
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
File: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (raw, json)
Hash identifier: NlrHfe4Hs21KURaF8JKooWV3agvATo+wXjr9Z9iFPtU=
Subject key identifier: FA:50:28:F9:A1:71:24:06:57:A1:2E:7E:A1:93:4E:17:6C:9F:56:47
Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial: 6AAF8A341D6E18F6FC0E0B883018636E9C58A551
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
Signing time: Tue 04 Nov 2025 00:10:08 +0000
ROA not before: Tue 04 Nov 2025 00:10:08 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 62785
IP address blocks: 2605:b140::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:af:8a:34:1d:6e:18:f6:fc:0e:0b:88:30:18:63:6e:9c:58:a5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Validity
Not Before: Nov 4 00:10:08 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=9ac5afb6e57b7b7a7a21450c5ca838d59ccf863e97ddea2348ec29d3b075f218, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0a:81:7f:98:9a:d8:a8:c3:02:3a:80:38:a5:
55:77:1d:19:c1:59:7d:95:af:5b:f3:e6:84:7a:6b:
49:f7:17:20:06:79:df:bb:6e:c5:cd:66:a3:7c:a1:
b2:41:f8:4a:43:eb:06:fb:d4:94:e4:64:df:f1:49:
17:c7:18:a9:a6:b2:c4:c3:16:f6:0d:a5:0b:53:9e:
a7:69:93:0b:af:e3:e6:77:a7:c4:9a:61:a7:0c:de:
43:c2:e8:54:36:95:f3:51:57:e4:31:7b:4b:c4:e8:
73:c0:89:f4:65:e7:45:ca:29:77:8f:97:9d:82:9b:
22:3d:e9:e3:0b:18:13:75:e6:86:b7:50:83:cf:7d:
c5:f0:af:02:43:01:18:81:f0:af:6f:80:b5:e9:72:
53:fc:44:4c:58:57:2c:55:b9:c8:29:72:87:26:41:
50:16:fa:8b:7f:e3:8c:da:ca:32:29:7d:42:7b:46:
71:fd:48:06:06:b3:51:e9:52:da:d2:62:57:49:28:
a9:29:ea:0c:c4:5f:c1:58:0a:ba:6f:f4:b5:a7:6d:
d1:a8:59:34:db:e2:06:a3:ed:6b:d3:83:d2:56:16:
c8:58:0e:fa:ff:d4:01:75:34:b6:7c:af:0e:a8:26:
7a:0a:32:df:5d:45:f4:82:2b:30:1b:61:3a:4e:e7:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:50:28:F9:A1:71:24:06:57:A1:2E:7E:A1:93:4E:17:6C:9F:56:47
X509v3 Authority Key Identifier:
keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:b140::/32
Signature Algorithm: sha256WithRSAEncryption
46:62:f4:9f:96:34:91:1f:f3:c0:8f:7a:bf:3b:9f:f9:df:12:
0b:24:59:6d:30:d6:0d:8e:11:ea:ac:ea:49:70:c1:87:cb:c7:
60:2d:5b:fc:77:43:b3:fd:e5:2d:f7:96:e2:f5:42:46:e2:52:
5f:01:7b:3d:dd:b8:71:0e:83:f5:7e:63:24:60:82:a4:b8:26:
d7:70:9f:a4:0b:dd:f1:37:ac:76:12:0c:54:e9:78:de:3c:6f:
c7:1d:f9:0c:d1:68:34:65:58:05:ee:72:37:96:b6:0c:56:6d:
a7:2c:57:1b:09:6b:95:8e:97:b6:3d:38:c3:7e:6f:16:c8:c8:
de:9b:9f:a2:eb:89:cc:7a:cd:0f:b9:1c:e2:ea:84:aa:e3:69:
f9:64:6e:0e:4b:25:5e:c1:5d:28:2f:9c:04:11:0a:4f:b2:80:
ea:c7:38:c2:b2:c0:6d:e8:be:1f:99:a5:cb:f4:cd:e0:d6:25:
ca:1f:a9:11:8f:5d:4e:0c:ef:48:15:fd:56:63:d3:10:ae:8c:
61:e1:22:75:53:ae:5c:3c:c4:dc:80:8f:ba:ae:a1:80:77:77:
10:13:2b:24:5b:11:f5:94:d4:3a:ab:ab:3c:c0:df:b4:ac:d3:
34:13:25:81:ac:9f:40:28:09:2f:47:d4:a3:c2:da:e8:ab:f6:
0a:04:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:37 2025 by rpki-client