
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa
File: 6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa (raw, json)
Hash identifier: yv+wg0MjMb1P5Sorv6SKMC9bUkXpP2pAuof8gRYaEX4=
Subject key identifier: 4E:1F:7E:81:50:48:42:A0:9A:1E:E7:AE:1B:C2:91:82:F4:DB:1A:1B
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 21C6C6EEAE60027037A9B7F7950DB32BAE1DD6F9
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa
Signing time: Fri 31 Oct 2025 00:00:04 +0000
ROA not before: Fri 31 Oct 2025 00:00:04 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2606:f40:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c6:c6:ee:ae:60:02:70:37:a9:b7:f7:95:0d:b3:2b:ae:1d:d6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Oct 31 00:00:04 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=2d46fa441541cab6210f5219c52f44ec85a841648677491005cd8bfb18623f8d, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:b3:ab:03:e0:3e:8d:32:72:6f:6b:c9:18:
d3:49:d0:24:49:95:f2:1a:52:17:f0:5f:78:08:cb:
2b:e4:3c:a0:f2:dd:f3:cc:cd:fd:5e:8d:85:3f:99:
67:5a:70:3f:10:6e:ff:1e:12:80:66:58:56:46:d2:
d5:46:2f:49:de:2b:73:1a:c1:e5:ae:e8:9d:5b:bb:
8b:ea:a1:f9:b6:f8:40:b9:96:7a:a8:cf:83:e3:ed:
ca:1e:d3:78:29:63:d3:2a:1d:4e:64:8b:ea:cb:29:
2c:ba:ac:74:36:91:14:22:ab:cd:d8:d5:9b:b6:76:
c0:38:b9:49:55:a2:6e:95:5e:b3:af:46:d8:ed:45:
77:3e:28:0d:b9:58:83:ca:28:02:8d:e5:6f:75:4f:
4d:f5:6f:20:67:90:82:16:0e:aa:ef:22:ac:44:39:
08:b6:83:4a:4d:7d:36:c0:9d:cc:16:9d:15:6a:f8:
56:09:91:40:d1:ad:9e:00:ac:12:bf:6b:ab:36:b6:
fc:1c:e6:7a:98:35:bd:ee:9e:7d:e3:0f:6f:ba:2c:
d3:24:33:ec:b5:46:33:7f:b4:74:8e:31:98:81:89:
00:06:aa:2f:c8:b7:ca:4f:7d:85:90:6c:fe:d5:91:
4a:90:b8:db:f2:47:c8:93:91:a3:44:b9:7d:d0:33:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:7E:81:50:48:42:A0:9A:1E:E7:AE:1B:C2:91:82:F4:DB:1A:1B
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:f40:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
a8:07:0e:97:7e:66:85:94:0e:42:d7:f2:da:a1:62:4d:33:d1:
45:0f:99:7a:c6:d2:12:41:7f:a1:4d:58:d3:a1:56:a6:5a:5a:
eb:0f:f7:b9:46:75:42:a7:30:82:fd:4f:90:a3:2b:5e:77:f1:
f3:36:4e:3f:b5:ab:6a:ca:ae:c6:f6:e7:00:43:34:1b:cb:eb:
aa:09:7d:23:d5:a6:c0:03:0b:63:5b:cd:97:b8:bd:66:83:e4:
cf:7b:9c:1a:16:e8:a1:45:6f:f5:df:dc:75:61:83:b1:5b:02:
d4:e1:4a:ae:61:8a:44:90:ed:2e:68:33:1a:bb:71:5c:db:eb:
14:5c:e2:9c:36:29:21:99:a1:a9:4b:65:72:8a:ab:6f:a0:34:
30:14:25:de:1e:08:f7:45:ec:c1:72:c4:34:7f:16:da:28:47:
2a:a9:04:96:52:03:fa:7d:7c:ef:9a:35:aa:a3:21:3a:ab:bf:
01:fd:01:da:5c:ab:93:db:ce:62:6e:e3:9e:54:5e:cb:59:13:
e0:7c:9b:af:d9:54:bc:15:18:4c:ad:99:b3:09:ca:25:e9:a3:
61:98:63:d6:10:e3:e3:12:6c:f1:d8:f8:d1:44:b6:d1:2f:db:
ca:9b:a9:ec:73:5b:2e:92:da:26:6e:d8:6a:0b:3c:82:c0:fa:
38:b7:0b:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:42:54 2025 by rpki-client