
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0c115e9d-b0f1-4548-97d3-623227defd98.roa
File: 0c115e9d-b0f1-4548-97d3-623227defd98.roa (raw, json)
Hash identifier: IUGCxffZQ7kNpSuauEuiscZeftO3pUe0qwlOGKbz84c=
Subject key identifier: 0A:48:6E:C0:46:16:C0:61:40:21:F5:D2:F9:B4:FB:A9:01:0B:7C:B2
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5D447C99B2A6C91276D343B55B7AFE4756376E42
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0c115e9d-b0f1-4548-97d3-623227defd98.roa
Signing time: Sun 19 Oct 2025 05:00:14 +0000
ROA not before: Sun 19 Oct 2025 05:00:14 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2631::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:44:7c:99:b2:a6:c9:12:76:d3:43:b5:5b:7a:fe:47:56:37:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Oct 19 05:00:14 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=832412944b4a59309483cd19496d34892c7e7b89cca0700a97920e03b1110b76, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:db:09:89:8a:e2:64:fd:bb:dc:f3:7c:a2:
fe:bf:b8:96:88:69:e9:73:fe:f3:85:8e:cb:b8:dd:
7d:05:47:1a:c9:60:ce:20:5c:55:55:5e:b5:84:c0:
e5:c3:34:db:42:70:33:32:aa:fa:77:b6:b7:9f:93:
d4:4f:7b:2c:9d:7b:e8:11:28:96:a3:03:e4:93:bf:
65:1b:dd:30:66:bb:eb:92:e6:c7:b3:cb:2a:c3:31:
12:81:09:2e:fa:2c:dd:19:85:e8:84:88:4c:56:c8:
c4:6e:51:95:03:28:3c:99:e5:8b:85:71:1a:82:4a:
a4:0f:8a:13:41:5b:f6:44:8b:56:d2:4b:27:7c:52:
10:c3:b9:58:18:9d:3c:14:26:2f:cb:9e:8e:4b:f2:
8a:55:b5:63:23:94:c0:a8:26:b1:e1:74:a9:31:16:
4f:26:bd:75:eb:db:e2:cc:dd:b8:22:de:d8:99:b7:
10:21:c3:b2:d9:94:c6:d6:e1:a6:ea:0b:46:21:d3:
4e:c7:38:a1:9c:2e:b1:94:23:18:33:5b:45:e3:c1:
2e:b4:9c:c6:38:ec:63:1d:b6:78:c2:2d:9e:bb:77:
71:9e:1b:98:9c:de:53:4e:1d:32:b6:de:e6:83:97:
60:6b:2d:3e:91:5d:cd:62:91:6b:22:74:51:1f:a7:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:48:6E:C0:46:16:C0:61:40:21:F5:D2:F9:B4:FB:A9:01:0B:7C:B2
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0c115e9d-b0f1-4548-97d3-623227defd98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2631::/48
Signature Algorithm: sha256WithRSAEncryption
96:bc:d2:6c:5a:d0:fa:db:7e:d9:23:50:fd:de:ec:a1:10:db:
81:f7:2a:77:a7:ab:be:d8:34:fa:ce:c1:36:d4:fe:c8:d3:10:
ba:c2:1d:a1:42:64:9a:50:9d:2a:10:44:33:19:52:34:b3:6c:
d1:36:0f:80:49:17:5f:34:e8:81:f1:e2:4f:20:c2:23:33:31:
d3:3b:3e:93:53:65:87:96:45:6e:c6:46:ba:a7:90:b5:67:8d:
62:3e:b0:4f:66:7b:e5:ee:8a:57:97:26:f4:09:ec:f4:4f:ec:
85:04:da:20:6e:dc:79:76:9f:94:97:57:02:39:9d:a3:dc:89:
81:2a:1b:23:36:1e:81:8d:08:7d:eb:56:4b:63:0d:f4:59:99:
fb:b2:cc:c4:69:95:40:3e:9f:dc:df:7a:04:18:d8:b3:86:2e:
2d:78:17:d3:89:e9:73:a2:af:f4:28:13:5e:5d:4e:d3:35:b7:
32:a4:23:b2:b1:73:de:b8:fa:94:e4:ae:4d:11:4d:f8:de:0c:
a6:0f:19:95:f3:25:3b:86:40:fb:bd:42:f1:8a:27:d0:81:6c:
ff:0d:01:08:b7:f8:9f:8a:10:9e:1d:c5:02:5f:72:53:b5:20:
fa:a0:55:46:53:1e:1f:ef:93:b5:62:8b:b1:ab:fb:59:d6:ec:
32:28:4e:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:20 2025 by rpki-client