
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/037e8acd-4a8e-4341-85cf-28dbefc8cada.roa
File: 037e8acd-4a8e-4341-85cf-28dbefc8cada.roa (raw, json)
Hash identifier: SNYoWSxyb7ixx1la5g/ugkVcTsdZYqDCmk+YsCYo/IA=
Subject key identifier: 4D:AC:CB:1F:8C:5E:50:4B:96:DC:15:D0:A4:46:96:7A:55:05:DB:73
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 089124B015DF79A1CD0029CAAACF78C57D0272E2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/037e8acd-4a8e-4341-85cf-28dbefc8cada.roa
Signing time: Thu 30 Oct 2025 20:12:09 +0000
ROA not before: Thu 30 Oct 2025 20:12:09 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:264c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:91:24:b0:15:df:79:a1:cd:00:29:ca:aa:cf:78:c5:7d:02:72:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:12:09 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=8395ecc6be6d689981257c2c9538c6daa34d39317fce8edd50b96ea3442aa154, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:48:1a:e5:b9:e3:d6:b9:89:29:4b:5d:a3:
43:3d:46:4f:aa:d9:6c:99:b4:03:61:ed:5f:f1:75:
c3:2d:bb:ea:f6:64:c4:10:30:7b:f3:22:70:72:ac:
f8:dd:12:c2:f0:ca:08:46:f6:b1:c5:65:ce:ca:ae:
34:19:e3:2b:40:50:98:75:07:d1:44:68:d4:bf:71:
0c:2d:75:1e:3e:76:ab:5a:18:9e:57:c7:18:d2:8a:
1e:b7:7c:2f:80:cc:71:39:03:57:cb:41:3a:07:96:
9e:a2:a3:1c:b3:41:3d:b8:fb:f6:7d:18:d0:ac:dd:
ba:04:9a:52:42:08:4b:4d:47:66:93:56:d8:bd:95:
1e:4e:60:b9:6b:ac:0d:52:65:28:02:63:98:e1:99:
31:48:a9:a9:84:35:67:5c:e4:91:27:f3:df:f3:ff:
d9:6b:2c:9f:74:51:19:81:f8:b2:9c:16:1d:3c:ea:
51:33:4d:72:f4:62:a2:76:14:26:2f:af:8b:21:c7:
ed:fa:c7:b2:10:70:b4:fc:84:ad:01:bc:a5:bd:32:
2c:4e:5b:f0:a0:88:4c:09:2c:fd:d1:b9:bd:a2:c8:
52:70:78:7e:88:82:4e:0b:ee:0c:1d:8e:aa:7b:76:
a0:24:7c:64:db:da:43:37:2c:96:a9:af:29:6c:54:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AC:CB:1F:8C:5E:50:4B:96:DC:15:D0:A4:46:96:7A:55:05:DB:73
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/037e8acd-4a8e-4341-85cf-28dbefc8cada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:264c::/46
Signature Algorithm: sha256WithRSAEncryption
39:f3:3b:b4:4b:e5:10:a4:ca:dd:15:96:f9:f6:78:27:e6:4c:
48:51:58:70:72:9d:85:d7:6b:71:bf:a9:5f:2f:69:af:01:a7:
9b:65:c7:47:1d:74:a7:f9:0a:58:08:11:76:11:31:b2:dd:fa:
6c:7f:78:49:18:79:c8:40:33:a7:68:c0:80:d6:fa:e7:03:3a:
1f:cd:16:bb:29:45:e4:6c:38:c3:72:8c:86:45:ed:03:e6:dd:
38:2b:07:7d:90:df:8e:f8:83:05:68:61:5f:bd:32:08:89:38:
86:03:cd:9f:b3:6b:23:bb:a5:30:80:a9:8b:e7:f4:ec:08:9e:
12:83:3b:b9:05:3a:45:fc:6b:da:1a:09:ca:d5:6c:47:c7:f9:
99:f0:6c:16:13:2e:a9:24:cb:2a:0b:ca:7b:0d:fb:5b:c5:2a:
d6:76:c7:cc:90:23:a4:61:b4:f9:14:86:2a:6b:4a:20:92:74:
ad:eb:77:60:36:99:e3:1f:99:9a:9e:bc:d7:e7:9e:9f:08:97:
87:3a:11:db:25:69:83:f8:06:38:82:79:15:cb:d6:2e:4c:c1:
56:c4:9f:6b:7e:e1:97:55:a2:b7:4c:82:43:25:59:20:5a:fe:
2d:82:04:a2:8c:82:f0:94:f0:ce:75:e5:85:d4:7e:58:0e:48:
b9:b4:b4:e2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCJEksBXfeaHNACnKqs94xX0CcuIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAxMjA5WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4Mzk1ZWNjNmJlNmQ2ODk5ODEyNTdjMmM5NTM4YzZkYWEz
NGQzOTMxN2ZjZThlZGQ1MGI5NmVhMzQ0MmFhMTU0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxNUga5bnj1rmJKUtdo0M9Rk+q2WyZtANh7V/xdcMtu+r2
ZMQQMHvzInByrPjdEsLwyghG9rHFZc7KrjQZ4ytAUJh1B9FEaNS/cQwtdR4+dqta
GJ5XxxjSih63fC+AzHE5A1fLQToHlp6ioxyzQT24+/Z9GNCs3boEmlJCCEtNR2aT
Vti9lR5OYLlrrA1SZSgCY5jhmTFIqamENWdc5JEn89/z/9lrLJ90URmB+LKcFh08
6lEzTXL0YqJ2FCYvr4shx+36x7IQcLT8hK0BvKW9MixOW/CgiEwJLP3Rub2iyFJw
eH6Igk4L7gwdjqp7dqAkfGTb2kM3LJaprylsVCPvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUTazLH4xeUEuW3BXQpEaWelUF23MwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzAzN2U4YWNkLTRhOGUtNDM0MS04NWNmLTI4ZGJlZmM4Y2FkYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAJkwwDQYJKoZIhvcNAQELBQADggEBADnzO7RL5RCkyt0Vlvn2eCfm
TEhRWHBynYXXa3G/qV8vaa8Bp5tlx0cddKf5ClgIEXYRMbLd+mx/eEkYechAM6do
wIDW+ucDOh/NFrspReRsOMNyjIZF7QPm3TgrB32Q3474gwVoYV+9MgiJOIYDzZ+z
ayO7pTCAqYvn9OwInhKDO7kFOkX8a9oaCcrVbEfH+ZnwbBYTLqkkyyoLynsN+1vF
KtZ2x8yQI6RhtPkUhiprSiCSdK3rd2A2meMfmZqevNfnnp8Il4c6EdslaYP4BjiC
eRXL1i5MwVbEn2t+4ZdVordMgkMlWSBa/i2CBKKMgvCU8M515YXUflgOSLm0tOI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:22 2025 by rpki-client