
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b367b14-b5b6-43fd-a421-784e5caa4455.roa
File: 1b367b14-b5b6-43fd-a421-784e5caa4455.roa (raw, json)
Hash identifier: pF+FNBGlKnbO5NcOeecAR37in5/g9jSHuu6EpY00pzQ=
Subject key identifier: 6C:FF:78:02:48:F8:D1:F0:20:E1:82:E3:5D:2C:FC:CE:9D:65:3E:8D
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6DC673B4DAEB2A24F9A7B26606424D35C394B0E7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b367b14-b5b6-43fd-a421-784e5caa4455.roa
Signing time: Tue 04 Nov 2025 16:41:25 +0000
ROA not before: Tue 04 Nov 2025 16:41:25 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c6:73:b4:da:eb:2a:24:f9:a7:b2:66:06:42:4d:35:c3:94:b0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 4 16:41:25 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=25911306c92569f9a373baa958a779044d3074c4a2966742d6d711a2169b9b9a, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:04:24:16:3f:30:3d:68:21:db:6b:36:ca:
1b:a8:e6:c8:e3:83:50:a8:43:7f:db:29:84:06:38:
31:87:33:e1:b5:e0:97:fa:f7:e3:75:a6:2c:2a:f6:
4b:8d:e2:ae:f2:05:01:ae:ad:d1:40:c4:c9:b1:ec:
eb:7f:d3:c9:b2:e5:08:a6:0e:5c:41:75:f4:0e:d5:
d8:e4:e8:00:96:7f:a2:ec:e9:fc:a8:70:46:23:0a:
d9:fa:f4:02:e7:ff:16:15:d6:0b:ce:56:f2:11:e0:
31:47:dd:18:30:d0:f2:49:2f:84:2b:4a:5c:7e:08:
95:d1:3f:18:33:87:b8:19:f2:8f:c1:e4:78:c1:d9:
38:b7:d9:af:a4:b6:d7:d7:3b:27:4e:b3:31:85:90:
b1:e0:86:d0:1f:16:e8:29:35:01:cf:9a:8f:f9:4d:
9c:fb:aa:0d:db:12:af:3c:a1:5a:1a:0f:fb:eb:57:
a0:97:13:da:e0:04:2d:8c:0a:b0:bd:51:89:ab:5e:
77:17:58:9f:b0:d2:1c:36:7d:6f:a8:a0:4d:6e:98:
c0:d9:83:ac:f7:f2:84:bf:02:5a:31:ef:45:ba:63:
92:4d:c2:3d:77:69:3e:57:50:04:9e:76:91:b4:f7:
a8:02:6c:20:8c:9a:7c:29:d6:21:11:1f:50:90:ba:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FF:78:02:48:F8:D1:F0:20:E1:82:E3:5D:2C:FC:CE:9D:65:3E:8D
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b367b14-b5b6-43fd-a421-784e5caa4455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c1c::/48
Signature Algorithm: sha256WithRSAEncryption
32:1d:91:b7:c6:77:9f:4e:b5:b5:7d:8b:f7:5c:0d:2d:3c:aa:
52:ab:4b:e4:5e:4e:0d:d5:8a:3a:33:17:e1:f0:f0:48:fc:a6:
53:a3:1a:48:db:bc:bd:aa:5b:fa:f7:da:0b:34:7a:57:be:66:
a0:c8:b1:26:56:47:8f:1d:a8:00:7f:f1:67:99:64:e9:81:ac:
2b:dc:85:d4:aa:d9:3a:fe:77:58:5d:b3:2d:c5:7e:f9:a4:68:
47:b5:13:50:e0:66:35:16:a7:70:30:ac:33:54:39:a0:e2:f2:
85:08:17:47:c0:4d:e7:cf:c4:18:6b:e6:10:59:33:65:0d:24:
68:c1:2f:fd:55:7e:f4:95:e1:33:40:04:25:38:1e:16:78:74:
a1:eb:e8:43:ec:7d:3b:fb:97:3c:4e:63:d8:50:5a:61:10:a0:
63:2b:c1:15:ee:77:54:ca:de:a5:43:4b:a0:a3:b8:ae:41:42:
36:7d:a0:96:54:9e:39:c7:ca:b6:70:fe:bf:61:57:87:d1:45:
b3:ab:2d:b5:e7:8a:e9:e3:aa:09:63:0a:d9:83:bb:6e:33:91:
0f:e4:49:fe:90:5c:a7:e8:75:50:b8:06:d9:ce:85:6b:d9:9a:
c7:a2:0b:c1:97:8b:04:29:69:d8:13:59:77:4b:c3:33:07:65:
23:17:fb:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:30 2025 by rpki-client