
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c193b364-e641-4dc8-8773-f914d3566580.roa
File: c193b364-e641-4dc8-8773-f914d3566580.roa (raw, json)
Hash identifier: 8GjMlNhAzqn738JDrCxoY6EO7Rx64yD5e9bO19RHKK4=
Subject key identifier: 58:92:44:D2:1F:36:FB:EC:36:15:29:8C:90:D8:58:33:EB:9F:9A:A4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 139EEDE58B0385888DBA3AA098A74952CF7C7466
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c193b364-e641-4dc8-8773-f914d3566580.roa
Signing time: Tue 21 Oct 2025 02:25:46 +0000
ROA not before: Tue 21 Oct 2025 02:25:46 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.208.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9e:ed:e5:8b:03:85:88:8d:ba:3a:a0:98:a7:49:52:cf:7c:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 02:25:46 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=c1513c0e4153049eeac405bf0cb40013fc882c1d19b839e408db20811025f8be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:88:33:71:2a:b2:0d:6f:5b:8d:62:fd:0c:
2b:a7:fc:1f:aa:33:0f:59:58:6f:38:eb:67:90:dc:
c6:22:8c:09:db:99:ca:62:ea:b2:4c:79:f0:5d:86:
03:a4:d7:17:a8:af:5c:d6:ef:fc:7f:45:cc:36:93:
5f:5c:96:5c:2f:e0:c4:e3:84:32:d6:ad:7f:7c:a2:
1a:8a:13:dd:c8:a9:93:b9:db:51:ac:4f:04:dc:b9:
7a:90:81:33:e5:eb:34:4b:f0:5b:4b:e6:5e:a9:49:
71:7e:c5:f6:4d:68:11:be:b8:98:4a:c0:71:88:f2:
db:36:30:fa:1c:26:b0:92:a3:0e:47:b4:7f:78:21:
88:7c:6b:37:d4:f0:cc:b7:36:f6:b3:32:dc:09:00:
e2:9a:f1:68:ca:71:bd:34:ed:14:4f:37:22:93:40:
85:fe:a0:e8:9b:a3:c7:42:05:32:2c:c4:77:00:26:
9c:0d:ae:45:d6:9a:6e:d7:12:0d:3a:32:19:75:d3:
2a:28:c5:b8:3f:cd:6d:77:6c:7a:03:3c:9a:68:e9:
c1:e5:47:e4:b6:10:06:cc:f2:85:4a:bf:29:73:e2:
e7:06:e9:bc:80:35:c6:85:5e:db:fa:c2:3a:51:94:
7e:24:18:51:b6:1d:b1:46:85:55:81:eb:e3:98:9b:
f9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:92:44:D2:1F:36:FB:EC:36:15:29:8C:90:D8:58:33:EB:9F:9A:A4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c193b364-e641-4dc8-8773-f914d3566580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.208.0.0/13
Signature Algorithm: sha256WithRSAEncryption
7b:50:04:03:cc:61:e9:e9:a2:0d:9b:a2:28:c8:ab:0a:cd:c3:
88:ff:fc:cc:83:0a:ac:d4:50:cb:bc:38:04:04:93:18:f1:d1:
98:18:48:6f:58:d0:52:e2:50:2c:be:82:76:3f:f0:74:d3:2a:
3b:1d:76:bd:be:4d:9b:89:18:36:4e:06:56:19:4d:26:8f:3e:
46:ac:52:15:0a:82:a6:b2:a5:af:b8:a6:07:41:02:8b:46:bb:
d4:6f:7a:5d:2a:91:4e:f1:b3:1f:4b:04:e8:8e:a0:16:a2:41:
8a:f8:29:ec:36:83:b3:eb:45:0e:79:b5:54:aa:0c:3d:48:d6:
bd:43:ad:12:0a:0c:89:ce:7b:fe:92:c2:e6:39:c1:c8:e6:ff:
21:c3:39:76:ef:95:d3:b7:bc:b7:3a:11:fc:83:06:ae:e5:72:
c2:43:8f:5b:0e:18:8e:31:69:a4:57:66:aa:eb:5a:16:bd:70:
63:57:f5:8f:9a:b8:21:3d:c9:20:6c:5b:3c:dd:a7:b9:39:67:
44:03:18:b0:b6:fb:3e:bf:08:09:9a:e0:55:69:ad:00:98:df:
9e:30:44:6b:ca:81:09:d6:1a:84:41:01:a7:f0:60:03:ff:69:
ce:16:9b:bf:c7:c0:2e:3a:a1:4d:31:83:2f:87:e2:9e:13:af:
bb:01:c6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:13 2025 by rpki-client