
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/758cbdf7-aaaf-4ed6-b892-e5c9ae1e2f84.roa
File: 758cbdf7-aaaf-4ed6-b892-e5c9ae1e2f84.roa (raw, json)
Hash identifier: X9Qsn6lNgmRPAmSasW2UlK/W1wElL1NzJ2x4anXm5uk=
Subject key identifier: 1B:D4:35:C6:39:17:4B:CB:A7:8F:A4:D2:D4:3C:6E:4B:81:76:CD:B7
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7DC022ADA0DF85B6EA99F1E860BEC49B07321E17
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/758cbdf7-aaaf-4ed6-b892-e5c9ae1e2f84.roa
Signing time: Fri 31 Oct 2025 01:50:36 +0000
ROA not before: Fri 31 Oct 2025 01:50:36 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:6108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c0:22:ad:a0:df:85:b6:ea:99:f1:e8:60:be:c4:9b:07:32:1e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 31 01:50:36 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=b4c54ebbd9fa596659b03846dea613b76207c95d1289ed2be10f81fa64244f85, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:8b:ee:32:2d:87:ba:27:2c:c6:37:46:02:
ec:63:87:e2:66:b3:5e:09:61:08:af:31:4b:2c:df:
47:76:79:16:97:e9:1b:7e:83:b5:21:46:12:7f:b8:
cf:5e:4f:5d:8b:a1:1a:9c:fa:c0:13:71:26:9c:15:
27:8c:0c:e2:01:1f:7c:66:9c:5f:35:c0:9b:c3:0c:
28:0c:d0:a3:9f:e6:e2:32:90:09:f9:cd:e7:f4:fb:
9d:90:dd:ee:34:b0:ce:c1:d4:4a:0d:dc:de:6a:5d:
e3:1c:91:79:51:49:a0:6d:d6:5d:bf:50:10:49:b7:
ae:70:73:d0:79:45:61:6e:c9:3d:d4:a3:e8:b6:0a:
c8:c3:27:a7:5b:46:e1:64:84:4f:e4:d2:f9:10:3f:
3e:f3:c0:4c:34:0f:a0:72:0a:4b:5b:52:6d:87:9c:
f6:20:f9:5d:04:7a:55:a3:70:22:e0:65:62:a7:11:
0b:18:15:f6:ba:cf:73:16:b2:a7:03:b1:16:03:83:
1a:da:f9:09:64:13:1e:69:7f:be:af:9f:9b:51:61:
50:95:f7:b9:e6:8e:32:80:c5:9e:76:c4:8d:3f:4d:
67:6e:55:26:c7:8c:25:52:17:ae:e0:12:e0:6e:65:
8f:ac:c6:29:4c:96:ee:13:8b:62:64:55:e0:51:e6:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:35:C6:39:17:4B:CB:A7:8F:A4:D2:D4:3C:6E:4B:81:76:CD:B7
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/758cbdf7-aaaf-4ed6-b892-e5c9ae1e2f84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:6108::/48
Signature Algorithm: sha256WithRSAEncryption
4d:38:5a:ad:33:db:e9:f1:6b:a7:93:a5:bd:9b:2c:fb:6b:de:
2b:7f:18:a8:71:36:19:35:bf:29:67:de:68:20:cc:b5:72:98:
c1:d4:45:80:30:e7:c6:26:d9:9c:a2:76:58:22:91:5b:37:81:
f7:45:f7:4a:ef:4d:e6:87:1e:95:6f:7b:8a:84:87:d4:aa:5b:
cc:89:a0:10:bc:54:1d:e4:2a:5e:33:e4:04:84:34:5c:61:d6:
b5:ff:96:db:ec:30:2a:1e:76:75:40:04:ee:58:99:a8:1e:38:
bd:33:a9:c4:b1:ab:a4:33:fd:f0:c5:05:5c:53:07:c0:2b:59:
fd:2d:9b:6a:bd:87:a8:2f:43:eb:28:13:93:37:5d:3f:0a:16:
dc:31:b0:6e:64:9e:b8:3c:45:24:eb:67:ad:50:c6:a4:dc:c3:
24:54:84:81:f4:e7:e2:54:d1:89:86:a7:c6:5e:77:7a:e2:bc:
34:ab:6a:f1:3e:ca:fa:a0:c2:74:50:83:1c:9f:cc:61:51:47:
b7:9b:2a:ac:68:41:c5:83:42:1b:de:0c:78:1b:f3:70:f6:ea:
08:fe:a9:0b:0e:56:06:f7:58:a9:83:39:5a:f7:f5:78:ca:4f:
0c:41:00:77:93:3a:7a:68:0e:94:8d:70:20:f7:c0:e0:e9:fa:
b5:99:69:b0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfcAiraDfhbbqmfHoYL7EmwcyHhcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDM2WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNGM1NGViYmQ5ZmE1OTY2NTliMDM4NDZkZWE2MTNiNzYy
MDdjOTVkMTI4OWVkMmJlMTBmODFmYTY0MjQ0Zjg1MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPs4vuMi2HuicsxjdGAuxjh+Jms14JYQivMUss30d2eRaX
6Rt+g7UhRhJ/uM9eT12LoRqc+sATcSacFSeMDOIBH3xmnF81wJvDDCgM0KOf5uIy
kAn5zef0+52Q3e40sM7B1EoN3N5qXeMckXlRSaBt1l2/UBBJt65wc9B5RWFuyT3U
o+i2CsjDJ6dbRuFkhE/k0vkQPz7zwEw0D6ByCktbUm2HnPYg+V0EelWjcCLgZWKn
EQsYFfa6z3MWsqcDsRYDgxra+QlkEx5pf76vn5tRYVCV97nmjjKAxZ52xI0/TWdu
VSbHjCVSF67gEuBuZY+sxilMlu4Ti2JkVeBR5r01AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUG9Q1xjkXS8unj6TS1DxuS4F2zbcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2Lzc1OGNiZGY3LWFhYWYtNGVkNi1iODkyLWU1YzlhZTFlMmY4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYQgwDQYJKoZIhvcNAQELBQADggEBAE04Wq0z2+nxa6eTpb2bLPtr
3it/GKhxNhk1vyln3mggzLVymMHURYAw58Ym2ZyidlgikVs3gfdF90rvTeaHHpVv
e4qEh9SqW8yJoBC8VB3kKl4z5ASENFxh1rX/ltvsMCoednVABO5YmageOL0zqcSx
q6Qz/fDFBVxTB8ArWf0tm2q9h6gvQ+soE5M3XT8KFtwxsG5knrg8RSTrZ61QxqTc
wyRUhIH05+JU0YmGp8Zed3rivDSravE+yvqgwnRQgxyfzGFRR7ebKqxoQcWDQhve
DHgb83D26gj+qQsOVgb3WKmDOVr39XjKTwxBAHeTOnpoDpSNcCD3wODp+rWZabA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:28:27 2025 by rpki-client