
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/818308ca-00f8-4bcd-be3d-6888ee126bf1.roa
File: 818308ca-00f8-4bcd-be3d-6888ee126bf1.roa (raw, json)
Hash identifier: HSmUQcCatH3rejIyhgA2l5/kMph9/8BqQHfGV5dKjsc=
Subject key identifier: FE:A0:2C:E5:A0:8B:2D:B7:56:56:84:6B:AD:1C:43:C2:13:1A:E1:6D
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 34E90B1AEF352C4FC93BBECB9C5AC99E5FD1B8FC
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/818308ca-00f8-4bcd-be3d-6888ee126bf1.roa
Signing time: Tue 21 Oct 2025 12:40:23 +0000
ROA not before: Tue 21 Oct 2025 12:40:23 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:64b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e9:0b:1a:ef:35:2c:4f:c9:3b:be:cb:9c:5a:c9:9e:5f:d1:b8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 21 12:40:23 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=ba256ffb5b8f9da3443c195a970c01679c983454b901110eb9f9f027d9710de2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:78:1e:12:5e:d7:80:4c:0f:a2:c6:5a:1f:
fa:d9:0f:23:5d:6f:7d:b6:74:f5:8e:d5:24:d2:32:
72:98:f1:00:00:59:3c:be:a2:5d:fd:0b:ea:c8:d2:
db:7a:e6:9d:0e:49:29:25:fe:5c:a2:42:4a:ea:7e:
6e:15:2f:81:16:81:0c:20:04:9f:f2:1d:2b:32:83:
50:a9:bf:51:9c:3a:37:1c:00:12:5b:91:3a:d9:fb:
58:f2:f3:a4:10:c8:a5:d6:e8:da:87:01:71:21:e8:
23:d9:18:e0:60:0b:f1:f6:95:d9:44:42:36:70:1d:
01:e8:d2:30:03:e7:19:36:49:f1:7d:f6:80:75:a6:
9f:f4:32:6c:66:20:c5:fb:2c:a1:8b:0c:1b:0e:cb:
20:30:59:55:66:34:b9:74:b9:56:be:5a:43:be:d2:
66:b3:8e:11:28:16:db:f1:f4:d7:f3:2a:78:9d:3f:
b9:f4:e8:60:ca:1d:65:a6:53:8d:1c:e3:73:44:b5:
e9:fb:00:91:cd:f3:d0:4e:1b:10:ff:0c:89:8c:86:
b2:83:83:9e:5b:92:e3:b9:87:3e:45:85:2c:ee:7a:
1b:b6:ef:39:4d:26:5e:d3:12:bc:b4:05:ed:23:c0:
f3:e6:dd:23:a2:dd:52:40:0b:c9:7b:54:0c:91:de:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A0:2C:E5:A0:8B:2D:B7:56:56:84:6B:AD:1C:43:C2:13:1A:E1:6D
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/818308ca-00f8-4bcd-be3d-6888ee126bf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:64b::/48
Signature Algorithm: sha256WithRSAEncryption
82:44:f5:75:d9:24:30:d0:b4:ba:0b:32:87:1b:29:9c:ca:25:
9a:61:29:11:50:0d:6e:6b:be:e6:d5:f4:18:e3:9a:8e:da:0b:
fd:65:a8:64:bb:f1:36:4f:ca:33:5a:c2:3e:e0:e6:03:98:8c:
37:e5:81:ca:73:40:36:5c:a7:09:d6:9e:55:3c:29:22:50:15:
4f:59:ce:e8:60:d3:d2:27:49:45:5a:03:2c:5a:13:e7:b6:c1:
2f:de:e1:ec:2c:a3:3e:b7:e4:cf:5b:ca:64:46:20:23:89:91:
26:cb:f6:2a:c3:9f:fb:d8:73:4d:27:66:00:a8:de:22:e0:20:
40:c8:53:ac:88:d1:c8:3a:0b:1b:97:5c:ec:40:3a:99:ca:14:
9f:80:14:2b:25:10:cc:1e:d2:03:b8:cd:e4:4c:73:f7:05:6f:
a4:c5:cf:07:8e:9d:52:7c:31:01:38:44:ca:1f:0a:eb:2b:2f:
21:31:85:95:2e:fa:7c:a9:df:f8:aa:c7:23:fb:66:2f:ba:12:
04:c6:58:de:91:06:88:36:eb:8d:6d:1b:16:03:95:b7:da:ab:
cb:33:f1:31:ca:70:99:20:0b:01:ab:00:72:9f:39:c3:2c:93:
5b:3b:8d:fc:5f:5d:51:e1:d9:16:55:66:01:55:85:b6:ab:42:
7f:10:b1:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:13:17 2025 by rpki-client