
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/043b5ba0-0881-4d23-a75b-f741e68f56e5.roa
File: 043b5ba0-0881-4d23-a75b-f741e68f56e5.roa (raw, json)
Hash identifier: 3IQ8uQcP+olmPtvkNV1OatmA2yJ8qEuGqkfJu3v34No=
Subject key identifier: C3:7E:78:EA:03:9C:76:81:6B:70:98:57:16:09:69:2C:4A:3F:5B:2C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 76308B1DBE2C04E7A73E133B9D465E8EBFE80682
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/043b5ba0-0881-4d23-a75b-f741e68f56e5.roa
Signing time: Fri 31 Oct 2025 21:53:32 +0000
ROA not before: Fri 31 Oct 2025 21:53:32 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:a1e0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:30:8b:1d:be:2c:04:e7:a7:3e:13:3b:9d:46:5e:8e:bf:e8:06:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 21:53:32 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ae7fce235af7da0607413253fe3517587cf6d2613d678e5a3a45d22b7d7fdc9b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:b6:50:db:56:df:db:3b:96:49:43:19:32:
7d:b0:dc:f8:05:8a:b7:7c:7f:82:3b:e5:75:85:e9:
e9:9f:6c:3f:33:a0:4e:91:ad:0e:b9:cb:cd:00:b5:
86:7a:24:b8:52:48:ba:27:23:ea:f8:1a:2f:2d:72:
1d:36:8e:a9:60:9b:58:75:71:cf:54:ac:62:8f:f4:
b5:5a:ee:f9:00:67:ed:72:20:db:c5:6e:c5:86:5c:
5c:97:c2:05:be:ea:8d:89:e2:b5:2c:e4:b0:dc:d3:
1d:53:f8:5a:91:6e:63:0c:e0:03:1c:d8:e5:04:e7:
c4:ae:97:eb:f0:f6:4c:c4:50:13:3c:1e:57:7c:9b:
2c:19:6b:12:9e:5a:3a:26:63:41:a5:42:5b:e7:be:
01:3c:2d:bf:43:82:0c:1e:a5:f9:4f:48:5e:79:e2:
04:b5:25:cb:ec:1f:74:67:9c:2d:9e:2f:03:24:09:
69:cb:ba:2d:70:19:47:5a:e3:7a:38:9e:dd:11:73:
e1:a0:96:8c:ba:3f:bc:f2:7a:87:5a:40:59:20:c0:
80:5f:7c:09:a4:70:aa:ac:53:0f:df:ca:51:cd:92:
6f:84:a8:e7:b2:d1:75:c9:d6:56:ee:c0:79:5e:c5:
3b:90:b9:e4:52:5f:f8:87:0f:60:8d:a6:1b:73:7d:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:78:EA:03:9C:76:81:6B:70:98:57:16:09:69:2C:4A:3F:5B:2C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/043b5ba0-0881-4d23-a75b-f741e68f56e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:a1e0::/43
Signature Algorithm: sha256WithRSAEncryption
3c:c7:cb:59:ce:c2:e8:32:34:48:8a:4d:8d:bd:ea:4f:db:80:
a3:75:ed:48:84:bc:18:be:46:78:f1:70:54:5f:29:fa:cf:b2:
17:a3:59:41:f5:9a:8e:ec:f7:2f:48:81:07:68:92:f6:ad:59:
62:12:c5:76:e5:e6:30:5b:26:d2:50:39:7f:79:fa:ab:a0:aa:
cd:f2:a4:61:a7:bb:19:b0:c7:b8:85:b8:7e:eb:ee:00:73:0a:
93:c9:e8:0b:ec:41:91:2a:f1:52:28:67:fa:d9:04:b1:a5:75:
8c:c0:ca:0e:c1:10:65:6b:27:11:85:9d:0f:40:1c:93:24:de:
c6:13:b8:cb:7a:4d:6f:2d:ad:0e:a2:03:68:4a:d8:80:3b:ba:
93:79:75:b6:bf:cd:9c:50:8e:fe:94:80:94:66:8f:60:96:5e:
ed:69:e1:54:f3:67:14:25:78:af:96:b0:7a:96:93:4f:c5:df:
f2:48:b2:a3:59:71:e8:a5:3d:a1:c7:79:c3:24:fb:ba:ee:6a:
e6:6d:ad:0e:90:25:00:e5:bf:c1:f8:fd:eb:9a:09:fa:b7:b2:
1c:2e:6f:b3:cf:04:85:05:f2:45:0a:fc:ec:65:a9:7a:08:c2:
7a:bd:c5:7c:18:eb:59:c4:db:c2:59:fa:35:b7:4c:38:7b:da:
30:40:b3:c0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdjCLHb4sBOenPhM7nUZejr/oBoIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMjE1MzMyWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZTdmY2UyMzVhZjdkYTA2MDc0MTMyNTNmZTM1MTc1ODdj
ZjZkMjYxM2Q2NzhlNWEzYTQ1ZDIyYjdkN2ZkYzliMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLirZQ21bf2zuWSUMZMn2w3PgFird8f4I75XWF6emfbD8z
oE6RrQ65y80AtYZ6JLhSSLonI+r4Gi8tch02jqlgm1h1cc9UrGKP9LVa7vkAZ+1y
INvFbsWGXFyXwgW+6o2J4rUs5LDc0x1T+FqRbmMM4AMc2OUE58Sul+vw9kzEUBM8
Hld8mywZaxKeWjomY0GlQlvnvgE8Lb9DggwepflPSF554gS1JcvsH3RnnC2eLwMk
CWnLui1wGUda43o4nt0Rc+Ggloy6P7zyeodaQFkgwIBffAmkcKqsUw/fylHNkm+E
qOey0XXJ1lbuwHlexTuQueRSX/iHD2CNphtzfYgjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUw3546gOcdoFrcJhXFglpLEo/WywwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA0M2I1YmEwLTA4ODEtNGQyMy1hNzViLWY3NDFlNjhmNTZlNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwUmAJAAoeAwDQYJKoZIhvcNAQELBQADggEBADzHy1nOwugyNEiKTY296k/b
gKN17UiEvBi+RnjxcFRfKfrPshejWUH1mo7s9y9IgQdokvatWWISxXbl5jBbJtJQ
OX95+qugqs3ypGGnuxmwx7iFuH7r7gBzCpPJ6AvsQZEq8VIoZ/rZBLGldYzAyg7B
EGVrJxGFnQ9AHJMk3sYTuMt6TW8trQ6iA2hK2IA7upN5dba/zZxQjv6UgJRmj2CW
Xu1p4VTzZxQleK+WsHqWk0/F3/JIsqNZceilPaHHecMk+7ruauZtrQ6QJQDlv8H4
/euaCfq3shwub7PPBIUF8kUK/OxlqXoIwnq9xXwY61nE28JZ+jW3TDh72jBAs8A=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:51 2025 by rpki-client