
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bed5c1f0-a446-4c7a-ace9-206cba43d6b5.roa
File: bed5c1f0-a446-4c7a-ace9-206cba43d6b5.roa (raw, json)
Hash identifier: LKInXqy2iRuacmttOzbNNubM5MpPnZ6DGXlMTcIW2jE=
Subject key identifier: B3:63:5F:12:B6:CB:EE:06:03:9D:C6:1D:BB:D2:CB:86:D9:DE:EB:FA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1FCC3679B7BDED24F3C5B197052AC3E0F4CA1CA6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bed5c1f0-a446-4c7a-ace9-206cba43d6b5.roa
Signing time: Tue 04 Nov 2025 02:30:44 +0000
ROA not before: Tue 04 Nov 2025 02:30:44 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.184.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cc:36:79:b7:bd:ed:24:f3:c5:b1:97:05:2a:c3:e0:f4:ca:1c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 4 02:30:44 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=611748c71f7bde07461f5de7a1d94dd1b383f223915d85166525a5470fa0ecce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ca:f8:36:c4:f8:28:3f:88:17:31:11:15:6b:
f1:cb:56:82:f1:e4:d6:29:2c:9c:a2:77:84:98:44:
09:db:c4:39:75:90:9a:df:82:90:70:7b:09:90:dd:
e6:12:8f:c9:89:77:f7:40:62:e6:1f:b8:54:26:52:
b7:b4:38:48:7f:fe:f8:f1:04:a0:a6:77:1b:e9:52:
c4:7d:38:68:4b:8d:67:f6:db:28:4e:21:de:d9:90:
ad:96:e3:60:d5:db:78:62:75:68:ce:37:d9:57:b8:
d8:81:54:1a:fe:83:9b:61:ae:0d:bf:2d:8e:0e:1b:
75:1c:7e:30:e2:ef:7a:19:1b:39:e7:f9:fd:67:d7:
f4:4f:06:28:26:04:38:6a:68:0f:2f:53:14:91:76:
d6:b3:44:16:c0:0b:26:92:a6:94:f9:69:34:16:b0:
84:a8:e2:e2:d9:e6:4d:ec:d6:72:c2:4d:9b:cb:ad:
df:f6:8b:10:b4:7e:4d:12:54:df:59:af:15:1b:75:
b7:27:85:75:bb:5e:d1:5e:ef:99:74:7c:da:2c:96:
5f:1c:07:a7:ea:44:ec:28:ac:2c:de:9a:3d:fa:45:
ea:bc:01:e2:08:3b:58:aa:e5:b3:9c:f9:76:cc:00:
00:12:e8:e1:65:d4:1a:cf:3d:dd:67:f7:8d:9a:d9:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:63:5F:12:B6:CB:EE:06:03:9D:C6:1D:BB:D2:CB:86:D9:DE:EB:FA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bed5c1f0-a446-4c7a-ace9-206cba43d6b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.184.0.0/18
Signature Algorithm: sha256WithRSAEncryption
71:25:f4:a0:7e:9b:56:4c:50:25:82:dd:57:17:cb:d0:e5:18:
28:48:e9:5a:c1:78:98:16:f2:32:9a:2c:9d:4e:7a:61:d4:21:
c5:27:66:b8:6d:62:a8:a1:7f:d7:29:ba:c7:6d:37:03:d2:45:
de:45:dc:3d:a2:10:c0:fb:ed:cb:6d:5a:0f:75:7c:52:d1:4d:
cd:0e:42:76:e9:04:14:b4:1c:e6:87:8b:a3:3f:24:25:09:6d:
2d:23:5a:38:be:69:76:f9:77:c7:58:90:cd:c3:3b:56:97:bd:
b1:7a:17:66:82:e6:0f:14:e3:38:50:98:44:79:8f:be:7b:08:
d3:cc:e1:64:a5:97:a1:28:97:27:b3:49:6f:aa:55:da:db:a5:
59:11:63:2b:6e:9b:75:11:d0:55:1d:69:90:f8:7c:2b:c3:60:
3c:65:dd:77:5c:52:99:ca:dc:bf:2f:db:1f:9e:0a:18:32:50:
a9:05:8c:5b:d8:45:5c:d0:0d:73:e9:8f:49:40:17:c0:41:c3:
28:ee:e8:40:b8:21:df:f2:0e:ed:da:48:3e:20:d5:08:c1:75:
ee:70:96:65:50:65:1b:cc:30:be:be:01:6e:62:6f:51:d1:6d:
04:90:e3:3a:c0:6f:bd:31:d9:e6:aa:e2:59:e2:f2:03:75:f2:
76:ac:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:10 2025 by rpki-client