
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa
File: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (raw, json)
Hash identifier: icwfOShB4lIKxJpYepHX7ZYBe3ozFzvyzsP4jPUf8Qk=
Subject key identifier: C6:32:2B:F7:A6:67:71:43:2D:22:4B:F2:CB:A8:84:55:5E:DE:A4:00
Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial: 5805395AD5AAF49B8C1B23EB0B3B663CB7395031
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa
Signing time: Tue 04 Nov 2025 00:10:07 +0000
ROA not before: Tue 04 Nov 2025 00:10:07 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:b140::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:05:39:5a:d5:aa:f4:9b:8c:1b:23:eb:0b:3b:66:3c:b7:39:50:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Validity
Not Before: Nov 4 00:10:07 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=d3dd8bc287711ed8356b3fa1e50dec9bf0027721815fbac0119c97584bbbd16b, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:66:3d:7d:0e:fc:42:18:ab:43:1d:0f:6e:
83:5e:f7:cb:56:98:c5:b4:be:ac:2e:1b:6d:56:b9:
f1:76:4b:31:28:ee:ab:34:17:f5:79:89:03:85:3e:
1b:66:19:94:68:4c:1f:46:78:d5:e6:75:3f:9d:6e:
72:42:1c:16:59:96:8b:1b:9c:c2:49:ed:ce:5d:be:
b6:35:99:5d:0d:2b:21:17:08:2b:25:fb:87:e2:67:
c1:d3:df:92:5a:e0:32:2c:a6:70:27:b4:f3:a2:1e:
d4:66:0f:f0:19:04:7b:6b:a1:3f:1a:6e:64:75:f0:
7c:3d:66:49:af:f5:11:7e:42:fb:ff:b6:34:f3:79:
e9:b2:72:14:1a:52:ff:d0:b9:02:03:6b:c7:bb:1a:
4c:17:21:85:68:af:d7:dc:f8:bb:06:83:0f:52:83:
72:73:78:62:5e:62:70:6a:64:e8:25:4b:d3:ea:cf:
53:03:2e:43:e7:3e:c7:ee:01:54:37:fd:9b:ef:f5:
a9:7e:24:09:c8:3e:75:5d:64:8d:60:ac:ac:4c:f1:
b9:cb:19:21:ae:49:b4:94:97:9f:48:ed:2b:3b:64:
98:64:f3:27:11:4d:b2:ff:0f:0c:1a:6d:66:7f:ae:
75:15:b0:e3:1f:7c:be:b6:09:eb:21:26:4b:27:24:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:32:2B:F7:A6:67:71:43:2D:22:4B:F2:CB:A8:84:55:5E:DE:A4:00
X509v3 Authority Key Identifier:
keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:b140::/32
Signature Algorithm: sha256WithRSAEncryption
80:5a:48:eb:ec:a6:b0:d0:f1:cd:0a:f4:01:74:08:6b:31:b2:
15:24:9c:41:18:15:d1:ed:12:71:20:c8:f9:e3:43:c7:a6:db:
c3:21:1f:67:a9:e6:26:05:1b:46:40:ef:45:f8:18:a0:4e:b3:
77:dd:d6:da:46:20:6f:eb:61:d8:73:ed:bf:4d:64:e7:0b:e4:
65:c7:10:d0:01:bc:e1:3f:e6:4c:77:eb:37:49:68:44:21:f7:
ec:ca:75:a1:51:8d:35:f4:1e:25:b2:24:28:93:75:47:1d:77:
5e:58:57:48:de:c6:4c:b7:27:23:48:6c:3d:54:ec:87:3a:cd:
24:77:f9:8e:c2:98:6a:90:80:e6:34:eb:01:d6:5f:c9:ec:8b:
c6:a3:10:97:b9:8d:4e:fc:74:93:eb:d0:28:58:99:80:3b:c3:
5a:ad:ad:a8:5d:c5:70:eb:b6:3a:d2:38:0d:33:6b:93:ec:15:
0e:1a:9b:25:bb:93:40:5e:71:8f:e6:26:9e:5e:1d:66:1f:38:
cd:98:33:59:f4:86:e8:26:de:d2:b9:06:4b:6f:a1:80:84:e5:
64:23:30:e7:e2:6b:09:f9:dd:29:2f:b4:0f:b6:3a:6a:21:7a:
b2:e2:7b:de:28:a1:67:a1:8a:e3:25:74:f8:59:51:88:4d:04:
24:99:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:46 2025 by rpki-client