
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa90344-71fd-46b4-a6af-1e451ced08c6.roa
File: eaa90344-71fd-46b4-a6af-1e451ced08c6.roa (raw, json)
Hash identifier: IShKDuLdtBuMDxugSoxe3+qaY23mRBXMTZP96Tnpot4=
Subject key identifier: 8F:A4:D5:21:0E:55:04:88:10:7D:40:0A:E2:C4:DD:63:06:47:63:F0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 729A5D3E2677C424C353562F2ADDA658D6A30445
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa90344-71fd-46b4-a6af-1e451ced08c6.roa
Signing time: Tue 21 Oct 2025 11:21:29 +0000
ROA not before: Tue 21 Oct 2025 11:21:29 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9a:5d:3e:26:77:c4:24:c3:53:56:2f:2a:dd:a6:58:d6:a3:04:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 11:21:29 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=44ac6d4a36b4181615b721145e0e8d0d302e4adf00501c544ca2186ff2fcf078, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:58:c9:98:59:23:65:76:33:30:69:ed:80:
37:22:30:24:e5:15:94:11:27:50:e5:b9:ac:f9:c9:
ad:ce:fa:e3:05:7e:49:5e:2f:b1:34:b2:62:52:3d:
32:4a:58:1f:0e:c6:67:be:18:7d:f9:49:2e:57:5b:
3e:46:c7:cd:9f:dd:d4:1d:a2:09:4a:4f:11:e5:69:
67:d9:46:ef:00:1f:95:3c:5c:49:1e:6d:62:10:56:
1e:60:9a:48:fa:40:29:3d:5c:5d:a1:22:19:da:60:
05:86:4d:29:1f:25:f4:4b:03:d2:2a:15:b9:7e:36:
a9:a4:bd:1d:59:51:ec:f1:78:68:30:89:95:d4:bb:
f4:33:a6:76:c3:2f:7c:fe:c6:00:d2:68:76:ae:a7:
c3:a6:47:5a:7e:72:5a:98:16:47:ce:72:7a:90:65:
ce:19:ae:75:4b:f5:a1:d4:ca:e7:8a:dd:24:4d:56:
1a:61:0d:1f:d6:8e:04:16:de:b5:f6:39:20:6e:6a:
34:9e:68:1d:64:b3:35:09:7b:93:f8:a2:74:2b:bd:
2c:5f:a1:a0:fc:62:6f:67:65:37:16:42:76:50:d1:
08:fe:81:6a:d9:40:e6:1d:57:95:09:35:86:59:dc:
60:a5:53:20:79:91:b9:06:d8:3c:81:e0:62:2d:20:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:D5:21:0E:55:04:88:10:7D:40:0A:E2:C4:DD:63:06:47:63:F0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa90344-71fd-46b4-a6af-1e451ced08c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.81.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1a:22:17:c4:49:a7:e9:2d:1c:ab:7d:04:66:5e:1d:6d:36:
e0:51:8c:d1:e0:15:a9:5f:6c:75:4f:e7:8c:df:ad:00:38:7f:
18:03:8d:a3:e9:44:9c:c3:60:d1:0e:03:26:a9:f2:44:6b:52:
3a:63:f7:c9:1c:57:9a:4d:ee:e7:95:53:8f:9d:ad:a1:82:2b:
70:e0:af:42:cb:ae:26:f9:6d:7d:1a:aa:8a:f3:91:ce:c6:6f:
17:df:f8:17:27:f1:87:d0:0c:9b:b9:60:c6:37:e7:b4:90:ad:
e3:b5:84:67:80:e5:a8:04:65:38:9e:cf:2c:f9:4a:3c:ea:42:
8d:18:bc:6b:b2:51:6f:be:72:66:68:10:29:f2:62:7e:d4:d1:
e8:7d:3d:8d:aa:21:e8:5c:73:9b:e0:b6:b4:6c:48:33:2b:8c:
ae:d8:ea:6a:43:80:3f:7b:bb:1b:e7:79:d3:84:65:cd:ea:e4:
f9:61:37:6f:86:50:4c:4a:29:35:1c:85:2a:ca:6a:d9:b1:8c:
24:92:ee:84:da:d9:41:d0:c0:de:c2:67:1b:6c:c1:7e:6b:dc:
7d:95:cb:4f:04:bf:eb:02:0c:4f:9e:78:6d:75:6f:df:3b:1d:
42:c1:07:9b:61:df:c5:62:42:b8:16:a3:8c:c3:e0:2c:70:8c:
97:cc:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:07:37 2025 by rpki-client