
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8ea64d51-ceb2-4982-a0c5-d791c635df66.roa
File: 8ea64d51-ceb2-4982-a0c5-d791c635df66.roa (raw, json)
Hash identifier: ZmuhfFKBAkMrOCfD3r32zl2V5noE3tw2N5YwiLYC9/w=
Subject key identifier: C3:98:C7:86:2F:4D:81:E9:B0:B3:74:E8:FB:99:1C:77:85:41:BF:2E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 3B418E99F308EAD8F0B5EDAD88E097A0568C2A8E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8ea64d51-ceb2-4982-a0c5-d791c635df66.roa
Signing time: Tue 04 Nov 2025 16:50:52 +0000
ROA not before: Tue 04 Nov 2025 16:50:52 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:492::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:41:8e:99:f3:08:ea:d8:f0:b5:ed:ad:88:e0:97:a0:56:8c:2a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 4 16:50:52 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=66f54eb039c6fef4699608b881501d71b7f8457cbc8c5a639d8d4d105ece8cd9, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ce:9d:34:2c:a2:46:84:9f:a6:f7:c0:60:d9:
83:d4:63:11:f8:52:7c:db:be:da:ab:ab:21:1f:37:
de:af:40:5b:ed:6f:f0:ea:a8:f3:3a:f3:e0:51:4f:
31:28:9a:5a:5f:78:eb:c5:e2:6b:90:25:54:0c:1e:
06:c0:4d:dc:dd:8e:90:8f:bc:f3:b7:a4:50:a0:b9:
bd:64:b5:aa:35:f3:8a:fa:82:3c:bd:5f:49:75:10:
7f:c3:29:49:94:49:98:9a:fa:0a:76:0b:f1:0a:ab:
0a:ae:fa:c5:00:95:7f:70:45:93:bd:80:b3:d4:a0:
b2:36:d7:42:bd:7d:40:9c:ba:71:1a:0b:0d:61:0f:
c6:27:01:a6:63:f9:8d:08:9c:1b:c2:76:12:5e:59:
89:88:3b:2c:be:1b:0a:ff:19:ab:41:64:64:fe:27:
78:ea:9d:af:8b:92:0b:09:e8:69:48:56:40:18:ac:
1e:7c:80:06:d1:0e:8b:eb:07:02:2f:bc:f3:a9:71:
b9:48:6d:e5:43:06:5a:95:ab:7a:6a:f5:d0:75:55:
4d:7b:9a:0f:7f:2b:31:59:9e:3d:83:18:34:d2:f5:
d3:76:3d:08:d3:ea:3e:7f:7a:d9:a2:2f:31:15:cb:
79:1e:8f:5c:7e:5b:d7:47:e0:2a:c8:67:b5:ff:77:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:98:C7:86:2F:4D:81:E9:B0:B3:74:E8:FB:99:1C:77:85:41:BF:2E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8ea64d51-ceb2-4982-a0c5-d791c635df66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:492::/47
Signature Algorithm: sha256WithRSAEncryption
7a:14:b3:8b:d5:56:51:48:5e:ed:e5:f3:61:34:f8:19:d9:79:
a5:6d:e0:29:2a:01:0a:af:0c:9b:6b:02:48:c5:e6:6f:9e:78:
99:34:08:d9:b5:e1:f2:d8:b4:4e:97:f7:21:3e:17:3a:9e:d8:
f6:c7:8b:56:af:25:73:6a:e9:eb:b3:1c:e7:b8:c7:65:48:50:
d6:ba:56:1c:32:18:87:9e:fb:9f:a3:e3:9d:e8:7a:7b:df:8e:
17:c2:f6:f1:10:7f:35:95:de:e5:09:3b:d0:2f:86:1b:c3:7f:
ba:49:67:4d:49:3a:a7:b8:dd:c6:f5:b4:80:67:c5:b5:1d:41:
5e:63:80:9d:03:7a:09:1f:78:e9:67:af:c0:3a:3e:35:62:b8:
75:18:39:75:22:b3:5c:42:62:03:22:0c:e1:b5:88:04:e1:21:
b6:92:a4:18:52:5f:ab:52:3c:88:d7:e7:27:fe:eb:63:98:ac:
8e:b0:9d:66:20:75:a9:bd:ec:02:6d:79:36:74:c3:e8:27:a3:
45:da:53:4a:cf:3c:2f:05:f5:9f:d1:9c:69:50:6c:7c:62:2e:
ba:bc:99:93:6b:a4:81:f6:48:8f:3a:bb:4b:28:e7:5e:35:b0:
ca:b6:5f:7f:da:d9:ce:6a:c6:4b:ca:ad:fd:b6:e7:0a:61:41:
e0:e3:9f:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:35 2025 by rpki-client