
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/01081bbc-2267-42ae-a8ad-b2148e01754a.roa
File: 01081bbc-2267-42ae-a8ad-b2148e01754a.roa (raw, json)
Hash identifier: cce+nQxltb3RxNY1PS9lD3qpXTlrthswsKRim+9O8+I=
Subject key identifier: 17:14:83:6E:36:D4:AA:72:55:41:23:8E:E0:AE:FF:3B:64:2A:6F:E5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 194B8F634297007F29AFDC76AAC0AC833042E8E0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/01081bbc-2267-42ae-a8ad-b2148e01754a.roa
Signing time: Fri 31 Oct 2025 06:55:14 +0000
ROA not before: Fri 31 Oct 2025 06:55:14 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:33e0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4b:8f:63:42:97:00:7f:29:af:dc:76:aa:c0:ac:83:30:42:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:55:14 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=8a5ae4e60a870c16ed23ea443c7b3dbcfd63e7dee3f2fbf8a946df27023d9f8a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:f2:59:30:d5:7f:7e:20:9d:df:67:7d:2f:
31:93:1c:90:38:e2:46:94:6d:cb:d2:4f:99:dc:c4:
70:9d:24:4f:07:64:44:db:22:fc:be:bb:98:4a:c3:
94:6a:02:1d:1d:a0:63:c9:68:e5:ea:62:2a:7b:a4:
fe:12:c3:39:8b:6b:d3:8d:05:61:51:39:2f:e0:69:
70:20:b7:27:34:a8:7a:5b:d0:47:7b:4a:09:90:23:
16:40:4e:51:28:b8:13:40:eb:6b:ae:3c:bf:e8:22:
86:ed:c8:67:ba:5f:68:e5:66:57:86:0c:84:96:47:
31:34:eb:6a:c1:60:8a:74:6e:04:b9:0a:fd:51:ea:
d9:3c:77:55:a0:45:0b:c6:01:cb:5e:06:36:64:7d:
09:3a:a7:43:e4:9a:16:fd:c0:3b:c3:0e:8f:ef:2d:
a3:8c:cb:ee:7f:e5:bb:e8:ee:8f:72:9e:34:1f:66:
b6:12:df:37:14:47:0f:fb:d8:b3:0b:83:d3:9b:90:
eb:57:94:f3:83:5e:ff:42:ef:f0:9a:c7:70:63:4a:
89:45:66:2f:75:5f:3a:d1:a1:3f:83:90:93:42:37:
5a:60:13:1c:53:15:7b:a1:14:c8:98:70:34:9b:b6:
e5:4c:a0:b5:91:40:e5:d0:33:ab:eb:74:1f:53:1e:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:83:6E:36:D4:AA:72:55:41:23:8E:E0:AE:FF:3B:64:2A:6F:E5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/01081bbc-2267-42ae-a8ad-b2148e01754a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:33e0::/44
Signature Algorithm: sha256WithRSAEncryption
41:88:ac:2b:7f:2c:a7:a5:bd:e5:1e:d9:fd:6b:70:20:21:54:
33:d3:ad:f7:19:1f:f6:be:51:1b:a6:6c:24:68:16:34:77:0d:
4b:e1:a9:f1:b2:d8:9d:1a:8f:e0:7e:e6:5b:54:17:73:07:30:
30:48:87:c3:1a:30:dc:c0:51:9d:a2:61:25:1b:1a:ae:30:f8:
6f:99:29:c2:1a:0d:73:e2:3f:c1:e8:55:52:d9:82:7e:a4:c8:
d9:c4:6f:f0:68:47:e8:35:20:44:9d:cc:51:2f:c9:ad:e9:bf:
57:0a:59:e6:e8:02:14:ba:29:47:b2:6c:d1:49:a7:36:5b:59:
eb:78:ac:06:de:72:73:4f:45:d3:c6:7b:39:4c:18:5f:01:32:
19:81:a0:e2:e3:62:15:7f:2a:15:b3:a7:96:f1:a0:0c:4f:d9:
ae:b3:58:47:5d:1c:3c:a1:b5:b7:b6:dd:cc:a9:c5:c3:60:f2:
e1:85:20:4e:79:bc:7f:07:09:24:d9:da:ba:2b:d0:df:86:28:
3d:18:7d:4f:ac:66:16:f4:5b:83:69:0c:ff:fc:b0:6f:41:67:
3e:ef:72:87:1d:23:5b:8c:07:c1:f0:81:38:47:4a:9f:98:7c:
93:3e:53:17:aa:57:67:a9:8a:2d:c9:ff:a5:d2:29:17:b2:17:
d0:f9:c1:1b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGUuPY0KXAH8pr9x2qsCsgzBC6OAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1NTE0WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YTVhZTRlNjBhODcwYzE2ZWQyM2VhNDQzYzdiM2RiY2Zk
NjNlN2RlZTNmMmZiZjhhOTQ2ZGYyNzAyM2Q5ZjhhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnO/JZMNV/fiCd32d9LzGTHJA44kaUbcvST5ncxHCdJE8H
ZETbIvy+u5hKw5RqAh0doGPJaOXqYip7pP4SwzmLa9ONBWFROS/gaXAgtyc0qHpb
0Ed7SgmQIxZATlEouBNA62uuPL/oIobtyGe6X2jlZleGDISWRzE062rBYIp0bgS5
Cv1R6tk8d1WgRQvGActeBjZkfQk6p0Pkmhb9wDvDDo/vLaOMy+5/5bvo7o9ynjQf
ZrYS3zcURw/72LMLg9ObkOtXlPODXv9C7/Cax3BjSolFZi91XzrRoT+DkJNCN1pg
ExxTFXuhFMiYcDSbtuVMoLWRQOXQM6vrdB9THqSfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUFxSDbjbUqnJVQSOO4K7/O2Qqb+UwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzAxMDgxYmJjLTIyNjctNDJhZS1hOGFkLWIyMTQ4ZTAxNzU0YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAM+AwDQYJKoZIhvcNAQELBQADggEBAEGIrCt/LKelveUe2f1rcCAh
VDPTrfcZH/a+URumbCRoFjR3DUvhqfGy2J0aj+B+5ltUF3MHMDBIh8MaMNzAUZ2i
YSUbGq4w+G+ZKcIaDXPiP8HoVVLZgn6kyNnEb/BoR+g1IESdzFEvya3pv1cKWebo
AhS6KUeybNFJpzZbWet4rAbecnNPRdPGezlMGF8BMhmBoOLjYhV/KhWzp5bxoAxP
2a6zWEddHDyhtbe23cypxcNg8uGFIE55vH8HCSTZ2ror0N+GKD0YfU+sZhb0W4Np
DP/8sG9BZz7vcocdI1uMB8HwgThHSp+YfJM+UxeqV2epii3J/6XSKReyF9D5wRs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:29 2025 by rpki-client