
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64498fc-b63a-4ccc-8da8-df5718749032.roa
File: d64498fc-b63a-4ccc-8da8-df5718749032.roa (raw, json)
Hash identifier: CkiJi306dfOyWjBKm1BK4fB2LdWLQbjNfAR9Xc9OV6s=
Subject key identifier: 1C:8F:8A:0C:47:41:03:A9:77:99:E8:0D:7F:76:E1:E5:97:C0:C9:9A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 55FDFC718661EC180CD6CCF48BF369956B46747B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64498fc-b63a-4ccc-8da8-df5718749032.roa
Signing time: Tue 21 Oct 2025 06:31:22 +0000
ROA not before: Tue 21 Oct 2025 06:31:22 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fd:fc:71:86:61:ec:18:0c:d6:cc:f4:8b:f3:69:95:6b:46:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 06:31:22 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=e43fd0ffd82596bf3e510114c9fd175498b12e6f6dea108100c532b0ce869d9a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:0b:d6:c1:e3:d7:1d:fd:85:49:61:fc:49:
01:8c:10:cf:87:ec:b4:73:54:95:55:e7:ef:1d:43:
9f:f9:72:3a:b8:ef:e7:06:ad:06:d9:21:91:0d:a3:
99:b7:fd:b9:1f:ec:af:b9:5f:dc:63:b6:50:c7:26:
ee:a7:fb:21:1e:7a:cb:7a:d6:83:39:42:71:4c:47:
e0:d0:91:14:a3:fb:f3:56:df:e5:73:05:60:0d:c2:
34:cf:25:60:ad:8b:00:db:88:32:1d:89:37:86:51:
af:81:34:55:e2:27:48:9f:1d:0e:77:0a:94:85:14:
89:9a:e0:d1:b0:33:a6:34:74:18:0c:94:9c:5c:43:
7f:25:50:98:f9:26:ef:3d:8e:55:56:e4:b4:2f:69:
2c:51:98:35:93:11:8f:ad:43:17:a9:8c:b9:f2:e6:
9e:cc:b0:ba:65:19:d8:e8:18:09:b7:e0:09:ca:36:
cb:fa:79:e2:dc:57:e0:fd:7e:bc:6b:51:c7:e0:60:
73:f6:84:af:da:df:a7:41:33:14:46:18:f3:28:9c:
72:a2:48:4f:17:28:7a:19:c7:58:23:44:12:df:a2:
37:b6:cc:19:e5:1f:f8:7d:a3:6e:1c:29:d4:53:2f:
0e:62:fa:e0:80:f5:8d:38:3d:46:db:d8:31:57:3e:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8F:8A:0C:47:41:03:A9:77:99:E8:0D:7F:76:E1:E5:97:C0:C9:9A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64498fc-b63a-4ccc-8da8-df5718749032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bd:3b:7c:fe:e7:79:5a:e2:e0:ef:dc:c4:ad:9b:ec:b5:ba:
6c:f5:9e:9c:a2:64:d4:0f:9a:7a:6d:fa:db:1b:b0:a6:77:ab:
d1:29:09:03:bf:5c:86:48:a6:0b:03:f7:9a:70:b0:92:55:e3:
6c:bb:36:7b:e3:c2:6e:d1:c9:61:0a:8e:c2:c6:3f:73:6d:09:
75:98:5c:39:02:d0:35:68:3f:e2:12:ba:0d:22:2e:53:ef:ff:
ac:ef:dd:70:b7:71:ee:12:3e:05:4b:d4:7d:cf:94:54:60:cb:
b8:fa:eb:96:f8:2f:91:06:f5:68:60:bd:68:fc:d5:81:e3:fe:
20:c8:c1:e3:e8:c4:bb:86:3a:05:19:cd:a4:53:b9:b0:b3:72:
f7:d5:d0:43:73:34:64:51:ef:8d:6c:ca:8a:4a:7d:bd:a8:13:
81:f8:64:10:b2:01:98:b9:8a:40:8b:56:99:97:9a:a2:82:f8:
a8:36:41:4c:96:a9:4b:f3:19:49:b7:9b:92:09:24:9f:7c:84:
20:34:19:19:e6:68:22:83:f9:3f:cf:64:87:7e:cd:49:1b:25:
50:2a:1b:b6:53:c0:8f:3e:1d:51:ac:7d:6c:24:ab:24:5c:85:
76:42:bc:83:8c:87:a4:8c:6d:0f:e8:96:a5:f0:6b:46:df:ff:
71:ef:c4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:35 2025 by rpki-client