
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2f7d217-2f84-42bc-8bff-30a58644718e.roa
File: e2f7d217-2f84-42bc-8bff-30a58644718e.roa (raw, json)
Hash identifier: B7ry5PhURtnw+oRYyxzhn6Ndr1hGzOBZTgM7bi9+CjA=
Subject key identifier: FE:7F:82:30:AA:4E:30:07:B9:71:54:7F:F5:1F:0C:D8:E3:4D:AC:A5
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 44E9F216C12F8B903F946E5F52AD33791B574071
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2f7d217-2f84-42bc-8bff-30a58644718e.roa
Signing time: Tue 21 Oct 2025 07:21:25 +0000
ROA not before: Tue 21 Oct 2025 07:21:25 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 168.163.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e9:f2:16:c1:2f:8b:90:3f:94:6e:5f:52:ad:33:79:1b:57:40:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 07:21:25 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=07e187b4d7e3ade07bd95e290b68ca0cc694e79c96d33633bc1d30ea9a991e34, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:d3:6e:50:2b:a1:d1:9a:a9:a8:9d:4c:f5:
f9:be:e8:60:07:33:cb:eb:97:ba:80:e3:bf:d0:9a:
c2:4e:de:80:e1:34:83:0e:18:6b:41:15:a0:af:5c:
06:23:4d:24:12:04:36:78:d3:a8:af:f6:ab:50:c8:
42:59:0d:83:ea:b2:35:ec:e6:12:1c:dd:b6:1b:f9:
35:e6:5d:ea:38:0a:6d:34:31:01:5a:43:e0:4a:ae:
7e:6a:04:11:6c:b1:f7:bb:be:ec:53:8a:2e:f3:4b:
1b:cd:85:5e:e3:a3:bc:f6:a2:ec:ce:1c:cf:a8:85:
35:f9:bf:99:1a:f7:9e:85:c4:1f:18:0f:0b:cf:9a:
d6:a7:a5:a6:15:44:ba:1d:7d:97:51:89:c5:dc:2c:
e6:f2:2a:7b:f3:18:61:d3:6b:64:36:90:46:b9:45:
cd:91:da:f6:5b:a0:00:4a:d4:89:5c:fe:95:92:dc:
df:d9:ce:ab:0e:44:0a:8e:45:0b:85:5e:2e:14:27:
d9:7f:48:ec:e4:f8:27:e5:8d:18:51:da:91:a3:b4:
a7:8f:d4:1c:bd:94:39:bc:a0:c7:2f:b3:a8:09:6e:
1e:ef:6b:5a:4d:1e:e4:31:c7:01:da:fb:8d:c9:79:
ac:ff:e4:9f:03:14:90:5c:c4:b0:32:1a:48:ab:9d:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7F:82:30:AA:4E:30:07:B9:71:54:7F:F5:1F:0C:D8:E3:4D:AC:A5
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2f7d217-2f84-42bc-8bff-30a58644718e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.163.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:3f:cc:13:7f:24:b4:91:31:c7:c6:3c:d5:c3:07:74:f2:3d:
21:16:89:6d:62:70:08:69:4e:b3:c4:8d:01:fd:22:3b:a4:57:
54:c0:df:71:5d:c5:ad:93:86:b6:d3:07:1f:76:46:f9:c0:01:
81:f8:f6:1a:f3:f3:23:2a:66:dc:a2:8d:1a:b9:42:a5:eb:0b:
f3:df:f8:42:41:58:9a:dc:cb:64:cb:36:97:ad:37:88:98:8f:
6b:28:15:de:d1:9c:03:6f:00:11:fb:45:70:fc:bf:d2:39:5c:
7a:e7:91:97:ac:b4:81:c7:46:fa:56:d8:21:2b:dc:c1:a3:db:
96:4a:46:17:fa:75:8a:cf:74:d9:4e:e0:84:81:9d:4e:55:d4:
59:a7:08:ad:c1:bf:dd:da:fc:84:b4:f7:c6:1b:ec:ec:c8:52:
be:00:1a:d9:06:5f:e7:3f:1c:9b:d8:61:bc:59:c1:ce:0d:ee:
16:ca:45:54:a4:9d:6d:c6:73:69:d7:32:a4:6b:b3:dc:26:64:
ed:35:77:db:65:4b:ec:e0:d8:35:81:da:ba:39:29:1a:52:43:
91:0b:36:c1:88:24:81:47:c0:d6:29:9a:42:f6:bc:a3:fc:7a:
20:15:20:c2:3d:03:5a:6d:da:bf:07:17:5a:54:53:dd:4b:fc:
1f:8d:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:03 2025 by rpki-client