
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa
File: b2adff31-40d2-4cca-afbd-993e0bc90554.roa (raw, json)
Hash identifier: Pg4tYywHQka8KF8ioC7aqQTcrx0F+mp2pPAjoApS9ew=
Subject key identifier: 9F:F0:EA:9F:07:66:6B:3F:2D:B9:48:71:8F:CF:5E:87:3F:91:FD:C6
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 3B9D58F84D6AEF8498CFD7E3CD2C1152E5DA6CF0
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa
Signing time: Tue 21 Oct 2025 12:40:17 +0000
ROA not before: Tue 21 Oct 2025 12:40:17 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:54b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9d:58:f8:4d:6a:ef:84:98:cf:d7:e3:cd:2c:11:52:e5:da:6c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 21 12:40:17 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=968648069510b4f08ef27bb613bad16f30fe79bb256b69955bb12046d8d3b74c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:3b:58:37:54:bb:83:12:2c:1f:48:f5:d5:
d3:7b:21:14:46:4c:1c:05:5e:4d:6a:76:f5:ec:b5:
38:fa:27:58:6d:73:c7:0f:82:64:5d:c2:b4:a9:7c:
e9:9a:27:b6:9a:63:2c:75:36:5f:7d:85:cb:c1:5a:
ad:b7:64:e5:8a:99:7a:28:2e:18:12:e8:4b:9c:df:
56:aa:1b:c5:95:7c:9d:a6:c5:f6:c5:e1:b9:c9:75:
2e:c3:76:24:f2:02:17:a7:ea:dc:e4:95:7e:15:bd:
b0:18:ea:20:81:97:6c:57:2e:e3:26:72:d6:6a:b7:
66:3c:ce:9d:7c:20:94:8e:d0:fd:0d:c2:9e:15:28:
77:97:de:05:f1:30:44:f2:27:98:96:9a:ba:ff:7f:
5b:41:64:00:8e:f7:f9:4e:98:a5:9e:15:5c:f0:4d:
7b:6e:c1:19:d2:ea:91:6f:a2:ed:29:95:8b:89:20:
4c:6b:5f:4a:2b:3c:eb:d0:40:7a:f8:bb:7c:26:2e:
b9:60:0c:e8:ec:54:32:c8:30:1f:8b:3e:15:6d:67:
8c:ce:4a:f1:6b:fd:78:c6:fc:9b:69:bb:84:dd:18:
41:d6:0a:40:4a:32:a7:01:a0:cc:8f:08:89:32:9f:
1a:66:d4:e0:a8:ac:f9:f5:35:e8:9b:68:9b:a5:0e:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:EA:9F:07:66:6B:3F:2D:B9:48:71:8F:CF:5E:87:3F:91:FD:C6
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:54b::/48
Signature Algorithm: sha256WithRSAEncryption
65:bf:3b:87:8c:f4:fe:4f:aa:2b:a9:76:16:df:1c:cc:cb:d9:
c4:6c:bb:32:86:91:3d:48:99:70:9d:72:fc:20:a3:42:2e:fc:
d7:0a:d0:20:95:dc:ab:84:b5:5b:e5:13:fb:15:1b:3c:16:48:
69:b7:ee:1c:9f:b5:4c:fa:84:7d:8c:21:4c:c7:d9:c1:52:12:
7b:6d:98:c0:fb:98:1c:92:db:c7:94:0e:12:6c:16:f1:80:ba:
79:cf:2c:0c:4e:25:10:36:76:fb:45:03:4f:90:45:89:3b:29:
a3:e8:41:49:ec:08:74:48:23:e9:b0:3e:1f:68:6c:0b:bb:f3:
70:24:5c:2c:2f:77:bc:6f:ba:02:41:f2:90:62:fa:78:59:e8:
85:24:a4:2f:e5:70:1d:09:0b:46:a7:d4:6d:58:90:61:06:95:
3d:b1:bf:97:29:55:f1:1c:b6:ce:6c:c9:98:c9:0e:e5:6c:0c:
d2:54:c4:87:36:fa:58:36:67:29:60:89:70:85:c3:a5:6b:b4:
a0:7a:c3:03:76:a6:4b:21:c7:77:eb:43:0b:82:4d:c4:5f:93:
ff:ba:02:c7:3f:74:86:0e:67:87:66:c9:78:48:3f:fc:3b:1a:
27:02:67:ef:0b:45:a2:79:c4:c1:53:f8:41:34:0c:d1:dd:f7:
25:87:00:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:22 2025 by rpki-client