
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa
File: 519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa (raw, json)
Hash identifier: 4qwY9XH9cbDym3vcf2sUNomDxmVqOKsqAMsiPfqUTqE=
Subject key identifier: 1C:C8:65:0C:5D:2C:D6:A4:A6:CC:6D:A2:37:6F:84:77:1F:31:C3:4D
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 60FA467F223F650918367225BFFE833A9AB562AD
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa
Signing time: Tue 04 Nov 2025 16:50:49 +0000
ROA not before: Tue 04 Nov 2025 16:50:49 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:c20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:fa:46:7f:22:3f:65:09:18:36:72:25:bf:fe:83:3a:9a:b5:62:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 4 16:50:49 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=7f2ca4c5f44a45e7355cbe18b3fce9fe95dc5b50e77bcef48f046466492d3329, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:5f:bd:3b:7a:a4:3b:30:aa:18:36:e8:af:
49:99:11:c4:0e:b0:6a:9a:03:18:fb:6d:5f:b1:33:
3e:17:4a:08:68:64:e8:67:15:83:39:a4:89:34:15:
70:0a:01:4f:25:f6:7c:a4:1f:7a:f1:3b:08:08:bd:
bb:7a:b4:2a:c6:b1:8a:0a:1a:96:0d:fc:98:a6:56:
ec:ce:dd:cf:35:85:7a:56:d4:14:62:8f:ee:ce:16:
55:45:b1:4c:f2:1e:9f:f9:76:01:69:56:f8:68:3c:
7b:c0:4c:9c:ee:c3:eb:92:f7:f1:68:cd:08:16:ba:
7c:e2:d8:67:de:50:5c:a1:8e:4a:63:e4:19:44:41:
fa:b2:fb:d9:c3:98:d0:15:cd:4b:36:ad:71:29:0e:
45:ba:27:d4:29:7d:c2:bf:e5:f4:73:eb:06:46:48:
66:dd:55:d3:75:b9:78:02:01:95:e1:3f:d1:18:fa:
c9:15:c7:c4:16:aa:4d:d4:9c:09:d5:b3:dc:9d:85:
4e:64:09:9a:cf:d1:43:c5:d5:5d:86:58:f8:91:7f:
ac:82:96:cf:ad:ff:a0:a3:7e:ff:49:8c:51:37:60:
71:b0:95:c8:92:b9:5f:a4:e2:09:00:30:eb:35:4d:
e7:39:14:e3:27:03:ec:72:c9:7b:23:96:7e:0f:24:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:65:0C:5D:2C:D6:A4:A6:CC:6D:A2:37:6F:84:77:1F:31:C3:4D
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/519cb9da-bb6c-4ea5-a6aa-e6b69840a861.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c20::/48
Signature Algorithm: sha256WithRSAEncryption
1b:28:ba:47:02:b6:a0:88:c0:b1:2f:9f:93:35:3a:9c:bb:8c:
b6:94:21:ff:c7:10:be:2c:a9:dc:b4:57:53:25:52:8f:0a:be:
01:cc:e9:e6:ab:6a:2b:75:c2:52:ee:3c:02:59:33:c8:cc:6d:
3f:15:2d:27:f6:df:bc:96:a2:08:54:12:1a:e2:6f:05:71:08:
93:ac:7f:0b:81:ae:0d:80:05:78:56:bd:be:4c:53:f1:89:05:
4f:eb:50:42:33:3b:c7:81:77:ff:74:30:22:07:74:a0:f6:f7:
5a:c0:bb:c6:fe:c1:98:aa:cd:bf:21:4d:84:dc:c8:ef:21:03:
60:35:5f:d2:36:cd:0c:27:da:94:c7:c3:3a:3d:c3:d5:5b:30:
00:3e:a2:a1:ac:30:d2:c0:d6:6d:fe:4b:3c:c9:64:69:47:fc:
1b:c0:9d:2e:7f:94:aa:99:04:e2:88:8f:51:66:47:11:2e:de:
35:49:ca:19:a9:2f:a0:97:91:be:24:3d:fc:8e:1d:92:89:0f:
de:9e:93:36:2c:7d:16:07:88:89:d9:f9:7f:bb:63:59:be:fc:
16:d3:e3:87:86:b9:e7:3e:b5:7d:57:0c:50:84:ca:2e:41:d1:
a5:d4:b4:c0:a8:5e:92:3c:02:12:30:fb:a8:35:68:11:6c:5d:
0b:8b:3e:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:30:33 2025 by rpki-client