
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c044dfdf-545b-46de-a181-9b87e5052e28.roa
File: c044dfdf-545b-46de-a181-9b87e5052e28.roa (raw, json)
Hash identifier: J2EolCCLNsQ96o0Ul/jZdzMAs6eeY56zukpzh15xV94=
Subject key identifier: 46:25:CC:78:B7:ED:1E:CD:20:07:6D:74:44:A9:8E:05:8F:F3:7F:AE
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 05F5AEC0742B1EEF48C3DE48F800D713C2F0D15D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c044dfdf-545b-46de-a181-9b87e5052e28.roa
Signing time: Tue 21 Oct 2025 12:30:10 +0000
ROA not before: Tue 21 Oct 2025 12:30:10 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:2110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f5:ae:c0:74:2b:1e:ef:48:c3:de:48:f8:00:d7:13:c2:f0:d1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 21 12:30:10 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=a739ba71aabadb8f4909b66b718ee91d1b6cff66635a858186ba46702e97acbe, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:9f:02:18:7e:3c:7a:a6:c5:60:25:ef:ff:
f3:30:05:6a:8c:d3:94:21:d8:8b:7b:fd:d5:29:4d:
00:4a:6b:16:9c:a5:65:da:41:a4:6f:af:b9:56:ed:
31:b9:fb:62:c5:b7:fc:75:0a:20:bf:d2:98:5a:6e:
39:9a:aa:67:3e:b2:cb:2a:30:4f:a1:f2:3f:f0:48:
b3:67:5d:1c:8e:ca:61:b4:ab:77:0c:cf:b6:27:1d:
1f:08:c9:db:3e:d9:53:35:1a:0d:96:ab:18:bc:97:
79:9d:6d:e4:4b:aa:1f:37:ee:97:4b:f1:57:56:81:
2a:43:9e:a7:73:e7:e9:35:b5:72:03:81:89:d0:e2:
a1:40:e9:42:c0:02:f6:98:30:cc:9b:28:fb:09:8d:
12:d3:3b:db:8d:be:ca:39:d4:cb:37:1e:06:15:27:
bd:33:61:17:5f:a4:a2:4f:a1:da:bb:a8:bc:ac:a9:
6d:51:ef:c6:45:e8:53:88:77:37:0f:7d:9f:46:fa:
42:c0:82:4c:99:42:f6:d4:0e:95:bc:71:b4:1d:9d:
32:26:9c:e4:c3:88:10:9f:a1:75:72:22:d5:d4:54:
a5:65:d9:a5:b2:1e:9d:d4:34:48:fe:9f:a4:d1:af:
7b:7f:57:15:aa:0a:57:90:80:8a:2f:7d:fc:5a:00:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:25:CC:78:B7:ED:1E:CD:20:07:6D:74:44:A9:8E:05:8F:F3:7F:AE
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c044dfdf-545b-46de-a181-9b87e5052e28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:2110::/44
Signature Algorithm: sha256WithRSAEncryption
9e:fd:7e:32:16:c6:83:56:31:ef:27:c2:66:be:08:3d:c8:a5:
c6:3e:66:f8:2b:e1:d6:63:60:7c:b3:2c:6e:7c:33:18:be:6f:
2f:be:eb:24:9e:c6:9a:a3:e1:79:7b:a6:a6:ef:32:81:ca:f5:
1d:82:5b:39:59:71:90:8d:91:17:f7:87:da:32:96:ff:5f:5b:
6e:1c:df:d5:69:a7:34:39:b5:ac:ae:29:b6:89:ca:b9:d5:a2:
26:f0:f9:52:3b:94:ed:28:e7:b2:b7:cf:75:0a:2f:25:a8:82:
4f:90:3d:5e:11:fa:36:49:32:93:10:3b:3e:75:e8:47:ef:0c:
97:b3:d6:3e:19:d4:98:fc:fd:6b:f6:4e:e1:ce:20:be:1c:0f:
31:f8:28:e7:bc:cd:da:b0:46:6e:c6:98:11:8e:0d:c3:90:65:
6c:3e:8d:2f:30:0d:87:8b:b4:08:7b:46:fa:46:80:b7:e5:23:
5c:e2:9b:a9:06:f1:86:c9:bd:eb:e0:48:4b:b1:59:db:44:90:
b5:22:c3:ca:d2:a2:ee:7f:75:68:09:89:07:db:66:c0:57:d5:
63:1d:91:63:1d:8c:25:09:d8:5d:a8:76:bc:42:cf:a2:3b:d8:
6b:b3:88:f0:b9:66:c8:45:12:11:af:0e:bc:ed:82:f5:6a:aa:
ba:bc:a6:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:30:38 2025 by rpki-client