
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04a8df63-431d-466c-9a2e-fdc6aa4279b6.roa
File: 04a8df63-431d-466c-9a2e-fdc6aa4279b6.roa (raw, json)
Hash identifier: ctQF0Tch+f9koWoSeWvz0qDS3ZgIA3Xo/wKqc2gKCUs=
Subject key identifier: B8:F2:7C:49:1D:7B:75:DD:B5:A7:CE:E1:62:C1:C7:C1:52:5C:44:73
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 670EDDE55E3E26B5CCF650AE852E35BC05DDD716
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04a8df63-431d-466c-9a2e-fdc6aa4279b6.roa
Signing time: Fri 31 Oct 2025 02:06:52 +0000
ROA not before: Fri 31 Oct 2025 02:06:52 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f92::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:0e:dd:e5:5e:3e:26:b5:cc:f6:50:ae:85:2e:35:bc:05:dd:d7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:06:52 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4de337b9aa4a3a81b6191f6d1f209f412f176a64d1d219146f13343cc6a13d6f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:fc:ab:7f:07:4f:74:95:80:3b:b0:6a:d9:
37:9b:17:90:f8:a0:b0:2e:89:60:e0:9f:92:d5:44:
9f:0e:d7:11:82:4f:88:4c:21:a1:d2:41:cb:eb:28:
ef:60:69:ec:90:7b:18:a4:60:92:a2:66:a1:9a:70:
e5:81:eb:10:3d:94:5b:af:b0:4f:47:0e:a3:66:ca:
20:3d:27:22:05:51:1e:da:a7:73:4b:a7:c8:37:9b:
bb:28:40:c8:0e:ed:4d:da:af:cf:39:65:ec:b0:21:
c5:1c:0f:d0:89:61:ef:ba:a1:8b:67:bb:11:e5:54:
65:e3:cb:a8:8f:6f:99:f1:55:42:29:d9:15:27:30:
ce:99:ce:c0:18:2f:83:33:e8:20:71:66:3c:66:17:
0a:c1:f2:40:8e:db:82:7b:82:78:9c:21:04:96:f4:
96:ea:45:b5:4c:93:9a:6e:c9:89:ac:31:1f:c1:43:
a4:69:64:ff:7c:22:a2:53:81:f5:6b:29:68:89:56:
35:30:29:71:88:b6:25:59:66:4d:2a:31:8f:3f:12:
b7:ae:b0:e8:69:e1:88:31:5a:29:b3:24:22:c9:ac:
26:a4:2e:65:d7:4d:ba:47:9c:48:03:16:fe:3a:23:
1b:96:87:23:46:67:76:2f:76:62:55:00:82:51:46:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:7C:49:1D:7B:75:DD:B5:A7:CE:E1:62:C1:C7:C1:52:5C:44:73
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04a8df63-431d-466c-9a2e-fdc6aa4279b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f92::/47
Signature Algorithm: sha256WithRSAEncryption
5f:07:f4:21:d3:38:65:12:2e:fc:70:fc:8b:df:1b:68:ec:86:
f1:04:3d:ac:19:cc:f3:d4:02:f7:10:3e:f3:cc:00:82:9d:e5:
ba:76:07:7a:32:47:ae:81:0d:aa:94:5d:69:09:9f:21:f0:75:
f1:4e:00:85:61:35:77:fa:b7:fd:c6:7e:94:66:d3:3d:36:c1:
e6:f6:60:65:07:33:2e:35:9b:0c:f6:31:14:e4:1e:1c:d3:b7:
9d:b8:0e:7b:3e:e6:50:02:6b:0f:5d:b8:ac:1a:82:57:95:e7:
26:f4:84:ca:74:15:8e:5b:d5:cd:c7:49:04:cd:d4:3d:a0:fd:
51:33:67:33:87:cb:8e:56:63:7f:a1:7a:56:67:5c:18:96:e7:
c9:f2:a9:5e:0a:1c:1e:da:06:3a:3b:4f:cb:d1:cb:7a:6c:b8:
c8:84:71:24:96:42:b8:f5:6c:a4:7d:ff:e2:d7:13:71:c9:0d:
ac:47:36:92:e5:41:4d:a1:1e:d5:3f:de:45:3f:02:f7:70:3c:
52:e4:51:ed:0b:30:0e:d6:16:c2:d3:31:05:26:76:72:0a:55:
01:a1:cd:11:bb:c8:2e:9c:91:a0:ce:16:37:1c:6a:df:bf:fd:
ee:26:3c:4c:64:b6:98:75:b4:4e:35:60:4c:00:73:9e:ea:f9:
b3:af:1b:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:36 2025 by rpki-client