
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d4ec732-5858-4d7c-8014-a77ff7681cc4.roa
File: 7d4ec732-5858-4d7c-8014-a77ff7681cc4.roa (raw, json)
Hash identifier: UuM7XTqCi9NXWsgmdwg1FD2u0GWoz4Y6YjBufOHZoLY=
Subject key identifier: 56:E5:03:F3:CC:C2:2D:9B:AE:CD:89:6C:72:A2:1B:9B:A2:2F:AB:87
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 15897342CB609F78E62D801322A523CEDA00B852
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d4ec732-5858-4d7c-8014-a77ff7681cc4.roa
Signing time: Sat 15 Nov 2025 02:10:41 +0000
ROA not before: Sat 15 Nov 2025 02:10:41 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 8987
IP address blocks: 18.253.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:89:73:42:cb:60:9f:78:e6:2d:80:13:22:a5:23:ce:da:00:b8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 15 02:10:41 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=c56bd176a5b9ef4488fafdb6733ca1c5145b7878d5f3292750349611de50a23c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:8b:b5:27:ae:e3:76:18:90:2b:d6:bb:f4:
88:75:ca:7d:35:cf:d7:f4:4d:87:37:83:d2:61:cc:
9e:92:b8:ac:98:16:89:06:19:a3:1d:01:76:b9:4f:
9a:13:c1:6d:62:73:61:1e:ad:d5:ea:d3:f7:09:d2:
b0:12:8c:76:5d:16:08:c0:de:13:ee:32:50:8e:0d:
20:bb:af:84:af:c4:51:89:d6:19:bf:35:d2:10:25:
fc:30:2f:1f:a2:67:dc:72:2d:3c:b4:45:a6:d1:88:
27:d2:bf:af:b0:a5:b5:9c:70:c5:6b:e6:e7:ba:83:
b3:87:71:7f:ee:ef:e0:e5:5d:d1:cf:3f:67:31:10:
f7:f2:90:ba:7c:90:3c:74:0f:71:3f:f8:c4:40:59:
22:36:fb:03:02:16:98:ab:cc:dd:05:b8:10:2d:4d:
13:56:aa:be:6d:d0:ba:d8:57:c6:24:e9:d1:d7:eb:
b5:d2:42:69:68:7a:bb:74:0d:03:f5:75:81:05:a1:
45:a7:9e:42:a6:27:7c:da:33:be:96:a8:b5:f2:f8:
f1:d8:f8:38:40:ec:45:96:e6:b4:34:c2:68:d8:76:
01:b3:f9:43:45:5f:d1:92:c0:d1:1a:01:18:ea:8c:
ac:3d:d6:47:61:90:7b:3b:72:f9:52:12:a5:a4:ef:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:03:F3:CC:C2:2D:9B:AE:CD:89:6C:72:A2:1B:9B:A2:2F:AB:87
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d4ec732-5858-4d7c-8014-a77ff7681cc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:d1:63:f9:10:24:07:e9:30:dc:04:82:10:b9:ab:8f:5c:2d:
26:60:7a:6b:85:4e:6d:f7:bf:a3:34:eb:9b:fa:4d:9b:bd:06:
45:63:87:92:2e:1c:75:4d:6d:3d:11:09:8f:6d:00:31:87:fd:
6c:59:a2:f2:92:ab:1c:6b:2f:e5:68:ca:03:4f:a2:3d:8d:f1:
06:d6:59:d3:89:b8:b6:db:df:70:05:2a:0f:e7:a0:b1:1c:ff:
6b:c5:6c:83:c3:83:c4:ab:f3:ab:2d:4c:a8:0e:fd:13:e3:43:
69:c5:09:1c:4a:ed:12:a7:36:0a:9d:b3:b5:d9:8f:4f:1f:8a:
94:a9:74:04:eb:aa:c2:53:8c:5e:a4:af:cb:9f:e0:10:98:4f:
3a:e3:d2:9c:b9:7f:2d:3e:14:75:a0:9f:06:85:0e:ff:61:51:
77:e9:ec:d2:f2:5c:91:fd:bb:65:f5:6a:08:f0:70:47:1b:a7:
22:f2:a7:d3:74:36:f7:5e:f8:72:d0:76:fc:0a:01:45:45:41:
38:56:e8:7a:c5:49:00:85:1c:00:fe:06:fd:00:48:bc:37:dc:
53:8c:a0:28:2e:e6:7c:a8:63:17:9d:e1:c1:bf:4e:74:13:23:
79:ae:6a:f8:56:05:b8:1c:46:65:58:d9:e5:a0:21:db:c2:d7:
39:da:1a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 21:30:01 2025 by rpki-client