
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6325c35-b9e1-4086-9d2c-5ea957791c66.roa
File: e6325c35-b9e1-4086-9d2c-5ea957791c66.roa (raw, json)
Hash identifier: ADq7OyNcGF9qeJDY4wYPU4bOSqwHht1y4Q31bYVZgWo=
Subject key identifier: 40:EE:5A:D8:7C:84:5E:C7:44:BD:A7:01:9E:88:8E:8D:40:35:46:3C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5CD0DB71182B5E8AEB3D17E1AC16946F6E176CCB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6325c35-b9e1-4086-9d2c-5ea957791c66.roa
Signing time: Mon 27 Oct 2025 16:06:55 +0000
ROA not before: Mon 27 Oct 2025 16:06:55 +0000
ROA not after: Mon 01 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.32.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d0:db:71:18:2b:5e:8a:eb:3d:17:e1:ac:16:94:6f:6e:17:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 27 16:06:55 2025 GMT
Not After : Dec 1 23:59:59 2025 GMT
Subject: serialNumber=0fe73efc4e11efe63ecffdae9f5b72c322196cfb2a4c6d09c775b8e6d9b23b78, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:90:82:7b:b4:e1:86:df:82:22:ee:35:13:
d2:27:d8:8e:6e:f2:de:67:37:fd:49:a1:79:37:fb:
54:d9:11:de:9e:13:b9:5d:46:3c:a7:43:8a:85:c2:
cb:15:59:6f:7d:31:1f:3a:7c:21:d9:37:c1:cd:63:
06:d3:8b:00:77:97:17:4b:99:c2:9d:68:cc:64:d6:
e6:58:89:56:25:e0:1f:d0:fc:f8:c3:df:d4:46:c1:
23:61:93:88:a7:c1:ad:29:27:e7:99:d6:b6:4d:1c:
20:fa:de:1c:2f:8f:92:15:be:a1:63:22:76:cb:17:
01:d7:54:68:24:53:47:24:5b:0f:3b:8c:b8:d2:db:
58:f0:cb:d7:85:55:e3:65:8d:8b:b8:ba:9b:d8:9e:
ec:42:8d:88:7a:f5:f4:6a:f0:8f:45:9a:f6:da:0b:
21:bf:1e:7f:51:71:85:cc:d5:2a:38:26:7e:d3:30:
fe:56:e7:65:fe:2c:aa:f8:1b:be:5b:35:df:f2:d0:
72:ab:6e:4c:d7:87:b1:38:12:d2:1f:d9:c1:a2:57:
73:70:38:4b:76:cb:69:a6:22:a9:33:30:80:e7:4a:
24:d7:d0:fa:0d:9c:ec:a5:3a:34:7f:a7:a1:47:d7:
56:1f:04:c0:6d:7f:38:09:78:ba:ba:13:e3:d1:1f:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:5A:D8:7C:84:5E:C7:44:BD:A7:01:9E:88:8E:8D:40:35:46:3C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6325c35-b9e1-4086-9d2c-5ea957791c66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.32.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:b7:4c:9c:bc:91:29:9f:32:28:79:df:68:41:57:98:06:61:
8f:c9:b0:11:a8:43:a4:12:e9:d5:a3:9d:38:20:69:b1:32:31:
f3:08:86:4a:cc:14:43:e2:66:04:a4:88:14:ca:2e:a5:1f:f2:
02:6f:82:b3:1e:c5:6b:6f:10:9e:2a:54:2a:ba:3e:3f:07:8c:
59:f7:a7:b2:84:a9:b0:25:a7:5f:ca:69:5d:f7:34:86:ee:a3:
fc:51:e3:f2:45:18:69:e0:1e:90:ab:8f:fd:b7:c5:ca:cd:6a:
58:9c:59:2a:bf:e9:7a:12:2c:3e:d1:0a:51:82:9a:d7:67:f4:
1a:be:a4:1c:98:c5:66:d1:d4:10:0c:cc:d1:db:fd:21:59:60:
0f:83:ac:e5:ca:01:99:03:92:9e:00:21:f1:4c:bb:a2:18:b6:
81:1a:d9:e4:9b:e5:14:c9:4e:9d:04:20:5b:4f:78:80:da:4a:
f5:20:f0:2c:ab:6e:75:b4:6c:62:f1:04:96:20:7e:9a:84:21:
30:88:fe:ff:71:eb:c0:09:6e:dd:5e:b2:6b:d1:2b:ea:21:b3:
38:48:79:f2:80:fa:05:36:0e:8e:ec:8e:64:62:3b:8f:ee:42:
6e:f3:fe:37:7b:7d:a6:27:54:fe:cc:e9:53:49:aa:fd:fb:f7:
cb:e6:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:46:21 2025 by rpki-client