
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f52fef9f-fbcb-45c0-a5d6-b790629f90ce.roa
File: f52fef9f-fbcb-45c0-a5d6-b790629f90ce.roa (raw, json)
Hash identifier: EtcRB1Rv/iqbtDtFv8ySeht1M4rohsUiX//CKpd6mfE=
Subject key identifier: 18:ED:27:4D:FE:A2:96:B7:B7:42:08:0E:AB:04:C3:5A:88:B9:26:48
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1868CD684EDED311AB5F8BB757AFD75823BB8E64
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f52fef9f-fbcb-45c0-a5d6-b790629f90ce.roa
Signing time: Fri 31 Oct 2025 01:10:09 +0000
ROA not before: Fri 31 Oct 2025 01:10:09 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.2.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:68:cd:68:4e:de:d3:11:ab:5f:8b:b7:57:af:d7:58:23:bb:8e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 31 01:10:09 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=357c0b00bf184e2e58029b6c8d1e3170fbce0c2cd1c5436a285a52adaf050e50, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:e2:5b:26:5f:e0:5a:54:a6:b2:8d:19:94:
42:07:62:b3:1c:ff:6c:18:e7:a8:50:df:59:5e:40:
55:4f:7d:03:dc:08:7c:b3:67:18:d8:d4:8f:e4:9e:
3d:3b:69:53:92:da:89:50:eb:40:22:e8:b1:0c:2b:
11:3c:d7:0e:ed:d6:52:b3:77:8e:68:b3:ed:bc:cd:
0e:d9:f6:94:90:b4:99:2a:36:f0:15:71:89:9c:91:
47:4f:d0:1a:2d:ba:82:d6:80:61:9d:c5:24:9e:bf:
2e:77:36:a9:7c:9f:33:8b:01:18:59:3e:be:d5:1d:
ae:20:1b:f8:af:aa:27:a0:f9:27:c7:ed:b1:8f:ae:
46:03:7b:aa:e5:30:7d:26:65:8a:c8:60:64:f8:28:
40:f3:08:f5:65:b7:66:d5:ec:55:43:1c:42:13:64:
df:db:a7:3f:5d:0d:59:c9:b6:54:50:ac:94:7e:3b:
e6:e9:36:74:d0:78:1a:6c:69:b7:c5:b5:49:b3:16:
8f:93:3d:18:41:4e:d9:c2:81:e5:ee:70:10:84:b8:
d2:57:16:6c:86:d6:23:3c:01:6c:22:1a:10:e4:ed:
5b:1f:89:8e:02:56:ea:95:0e:c2:1a:33:9e:97:c9:
0a:a8:5f:43:3a:c9:b0:2b:d9:e5:4c:c0:3e:46:76:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:ED:27:4D:FE:A2:96:B7:B7:42:08:0E:AB:04:C3:5A:88:B9:26:48
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f52fef9f-fbcb-45c0-a5d6-b790629f90ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.2.76.0/24
Signature Algorithm: sha256WithRSAEncryption
67:38:de:4c:a2:65:9d:29:a9:ea:d1:15:94:9a:2a:83:4e:f7:
09:c1:fb:02:cb:0a:14:bb:0f:3a:ea:6d:db:71:12:41:15:9d:
99:52:2a:f0:4b:b5:4e:b2:cc:4b:cf:3f:36:3b:73:8f:66:9b:
37:43:ef:4f:24:94:ed:b3:6f:c8:b3:00:06:1f:2f:48:da:70:
d9:02:5a:63:3d:56:ee:83:34:93:11:83:5f:52:7d:16:bf:9f:
05:93:9b:bf:38:eb:9e:1a:9a:57:06:47:fa:41:e4:c9:3f:b4:
56:04:74:eb:2e:cb:1c:4c:39:70:19:6c:14:b0:a0:56:de:b7:
ff:09:8e:d7:ee:35:7d:7b:48:52:7d:23:e7:6b:ab:a5:0b:21:
d4:ab:3b:49:18:8d:5b:8c:de:fd:34:ec:b1:be:bd:5d:f0:a0:
99:8d:a1:dd:85:38:05:a4:d6:c2:6f:cf:85:ec:81:5b:2e:23:
fa:87:24:2d:f1:62:64:05:c9:fb:ae:8c:50:e5:b5:a2:b1:50:
2b:16:05:e8:47:c3:48:94:d2:33:51:8b:ea:7a:b5:92:50:bf:
c4:e8:90:59:81:42:66:b7:bb:13:9a:e5:05:d5:57:9b:3c:99:
e5:ba:cd:c9:77:e7:64:27:5d:f6:ac:4f:0f:b8:f0:cd:d3:27:
2e:65:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:54:55 2025 by rpki-client