
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa
File: 2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa (raw, json)
Hash identifier: +HQDb+mhgRyJInXEMr5YtCIOcZ/JDKnqGKlGCpxdxog=
Subject key identifier: 8C:83:A7:58:C5:BA:0A:70:CA:D4:29:6E:3B:F6:BE:2A:11:C1:33:11
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 61749C17C3AE429EFF3D2B05448731FEFA7B2503
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa
Signing time: Wed 29 Oct 2025 00:20:21 +0000
ROA not before: Wed 29 Oct 2025 00:20:21 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:74:9c:17:c3:ae:42:9e:ff:3d:2b:05:44:87:31:fe:fa:7b:25:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 29 00:20:21 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=e960f03f9f9fe054b84cec2eb6959eaddadf74c0595be8ffed13159874b7f677, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:5c:04:41:c1:78:40:be:ca:de:25:95:87:
5c:26:90:3c:c6:95:75:50:24:b5:56:0f:a6:b5:d7:
a9:76:ca:83:5c:ca:61:40:28:e1:6e:b3:0c:f5:36:
14:96:0f:3e:c5:8b:e1:87:0e:a8:d8:97:ad:2c:a3:
bc:cd:49:17:dc:1c:df:db:de:e5:2c:e0:48:e8:91:
74:2e:c6:95:c6:8b:bd:dc:c1:0a:15:6a:29:a3:aa:
19:a8:5e:7b:b4:02:70:e0:6c:f0:c8:67:6a:67:90:
61:a5:43:25:30:d4:06:44:91:33:99:9c:ce:0b:9b:
da:b2:49:96:10:8d:be:14:fb:6c:ef:32:de:35:7b:
f9:54:dd:ec:e4:fc:b1:52:18:c1:05:b7:bc:52:15:
b5:d5:7a:d0:79:ce:ce:61:bf:87:a3:25:ad:16:93:
12:b9:ee:27:1e:64:86:73:5d:c5:23:a4:65:fb:62:
f6:21:46:d4:53:9d:99:75:d0:29:4a:41:82:9b:8a:
26:5f:6e:e9:a2:f7:53:64:7e:31:86:00:82:53:f8:
85:c8:92:f6:51:d1:18:d0:b5:30:24:d0:38:d5:d4:
a0:39:2e:5b:1e:29:d9:07:ba:60:56:7b:43:fe:af:
e9:d1:e1:a3:3e:13:84:41:d9:5b:ee:07:ad:a7:ab:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:83:A7:58:C5:BA:0A:70:CA:D4:29:6E:3B:F6:BE:2A:11:C1:33:11
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.229.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2b:36:9d:05:49:48:0c:8f:02:71:1b:48:76:54:e7:e3:5d:
0b:aa:2c:e8:82:36:2d:98:a2:53:a9:a3:7f:f5:f0:7f:f4:29:
5a:7e:79:09:60:37:7d:ac:46:d9:4c:69:c0:8b:8c:e3:80:54:
1d:9c:bf:44:c1:eb:44:f2:98:21:3b:34:38:4d:8f:71:73:67:
2f:b4:63:fe:ed:58:64:99:ec:28:90:ff:3c:ce:47:fc:56:0c:
50:6b:da:1b:e8:77:43:cd:13:4c:8d:a9:76:ac:39:3d:de:44:
8a:4d:b1:9e:08:91:3e:fd:3c:19:6a:2c:31:62:bc:c2:20:1d:
b2:95:2a:38:50:10:6c:73:d3:32:2d:bf:39:e6:ad:98:9f:61:
da:3b:00:38:39:ba:90:69:72:6b:51:ae:f9:d3:f3:01:d5:10:
2c:1a:50:6b:70:04:17:37:7c:26:49:65:e6:4f:c8:d7:9a:f2:
06:97:e8:11:a7:cf:10:bb:a4:5a:d6:fe:a0:e7:c7:af:eb:75:
b8:df:81:ae:e1:77:9b:25:f6:a8:45:45:d6:b0:32:b5:bf:0c:
09:39:d8:0b:a7:21:05:0c:c9:f1:67:90:ea:75:5d:12:b9:00:
84:69:62:39:1d:5e:df:f4:da:2e:9b:07:9e:41:62:fa:fc:50:
6f:7d:90:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:52:13 2025 by rpki-client