
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8056e345-5ce7-4f9b-99cc-989f413285bb.roa
File: 8056e345-5ce7-4f9b-99cc-989f413285bb.roa (raw, json)
Hash identifier: RuVC2mPyomsbJvBgr/YG6DQBg7bAK6uFQ+558idtzRI=
Subject key identifier: 25:C7:E2:9B:AD:54:E5:DD:98:0E:F8:5A:E7:A7:77:94:FA:E6:0E:FB
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 16AFFBD765A9B520D7021431A5B32AF693E83998
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8056e345-5ce7-4f9b-99cc-989f413285bb.roa
Signing time: Fri 24 Oct 2025 00:10:06 +0000
ROA not before: Fri 24 Oct 2025 00:10:06 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 801
IP address blocks: 2631:0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:af:fb:d7:65:a9:b5:20:d7:02:14:31:a5:b3:2a:f6:93:e8:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Oct 24 00:10:06 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=7b9e8f348dafc12db03749ee47996a1bb1dc2b7826b8a63d2e1461f9855c1d56, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:f4:50:59:8d:7d:dd:d5:3e:4e:b8:e0:e9:
c2:f5:7b:d0:b8:51:4a:99:b8:55:97:29:95:58:22:
2e:12:47:1f:73:dc:2d:c1:47:8d:14:e9:e6:1b:7d:
d1:ca:79:8e:ec:37:16:25:9c:9e:44:9f:d9:79:91:
eb:72:76:3d:41:ed:38:a4:16:8b:45:84:f8:0f:98:
15:02:97:a6:40:c4:9c:70:ec:77:f2:40:85:21:51:
cc:91:a4:f5:cf:5f:9c:db:78:53:14:d5:c6:6b:8a:
de:48:9d:df:ee:3f:9b:3b:30:c4:cf:8d:20:a1:47:
f9:c6:69:42:e7:f6:42:9e:a2:09:a0:b2:2d:34:d6:
4c:de:74:47:aa:cd:3b:7f:99:78:ca:52:97:97:47:
74:01:82:8f:9f:15:e9:41:d6:3a:3b:fc:a7:05:31:
23:d6:fa:93:42:ea:a5:05:b9:87:14:24:9d:4c:cb:
54:47:5e:8e:7d:c6:b5:11:3a:08:c4:a2:2f:09:08:
13:0d:0b:12:9c:8f:65:60:35:61:e1:d2:13:e2:a5:
6e:ed:48:ec:ad:13:e0:8e:f3:aa:94:2f:65:36:41:
fd:97:06:84:6e:8a:46:21:e6:5b:2a:fc:56:c2:5d:
54:e3:94:46:a1:d3:5a:eb:1e:34:b3:f9:ca:e5:45:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C7:E2:9B:AD:54:E5:DD:98:0E:F8:5A:E7:A7:77:94:FA:E6:0E:FB
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8056e345-5ce7-4f9b-99cc-989f413285bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2631:0:1::/48
Signature Algorithm: sha256WithRSAEncryption
0b:15:72:06:a1:42:af:2a:d3:20:40:bb:03:f5:52:d3:09:8e:
66:11:69:f2:3e:4f:4a:2b:f1:68:52:0c:0c:79:77:18:8a:af:
68:7c:61:0b:1a:14:cc:6b:13:57:b6:73:6d:98:5f:11:e7:09:
c9:63:0e:94:2a:70:55:ae:d1:b9:86:5a:7c:1e:9e:b6:4c:90:
39:f0:53:18:f7:5d:15:68:41:52:36:e5:4a:d3:31:25:0b:a6:
e6:a8:c8:bd:33:6f:f0:43:d9:85:50:c5:07:3e:27:0f:7d:ff:
4e:d2:1d:87:a1:33:ba:d7:25:75:54:a7:aa:19:0a:9d:80:73:
09:71:27:0d:40:6d:c4:6c:74:b1:65:51:a3:64:4b:bc:a7:1e:
03:63:98:86:42:5e:48:6e:fe:2c:c5:ba:9b:3d:ad:e2:67:bf:
e9:5b:a6:b1:29:2e:51:03:4a:de:9e:55:a9:ca:c3:1e:ab:b9:
87:8b:71:5a:a4:cc:5b:19:fd:41:cf:3b:6d:26:60:bd:86:c8:
fc:39:3e:a3:aa:c1:a3:78:24:e0:50:66:a0:72:00:48:c1:57:
50:a7:87:fe:b2:9a:a0:0f:77:dd:92:d1:f4:61:1f:cc:81:d5:
54:e5:17:66:bb:1e:e8:30:ae:6d:ec:d2:b8:e6:02:56:04:1d:
79:e3:bb:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:38:22 2025 by rpki-client