
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa
File: bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa (raw, json)
Hash identifier: 8cMDaYrwvJeu0bVFe71wpi8ifzvfLiYbT2prw85pwcE=
Subject key identifier: 73:4E:1D:67:93:99:05:EF:92:EF:3A:79:A6:BC:37:89:28:59:04:F8
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 6210AB13A8D04B7952B8D12ABB2DAFBC09864C00
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa
Signing time: Tue 21 Oct 2025 00:10:09 +0000
ROA not before: Tue 21 Oct 2025 00:10:09 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:10:ab:13:a8:d0:4b:79:52:b8:d1:2a:bb:2d:af:bc:09:86:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Oct 21 00:10:09 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=329d1d853c1d56d28d0b7f40469c6ae57c131d9b50a5075974c1bf3ffa77f54f, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:4b:ce:68:33:5e:6e:61:3f:a5:1a:01:fb:
db:5c:59:b5:74:5a:08:4b:d5:cc:aa:3a:f7:7f:76:
52:a1:61:60:5c:68:c2:d3:eb:e8:3a:7b:3c:67:4b:
ab:2b:17:54:0e:1e:64:3c:54:fe:72:4c:a2:54:0c:
cf:dc:b1:ec:bb:67:a2:8b:6f:cd:71:2b:09:05:9c:
fd:b7:8b:2e:34:2b:38:d7:65:5f:82:77:9e:46:c8:
99:3d:f6:3b:a5:b0:94:35:30:f1:ac:90:bf:9f:6d:
23:c8:31:e8:33:66:44:3e:c8:35:2d:66:cb:2f:69:
0b:9a:9a:a4:65:b6:9c:96:e3:3c:6e:1c:92:76:d6:
7e:bb:a0:dc:d7:2d:27:4b:e8:ba:2c:ab:38:a6:19:
9d:cd:7f:bf:eb:13:7e:4b:98:a4:88:9b:f1:dd:6f:
5e:ca:fa:31:10:73:80:61:a7:fa:53:71:0d:d0:bd:
02:e4:9c:a5:97:c0:0c:79:cb:bf:bc:cd:b3:f9:48:
39:a4:41:f2:ca:cd:4f:ee:07:93:c3:bc:b7:a0:72:
f8:48:0b:15:08:9f:88:88:84:9e:ae:6b:c8:35:9e:
09:f2:cf:2b:4a:fd:2f:69:d1:b3:9c:7f:72:9f:fd:
d0:f4:00:3a:4a:8f:18:6f:1e:b7:69:21:43:82:29:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:1D:67:93:99:05:EF:92:EF:3A:79:A6:BC:37:89:28:59:04:F8
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.96.0/19
Signature Algorithm: sha256WithRSAEncryption
10:87:fd:8e:c4:d4:2b:d7:59:22:e8:a0:36:99:79:27:eb:69:
8d:cf:12:52:55:ca:5e:02:b5:e5:ac:e7:c3:93:32:df:0a:b0:
84:43:60:e9:1b:fa:02:2e:23:bd:30:97:d9:8e:fa:6c:c6:14:
4f:7a:8f:81:57:c2:9e:ba:66:e9:30:f8:ba:12:7f:7c:40:ca:
57:80:d9:d9:7f:a2:7a:a1:09:26:85:98:3b:1b:60:eb:6a:85:
09:68:ec:64:30:c4:e5:8e:38:56:cd:28:bd:29:11:d5:c4:a7:
6c:aa:ea:f9:6a:6b:24:31:33:ee:3c:87:8b:47:3b:1e:63:1c:
f4:d1:bf:ab:82:a0:75:49:fe:9f:d5:de:a4:6e:10:ff:c2:56:
03:fc:7a:22:d6:7e:63:94:36:22:cc:7a:1b:c8:30:c6:a4:12:
64:6c:9d:fc:c1:9f:e0:af:51:32:bb:e3:76:5a:67:45:e2:d1:
45:42:08:0b:85:58:cb:38:f7:bd:ef:c7:24:d0:c4:83:ef:64:
06:a1:10:57:77:dc:54:70:6a:63:45:cc:6d:1f:29:dc:7b:ac:
3b:fd:6e:7e:e0:30:f1:b4:7f:9c:17:35:c7:ac:7b:ad:98:8c:
61:fe:db:f3:cd:88:d3:43:aa:13:bf:d5:dc:b5:9f:98:7d:c8:
60:26:c5:de
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYhCrE6jQS3lSuNEquy2vvAmGTAAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUxMDIxMDAxMDA5WhcNMjUxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMjlkMWQ4NTNjMWQ1NmQyOGQwYjdmNDA0NjljNmFlNTdj
MTMxZDliNTBhNTA3NTk3NGMxYmYzZmZhNzdmNTRmMS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCT/0vOaDNebmE/pRoB+9tcWbV0WghL1cyqOvd/dlKhYWBc
aMLT6+g6ezxnS6srF1QOHmQ8VP5yTKJUDM/csey7Z6KLb81xKwkFnP23iy40KzjX
ZV+Cd55GyJk99julsJQ1MPGskL+fbSPIMegzZkQ+yDUtZssvaQuamqRltpyW4zxu
HJJ21n67oNzXLSdL6LosqzimGZ3Nf7/rE35LmKSIm/Hdb17K+jEQc4Bhp/pTcQ3Q
vQLknKWXwAx5y7+8zbP5SDmkQfLKzU/uB5PDvLegcvhICxUIn4iIhJ6ua8g1ngny
zytK/S9p0bOcf3Kf/dD0ADpKjxhvHrdpIUOCKdAVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUc04dZ5OZBe+S7zp5prw3iShZBPgwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5L2JiMDEwYWJkLWY4NGItNGY0Ny05NmUyLWNlMWE2MjFmOGM1ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUycGAwDQYJKoZIhvcNAQELBQADggEBABCH/Y7E1CvXWSLooDaZeSfraY3P
ElJVyl4CteWs58OTMt8KsIRDYOkb+gIuI70wl9mO+mzGFE96j4FXwp66Zukw+LoS
f3xAyleA2dl/onqhCSaFmDsbYOtqhQlo7GQwxOWOOFbNKL0pEdXEp2yq6vlqayQx
M+48h4tHOx5jHPTRv6uCoHVJ/p/V3qRuEP/CVgP8eiLWfmOUNiLMehvIMMakEmRs
nfzBn+CvUTK743ZaZ0Xi0UVCCAuFWMs4973vxyTQxIPvZAahEFd33FRwamNFzG0f
Kdx7rDv9bn7gMPG0f5wXNcese62YjGH+2/PNiNNDqhO/1dy1n5h9yGAmxd4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:12 2025 by rpki-client