
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/035460e1-b1e8-402f-a57d-ca846aab23ba.roa
File: 035460e1-b1e8-402f-a57d-ca846aab23ba.roa (raw, json)
Hash identifier: j33ZNsa1ocqOgJ2yzb377FCwQnvkYhos62tb1RBZ9VM=
Subject key identifier: 78:C1:D7:C9:05:88:C8:CD:2A:01:A8:77:F5:D7:32:E8:46:93:B9:A5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 67C7BB6228B2D8394AA12E7EF90CD1E7A0FB2270
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/035460e1-b1e8-402f-a57d-ca846aab23ba.roa
Signing time: Fri 31 Oct 2025 07:29:15 +0000
ROA not before: Fri 31 Oct 2025 07:29:15 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f00::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c7:bb:62:28:b2:d8:39:4a:a1:2e:7e:f9:0c:d1:e7:a0:fb:22:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:29:15 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=41aeca5350ccf82dd2546e53099456d99ed570ec98955ed975f3c410ec14ed59, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:c5:e8:11:c1:8b:a7:9b:94:3b:11:92:78:
4c:fe:60:87:70:9f:82:4f:0f:28:8f:d0:4c:50:49:
1a:da:3b:42:b1:c5:30:9e:19:fd:c5:ae:fe:19:dd:
aa:fc:41:55:a4:73:95:b2:96:57:b6:fe:d8:82:c9:
9c:79:6e:55:1f:8c:a4:a2:3d:28:6c:0d:b3:a7:5e:
27:dc:9e:3f:dc:cc:d8:77:69:38:04:22:63:dc:49:
9f:2b:4d:2e:f4:10:54:a9:97:04:ad:9c:bd:29:e2:
8e:57:6d:b5:1e:1c:23:7e:1a:ff:0f:cc:21:39:b5:
a9:24:b8:3d:83:e9:10:62:00:1d:fe:25:2c:58:60:
9d:40:68:03:a2:75:df:e0:e9:40:73:13:20:a8:61:
14:1b:eb:44:ea:50:7d:92:17:a1:6d:34:4d:a4:5e:
32:29:87:25:59:49:ae:0b:07:3c:38:bb:dd:db:99:
1a:74:f2:23:e8:88:cd:f9:12:8c:63:a5:4e:33:9e:
98:28:1f:70:91:04:91:80:7a:ec:e0:fe:0a:c6:40:
9d:ae:b9:3a:03:ed:c4:38:98:cf:27:39:b9:63:20:
fc:63:8f:f8:23:f2:43:e5:50:37:39:32:0d:6b:39:
31:ec:2c:c5:99:56:24:f7:0a:7e:00:7d:65:b5:60:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C1:D7:C9:05:88:C8:CD:2A:01:A8:77:F5:D7:32:E8:46:93:B9:A5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/035460e1-b1e8-402f-a57d-ca846aab23ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f00::/43
Signature Algorithm: sha256WithRSAEncryption
67:3a:aa:b7:04:2a:89:52:e4:e9:6f:f0:5f:a5:74:ea:75:75:
0d:fb:d3:95:eb:26:16:7d:a0:89:fc:bd:68:e4:38:9b:bb:cf:
01:41:f0:b2:54:83:a5:8a:f5:79:5b:64:8b:4c:99:4d:c1:6b:
21:3e:c3:e8:6f:25:57:a6:14:3c:43:d4:e2:c2:0c:da:77:a2:
85:22:5f:60:42:51:b1:76:17:5c:b1:32:21:3c:7c:ed:80:13:
6d:1a:3e:aa:ce:cb:04:8c:da:17:78:23:d6:a0:74:e1:ba:4e:
11:a3:47:35:78:e0:75:40:24:61:d1:de:90:77:34:0d:c0:a3:
5d:f0:51:37:53:68:61:9f:19:83:76:ef:c0:3d:8e:5f:60:5e:
0a:af:50:3d:e9:47:d9:c2:22:03:b6:14:9b:3f:1c:d8:99:f7:
8a:1a:f7:86:81:52:a8:38:32:a2:b3:90:66:a3:aa:b1:f2:f8:
96:b8:cc:03:1c:a8:40:7d:4c:ae:fd:d3:13:19:b1:66:a0:7c:
5e:f0:34:fa:b8:1f:8a:75:de:fd:2b:56:2d:64:e2:9d:af:3c:
11:77:06:3d:ee:5f:93:46:32:53:84:38:ea:a1:a4:16:19:69:
08:94:61:5c:f8:e7:1e:d3:e5:bc:e3:67:3c:6f:73:ad:69:07:
db:9d:67:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:45 2025 by rpki-client