
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f33d5f42-af93-4a05-96ad-b917983b769d.roa
File: f33d5f42-af93-4a05-96ad-b917983b769d.roa (raw, json)
Hash identifier: Htx9lx7MgIpZB/ACs4fnA06B0DzXsg5Ufj8ltcKpYBw=
Subject key identifier: 35:F9:B5:75:DA:48:5B:10:B4:F3:5E:7B:7F:AF:EE:95:2B:FF:21:CA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0BD5671CF056A55C1520BE0AAA072B011A93F454
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f33d5f42-af93-4a05-96ad-b917983b769d.roa
Signing time: Fri 31 Oct 2025 01:10:14 +0000
ROA not before: Fri 31 Oct 2025 01:10:14 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 52.93.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d5:67:1c:f0:56:a5:5c:15:20:be:0a:aa:07:2b:01:1a:93:f4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 31 01:10:14 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=04ea69a27cb35cc4ffcd076d691ae7921cafd68384ad539b1e0a452ef9b542f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:31:91:11:01:5c:01:64:bc:a4:2d:6b:54:
5e:bd:11:e5:e4:96:d8:f8:b7:27:17:ab:56:15:3b:
d3:b3:86:a6:74:ec:c5:14:d3:b1:be:a9:ee:ff:74:
e8:8e:58:1a:3b:26:2b:32:c4:6b:b1:cc:4e:2f:3a:
b8:e8:ce:16:89:13:8f:d6:b7:93:4d:63:aa:7a:e7:
ad:5b:77:71:96:bc:51:5d:54:39:bb:88:f9:98:cf:
16:bc:8a:05:c3:55:98:5b:76:9d:86:03:6b:5e:94:
0b:f2:98:ea:80:66:2a:6b:b2:1d:bf:1b:c9:1a:6b:
e8:f0:c1:0c:96:69:aa:1e:da:eb:6f:c0:48:82:f8:
9b:a3:5a:87:69:5b:68:2f:d6:f7:a0:ee:10:3f:79:
29:d1:5a:5f:05:f6:18:96:92:40:b2:06:bd:4e:f7:
6d:c2:04:aa:00:84:04:91:23:e6:4d:19:ab:3b:35:
79:95:63:34:8d:19:83:d5:b4:eb:71:bd:14:cf:00:
75:b7:45:54:9f:cb:91:a8:31:8a:ac:60:eb:24:b3:
13:97:d2:7a:1d:c7:9d:96:45:74:cf:ea:87:a5:e0:
17:ac:c9:60:fe:ae:0d:07:60:e2:08:2b:97:38:4c:
22:73:ae:a5:4c:a4:60:26:6e:68:e1:41:6d:a6:eb:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:B5:75:DA:48:5B:10:B4:F3:5E:7B:7F:AF:EE:95:2B:FF:21:CA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f33d5f42-af93-4a05-96ad-b917983b769d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2a:c5:da:e0:59:27:de:e2:82:2e:db:6d:2a:59:8b:ba:1b:
0a:8c:d3:cc:0a:0c:bb:74:4a:29:97:7e:74:1c:4f:c0:6f:37:
f9:b7:56:3f:e7:76:3a:ae:3f:e5:4b:3b:08:8d:97:22:34:6f:
c6:66:f8:a1:20:bb:4f:b4:29:bd:00:c9:4d:1a:66:17:4f:d9:
46:02:3c:dd:b8:54:fd:48:5d:76:3c:28:55:be:84:60:94:d8:
6e:29:4c:ee:8d:6e:7d:d4:98:92:f8:02:a4:21:da:bb:c9:cb:
26:cf:d0:80:c6:57:f5:c2:b3:d2:dd:fc:93:0d:2a:56:96:f4:
c2:70:fe:8a:93:1e:e0:9f:f7:16:36:40:1a:bc:c9:8d:9a:11:
09:41:02:d6:50:f9:78:a8:ae:27:75:1d:97:df:70:e4:61:79:
86:ff:2e:88:f2:96:19:d2:81:c7:bf:cf:57:3b:43:65:09:e6:
67:3f:1c:06:da:8b:b4:3e:f8:d0:02:91:f3:8f:65:61:65:fb:
d2:da:94:40:93:63:ea:23:cd:ea:f7:a3:bb:e8:e2:0e:91:ba:
20:e7:77:13:75:48:59:e4:1f:94:8c:1f:ba:61:3a:30:49:9f:
57:d4:41:b8:c8:92:0f:ac:4a:be:65:d9:b5:64:49:7f:8d:6d:
b5:e9:d8:31
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC9VnHPBWpVwVIL4KqgcrARqT9FQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMDExMDE0WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNGVhNjlhMjdjYjM1Y2M0ZmZjZDA3NmQ2OTFhZTc5MjFj
YWZkNjgzODRhZDUzOWIxZTBhNDUyZWY5YjU0MmY1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKvzGREQFcAWS8pC1rVF69EeXkltj4tycXq1YVO9OzhqZ0
7MUU07G+qe7/dOiOWBo7JisyxGuxzE4vOrjozhaJE4/Wt5NNY6p6561bd3GWvFFd
VDm7iPmYzxa8igXDVZhbdp2GA2telAvymOqAZiprsh2/G8kaa+jwwQyWaaoe2utv
wEiC+JujWodpW2gv1veg7hA/eSnRWl8F9hiWkkCyBr1O923CBKoAhASRI+ZNGas7
NXmVYzSNGYPVtOtxvRTPAHW3RVSfy5GoMYqsYOsksxOX0nodx52WRXTP6oel4Bes
yWD+rg0HYOIIK5c4TCJzrqVMpGAmbmjhQW2m68rnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNfm1ddpIWxC08157f6/ulSv/IcowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2YzM2Q1ZjQyLWFmOTMtNGEwNS05NmFkLWI5MTc5ODNiNzY5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XZMwDQYJKoZIhvcNAQELBQADggEBAH4qxdrgWSfe4oIu220qWYu6GwqM
08wKDLt0SimXfnQcT8BvN/m3Vj/ndjquP+VLOwiNlyI0b8Zm+KEgu0+0Kb0AyU0a
ZhdP2UYCPN24VP1IXXY8KFW+hGCU2G4pTO6Nbn3UmJL4AqQh2rvJyybP0IDGV/XC
s9Ld/JMNKlaW9MJw/oqTHuCf9xY2QBq8yY2aEQlBAtZQ+Xiorid1HZffcORheYb/
LojylhnSgce/z1c7Q2UJ5mc/HAbai7Q++NACkfOPZWFl+9LalECTY+ojzer3o7vo
4g6RuiDndxN1SFnkH5SMH7phOjBJn1fUQbjIkg+sSr5l2bVkSX+NbbXp2DE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:53:58 2025 by rpki-client