
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0c64b56-2ba2-4aac-bbf8-54c82096c6ab.roa
File: b0c64b56-2ba2-4aac-bbf8-54c82096c6ab.roa (raw, json)
Hash identifier: e4zieQjRngeJSEdqDChZ71ZZXLnpucF/CuVxUnAf2o8=
Subject key identifier: 8F:67:AE:0D:DE:07:ED:2C:83:BA:B9:86:EF:EB:9F:1A:4A:57:C6:93
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3F42F717F6E2DA40B3DA261A2884F9165CCFCEFB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0c64b56-2ba2-4aac-bbf8-54c82096c6ab.roa
Signing time: Tue 21 Oct 2025 01:52:45 +0000
ROA not before: Tue 21 Oct 2025 01:52:45 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 7224
IP address blocks: 15.248.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:42:f7:17:f6:e2:da:40:b3:da:26:1a:28:84:f9:16:5c:cf:ce:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 01:52:45 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=8d6eff3c8b8b9e4d3b983b060f2270464bd4cb26fc0c62ce0265bde85cf23f27, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:3a:91:c5:e8:cd:85:d2:f9:c4:07:ea:d6:
47:99:4b:99:04:03:39:40:58:d2:5b:75:28:53:5d:
b5:7e:4e:d1:45:96:6e:97:89:20:b2:e6:4b:1a:fc:
cb:61:a8:00:8c:f1:dd:4c:1f:74:2b:91:9a:1a:2d:
a9:e9:56:35:4d:5a:43:99:96:09:af:d3:0d:b2:a2:
13:66:af:d9:e0:1d:a0:a9:8b:da:ef:ef:e5:e5:be:
e2:fc:0f:9d:51:a5:e8:12:f2:ad:72:e2:a2:46:d5:
05:91:f3:71:3d:88:1f:62:2a:8f:25:a4:a9:1f:bb:
9d:34:27:d4:79:8c:35:0c:0d:92:6f:7d:fe:92:83:
ed:dd:5e:85:d8:c9:db:c9:63:b9:64:83:70:66:d2:
d1:5b:6b:e3:39:c1:44:01:62:46:e0:e4:36:ec:5c:
28:2c:c3:ad:d6:d8:b1:60:bf:8d:a2:47:06:2b:e1:
63:b0:88:ca:54:a3:e2:41:2e:7b:9a:73:5f:13:c7:
86:10:0d:f6:d4:7a:9f:ad:ab:2f:c8:b5:25:57:93:
ec:78:f0:d2:18:ba:8d:d3:22:85:f3:0b:d3:a5:30:
06:87:9e:73:b1:17:21:66:cf:49:f9:93:2d:14:cb:
72:35:1f:05:32:4b:82:23:21:6d:11:05:dd:b8:f4:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:AE:0D:DE:07:ED:2C:83:BA:B9:86:EF:EB:9F:1A:4A:57:C6:93
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b0c64b56-2ba2-4aac-bbf8-54c82096c6ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.248.76.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:ed:5a:c8:2a:3d:e9:8f:43:ae:f7:a3:a9:8d:6b:37:b4:94:
d4:9b:a1:07:1b:17:7f:73:04:45:d6:cd:6f:70:f4:fc:94:b6:
c2:ea:32:24:bf:27:08:c5:af:88:99:b7:23:81:f6:42:4d:03:
da:9e:55:3e:56:fd:d8:9c:4c:e7:c4:2c:86:63:f3:85:4b:fd:
b9:1b:f9:9b:74:c8:7a:9f:cc:0e:f9:25:55:f0:2b:23:58:93:
a9:b4:f9:ca:e6:fe:0a:a5:ab:10:74:e1:e3:53:d4:aa:89:52:
fc:dc:54:8a:05:e6:96:20:35:99:44:ad:09:91:db:cb:59:5f:
50:5c:16:41:04:4e:7e:4c:73:9c:28:a0:ea:cf:2c:c3:c8:7f:
44:52:ba:39:47:75:a7:35:be:b6:1b:30:c4:71:4e:32:e9:55:
aa:cb:02:53:b7:62:5f:69:60:7b:2e:db:b3:9d:8c:a6:e7:29:
05:2f:c5:86:b0:cd:01:ca:2e:a4:fb:17:4c:99:48:de:3a:3c:
c1:32:61:4a:87:f6:29:0f:f2:cd:d1:d5:8b:dc:db:ef:f5:94:
11:f4:31:1b:53:0f:a7:67:c3:af:d0:80:2b:eb:59:89:7f:08:
da:6a:28:c1:54:1c:0b:4e:ad:6b:36:bd:6d:fe:eb:b4:44:23:
95:34:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:46 2025 by rpki-client