA:1E:31:FC:71:29:C6:25:F9:D1:E3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5F16D14E9D339DE73ABEC56FD6431FDB845127F8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f4b3f9-2f97-48ff-932c-3f8db5d15a56.roa
Signing time: Tue 04 Nov 2025 01:41:26 +0000
ROA not before: Tue 04 Nov 2025 01:41:26 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:16:d1:4e:9d:33:9d:e7:3a:be:c5:6f:d6:43:1f:db:84:51:27:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 4 01:41:26 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=d8854b541ad2dd00dce4a1b51171c35b2547a0647f950a1d6eb10b34a8060d67, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:11:54:91:a0:79:0b:db:c8:63:51:69:96:
10:9a:48:13:1a:58:81:41:03:ab:58:f1:32:bd:1d:
68:94:e1:34:d0:82:8d:42:00:16:af:2b:c2:b5:88:
93:d5:fb:2c:2a:80:5f:18:22:84:ae:0e:24:6d:a5:
65:d7:5e:65:c4:32:9b:3e:87:88:cc:b1:01:2f:08:
c4:c6:14:a4:96:84:07:a8:9d:60:0a:24:8c:36:05:
01:04:5c:76:f6:2b:0a:eb:37:8d:64:42:d6:96:71:
16:07:a5:df:9c:75:4e:5d:a8:61:f4:c0:8d:f2:ce:
f9:db:45:34:5a:56:45:9b:09:c5:b2:03:6b:84:91:
d9:c4:8f:ae:60:c1:c6:da:96:58:f9:aa:3c:59:c5:
7e:97:20:65:a3:3a:c5:a9:e6:b5:95:14:04:42:1b:
4b:e2:c3:b5:9f:05:61:6b:30:59:e2:91:fd:48:7e:
bf:91:62:28:67:a5:4c:44:a7:70:cb:81:68:a9:5a:
4c:3e:9b:d3:71:a5:65:a6:3c:1c:39:50:d4:36:c3:
1f:77:d7:28:3b:0a:d9:3e:e0:fa:f3:ce:76:29:9b:
26:a8:69:6c:36:21:2d:d1:14:e6:6d:68:81:69:22:
5b:c9:fe:66:1e:bf:2b:93:e9:fa:0c:14:a2:e5:fa:
d5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:27:36:ED:A9:9A:45:F1:F2:CA:1E:31:FC:71:29:C6:25:F9:D1:E3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f4b3f9-2f97-48ff-932c-3f8db5d15a56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.0.0/18
Signature Algorithm: sha256WithRSAEncryption
18:40:22:8a:4f:fa:b2:96:ca:9c:7b:3d:30:bf:8a:f8:fb:b1:
32:f3:4f:2a:5a:7c:55:a1:42:ef:8b:e5:19:58:e9:a3:bc:c6:
ca:3d:2b:6d:93:f7:29:fa:d2:34:ce:a8:28:e4:0d:2e:f8:5f:
ef:e1:c1:7a:36:c3:19:05:b4:07:ef:d2:9a:44:ef:14:3f:b0:
26:fd:79:db:6e:af:e5:5a:c4:0a:77:b2:c7:50:cf:d1:f1:4a:
7f:1a:3e:bc:3d:5c:e2:f6:12:5c:9f:8d:e8:43:e2:e7:bf:48:
d9:25:b8:6b:b0:cf:43:9f:47:13:23:a9:d9:e9:f4:8b:b9:f2:
7a:2a:b9:68:d0:71:3d:84:5b:52:9d:6d:ce:0d:bc:94:75:3b:
35:e6:66:44:89:74:9f:2d:01:5e:c7:4b:4e:44:fd:ab:8b:67:
36:69:4a:ea:39:77:e5:d8:26:85:75:09:d0:60:89:80:61:2d:
80:1e:0d:82:b9:65:62:50:8c:40:29:a3:19:e4:db:2f:e9:0a:
37:24:21:f1:3d:d6:fd:2e:60:d7:cc:c5:a0:67:08:ec:37:fe:
ef:84:95:fa:79:f7:3e:ab:30:45:50:50:09:bd:f5:95:67:aa:
e3:2a:6e:9b:e1:38:69:d5:e4:ec:1f:29:41:95:d4:0a:cf:26:
cb:9c:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:47:23 2025 by rpki-client