
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df263476-feea-4096-8e6e-d4907dc5e98a.roa
File: df263476-feea-4096-8e6e-d4907dc5e98a.roa (raw, json)
Hash identifier: H5qgZEMsqNMTUvWhUh2F0yNsTrYZlPTFSW9k0/ZeJJQ=
Subject key identifier: 64:38:7D:E6:E3:41:2D:76:15:02:F1:4A:04:D1:FF:32:17:66:ED:53
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 74550AFAD559C94D02B799F4D0683F55412733E5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df263476-feea-4096-8e6e-d4907dc5e98a.roa
Signing time: Tue 04 Nov 2025 01:20:06 +0000
ROA not before: Tue 04 Nov 2025 01:20:06 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:55:0a:fa:d5:59:c9:4d:02:b7:99:f4:d0:68:3f:55:41:27:33:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 4 01:20:06 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=1b56072143c69a9e07121fda632d8be962820d4c9ba717860764fd746efefe94, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:62:72:75:e6:0f:1c:3a:36:37:c4:45:d6:fe:
60:28:d1:f3:99:73:dc:51:f4:f4:c1:83:ea:0e:d9:
1e:01:73:fc:cb:1d:a2:c2:91:1b:5e:6c:a1:6a:de:
3d:b4:be:bd:cf:c8:48:db:46:ee:0c:0e:1d:b5:a1:
9b:7f:47:c9:c8:df:a2:90:54:bb:65:1a:35:52:5a:
c9:3b:28:12:af:b8:39:fb:0c:58:97:f8:f9:12:b5:
fb:fe:d1:07:b4:06:53:ae:5d:dd:3f:c6:fe:c7:f6:
cb:4e:4e:3d:ad:49:cf:d0:38:92:91:70:3b:e0:87:
49:7c:f8:01:da:4a:85:27:2c:76:7a:52:27:17:b5:
fc:e2:e1:8a:58:4a:8c:2e:48:c1:1a:47:c9:ab:cb:
0f:7d:f6:5c:49:e7:bb:55:a3:60:2c:d8:90:4c:71:
76:c3:94:7b:01:1d:23:0b:02:df:5d:b0:92:98:e0:
05:02:18:4d:0a:dc:1f:b5:cd:5c:da:82:b5:72:6b:
87:f9:a0:ce:84:dd:22:51:51:ad:02:96:3c:26:5d:
1d:df:9a:c1:bd:ff:5d:02:ea:d7:90:33:51:d8:f5:
ba:06:7f:01:81:48:35:4e:e7:f4:75:ba:f2:1d:ee:
fd:fb:96:03:ff:17:17:65:56:0d:20:b0:7f:95:7f:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:7D:E6:E3:41:2D:76:15:02:F1:4A:04:D1:FF:32:17:66:ED:53
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df263476-feea-4096-8e6e-d4907dc5e98a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3c:9c:ca:83:58:03:26:3a:af:98:b7:75:0d:4a:a9:5b:b1:
a7:47:7f:b7:54:e4:e9:ea:b9:fa:42:0d:8f:75:0b:0d:36:de:
bc:01:e5:1f:10:68:d8:2d:5b:cc:5f:60:69:6d:2d:88:76:05:
a3:41:40:7a:80:1c:2d:8e:df:a7:e9:9d:2c:47:98:9c:65:e5:
f8:51:67:30:7a:b7:03:f0:c0:12:9e:e4:b6:e7:ac:49:d2:c9:
a1:1f:62:a2:a0:9d:3d:a2:fc:27:e0:6d:4e:54:1a:5d:bb:05:
aa:6b:59:5f:8b:f3:29:37:0e:4d:b8:66:36:3f:6d:42:5d:a5:
37:f3:19:35:3f:a2:34:0e:60:3c:ad:b9:71:50:31:f8:c0:77:
dc:64:c3:7e:35:2e:e3:cc:20:02:9b:c8:97:11:f4:71:7b:73:
aa:80:81:4d:7f:59:d4:1b:fd:27:bb:88:98:69:be:d5:9a:a9:
ed:d1:64:b6:8b:15:72:65:a1:04:2b:8e:25:29:19:cc:6c:af:
22:88:c4:07:13:92:ee:1f:7e:ca:d6:ba:c2:91:8f:03:f4:d5:
7b:c7:85:fe:cf:f5:78:b6:62:7e:6b:f4:59:c4:ae:53:70:91:
c6:77:76:19:91:43:11:ef:c6:48:94:15:61:d7:ec:59:a0:c1:
bc:04:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:07 2025 by rpki-client