
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df7dc284-58f5-45e4-95d3-57c336179849.roa
File: df7dc284-58f5-45e4-95d3-57c336179849.roa (raw, json)
Hash identifier: EdOiTpZVsFpw4nOwfI2qu3KsnugLCiTsc/KlfArcoEA=
Subject key identifier: 4D:AE:0F:D8:83:B2:A0:9A:62:A4:8B:F5:F5:9C:F4:29:90:E5:9D:F4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 726ECE2F11DBE5F3A4A116347D2D881A0D45F857
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df7dc284-58f5-45e4-95d3-57c336179849.roa
Signing time: Fri 07 Nov 2025 01:31:44 +0000
ROA not before: Fri 07 Nov 2025 01:31:44 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6e:ce:2f:11:db:e5:f3:a4:a1:16:34:7d:2d:88:1a:0d:45:f8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 7 01:31:44 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=6e9ec298be9c3ac5d4bd8a526e7ff766d92346ae53983bd47c6e413f1cd1bb41, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:8d:9d:08:83:22:ec:b2:19:bb:11:c1:ef:
68:73:2d:d0:82:bb:49:e1:0b:5a:12:31:a8:95:97:
b3:78:13:af:53:36:79:f8:10:f4:33:2e:68:bc:ad:
e0:11:7c:43:7c:e3:60:1f:29:12:1b:9d:cd:23:0c:
93:48:5f:0a:1c:b0:bd:b0:2f:38:50:f5:54:0b:f0:
b5:e2:ac:73:85:f0:d9:3d:1d:60:65:d9:5e:06:52:
c9:49:cf:b4:ce:40:27:62:c9:3e:24:48:63:74:c7:
f2:32:33:4f:a0:4e:05:54:79:89:01:59:98:d0:f9:
58:79:77:8d:08:c1:04:b6:2c:cd:33:52:9c:87:20:
1e:a6:d5:52:2c:b4:78:77:bf:90:a1:71:dc:a2:eb:
8e:d9:f7:cc:08:49:e8:21:9f:4f:68:e2:92:e0:96:
59:3c:c7:51:ab:58:f2:6e:cf:c2:61:25:f9:fd:3a:
87:31:fa:17:93:ef:5a:be:b3:2e:8f:40:c9:1a:ec:
4e:f9:8a:fc:4a:ba:9a:54:47:27:b4:13:2b:d1:cd:
80:66:ce:e0:27:4f:be:84:0c:e0:d1:20:54:b2:39:
e7:7b:e0:f0:53:9b:e7:89:18:67:af:ff:42:fd:2f:
d7:63:45:16:69:11:8f:8f:92:94:b2:70:3f:d2:ac:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AE:0F:D8:83:B2:A0:9A:62:A4:8B:F5:F5:9C:F4:29:90:E5:9D:F4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df7dc284-58f5-45e4-95d3-57c336179849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ac:00:42:88:0d:33:07:c3:4b:bc:a0:58:55:86:85:d0:51:
06:f1:38:a0:2d:a5:e0:29:1e:83:ce:7c:34:dd:a5:c6:70:3d:
54:e5:19:a2:c6:37:9d:b3:3e:f7:22:97:14:ef:ed:77:79:c5:
79:e9:18:b1:6c:6f:11:10:81:3f:aa:f0:f2:d0:72:a3:dc:c7:
8a:b1:9b:a7:32:c6:35:b5:59:60:09:05:83:54:c5:0e:0a:e8:
59:dc:21:8d:20:cf:75:41:c9:f2:ad:e5:00:17:3b:9c:58:f6:
c1:9e:1d:ee:ad:7a:ba:e6:fa:cc:0d:12:d3:aa:3e:11:3a:14:
6e:35:60:76:b3:83:19:74:41:ac:6f:61:67:b2:50:69:0d:af:
d7:5b:2a:52:e0:9c:d2:b4:a9:d5:ee:a7:3d:03:8e:77:d4:71:
0d:bb:d5:15:74:4c:cf:05:f7:d4:c7:c7:d7:9a:da:4b:5f:fa:
6a:ec:37:23:37:75:26:58:b1:18:76:92:38:e4:be:af:6c:be:
f6:89:ad:38:bb:6d:3a:bc:bd:0f:59:ea:89:e7:6f:13:b0:0d:
21:e6:2f:87:a8:a1:3d:97:dd:05:8c:6e:7b:1e:2b:9a:49:b1:
ab:32:f9:e4:bc:59:69:68:1b:d3:32:8b:eb:c3:26:ee:0e:2e:
5f:59:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 20:14:06 2025 by rpki-client