
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05f1de50-cc26-4a66-80cc-d677b763f189.roa
File: 05f1de50-cc26-4a66-80cc-d677b763f189.roa (raw, json)
Hash identifier: nGNUr+wX84vFSDAw49+NxYbxtFyIqX2bmjYpUaG9vpQ=
Subject key identifier: 28:D4:5A:A2:F8:5D:4C:37:62:F3:E8:37:1E:F9:89:63:CF:30:2E:E5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 18C2A724375F2E848E1C99E5A33566E80984D03B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05f1de50-cc26-4a66-80cc-d677b763f189.roa
Signing time: Thu 30 Oct 2025 21:27:23 +0000
ROA not before: Thu 30 Oct 2025 21:27:23 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1720::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c2:a7:24:37:5f:2e:84:8e:1c:99:e5:a3:35:66:e8:09:84:d0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:27:23 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=8965d8f7c154536cfefa1b1c035a53b55bf8bda0067349e0d43acce3f1396154, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:1e:8b:73:61:c4:b1:ef:5b:a0:61:5d:9f:
17:fe:1f:fc:29:59:ca:43:e2:86:3e:93:37:99:f8:
8b:ba:c1:ce:b2:39:cd:41:30:36:1b:ad:15:af:b1:
2f:2d:fd:cc:9b:95:11:2d:91:d5:60:81:01:42:5a:
6e:fa:b2:48:c9:c8:96:db:75:e7:9a:a0:d3:ac:c0:
af:ae:cb:42:82:3a:a4:3d:7b:b5:a9:d7:70:6d:57:
3d:2f:87:b3:17:b5:e1:8e:9b:a2:36:cc:f7:6a:60:
af:2a:0b:9f:80:72:1a:0b:b8:7c:66:29:f2:0e:e4:
76:98:7f:9e:03:4a:54:d3:76:ef:3c:27:a1:73:92:
a3:b8:f7:3d:80:ec:3c:ee:4a:00:a4:99:5a:f5:c4:
19:c1:d7:1c:70:ab:14:e7:1a:cf:fe:88:df:4f:e9:
f8:16:cb:95:7e:44:2d:cc:1f:da:d0:aa:df:b6:1b:
cc:37:0b:12:80:d3:15:f3:44:8d:af:71:2c:3f:f5:
63:4e:b5:b1:35:60:ab:26:c7:23:7b:cd:1a:48:f6:
ae:cf:9b:5c:de:ca:98:5c:7f:3a:3f:e5:78:9f:b9:
9e:51:e4:2e:c8:1d:31:15:1f:fe:62:52:c8:b0:cd:
41:4d:f7:df:57:f2:e6:d2:ba:28:6f:8c:52:2f:9a:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:5A:A2:F8:5D:4C:37:62:F3:E8:37:1E:F9:89:63:CF:30:2E:E5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/05f1de50-cc26-4a66-80cc-d677b763f189.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1720::/47
Signature Algorithm: sha256WithRSAEncryption
62:30:2c:5f:c1:47:85:28:b1:7d:46:6b:98:a8:0c:f7:14:97:
c1:7a:20:20:7d:54:ba:49:ab:b6:a6:d9:5c:2f:41:56:55:df:
ea:49:07:d1:8e:9a:0d:3b:5f:16:f4:0d:fd:a1:90:8a:2e:03:
c4:0a:0c:85:50:5c:9d:1a:1d:a6:9e:8d:a1:4d:00:9d:4a:b2:
d1:8a:81:13:59:32:af:41:35:b9:68:57:77:9e:f6:0a:7d:15:
e6:7a:78:47:ca:e2:c5:8b:26:9f:2c:65:d0:3c:ca:0e:b6:17:
21:b5:65:5e:4e:ea:dd:64:b0:02:7b:1b:8c:dd:ce:ee:00:24:
a3:e1:98:9f:81:6e:31:18:40:92:a1:75:ad:36:7a:b9:0f:19:
e2:37:e4:22:54:84:af:11:63:0f:cc:77:34:08:f2:90:7a:02:
84:af:71:39:e6:85:9f:d5:47:0a:ff:31:d9:63:ff:65:1b:a4:
7f:43:e3:35:a5:bf:29:b7:50:cc:ff:74:1c:0a:9e:ad:5e:7a:
15:93:c5:b2:e0:bd:e9:43:e4:ab:6a:7a:83:eb:14:34:f9:31:
80:9b:bd:63:1a:52:00:43:de:df:34:54:c7:32:d0:57:7d:bc:
09:2e:1a:ba:f2:05:60:90:2f:96:42:a9:2e:f8:30:22:cc:82:
20:b6:67:71
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGMKnJDdfLoSOHJnlozVm6AmE0DswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyNzIzWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4OTY1ZDhmN2MxNTQ1MzZjZmVmYTFiMWMwMzVhNTNiNTVi
ZjhiZGEwMDY3MzQ5ZTBkNDNhY2NlM2YxMzk2MTU0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLih6Lc2HEse9boGFdnxf+H/wpWcpD4oY+kzeZ+Iu6wc6y
Oc1BMDYbrRWvsS8t/cyblREtkdVggQFCWm76skjJyJbbdeeaoNOswK+uy0KCOqQ9
e7Wp13BtVz0vh7MXteGOm6I2zPdqYK8qC5+AchoLuHxmKfIO5HaYf54DSlTTdu88
J6FzkqO49z2A7DzuSgCkmVr1xBnB1xxwqxTnGs/+iN9P6fgWy5V+RC3MH9rQqt+2
G8w3CxKA0xXzRI2vcSw/9WNOtbE1YKsmxyN7zRpI9q7Pm1zeyphcfzo/5XifuZ5R
5C7IHTEVH/5iUsiwzUFN999X8ubSuihvjFIvmrBnAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKNRaovhdTDdi8+g3HvmJY88wLuUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA1ZjFkZTUwLWNjMjYtNGE2Ni04MGNjLWQ2NzdiNzYzZjE4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAFyAwDQYJKoZIhvcNAQELBQADggEBAGIwLF/BR4UosX1Ga5ioDPcU
l8F6ICB9VLpJq7am2VwvQVZV3+pJB9GOmg07Xxb0Df2hkIouA8QKDIVQXJ0aHaae
jaFNAJ1KstGKgRNZMq9BNbloV3ee9gp9FeZ6eEfK4sWLJp8sZdA8yg62FyG1ZV5O
6t1ksAJ7G4zdzu4AJKPhmJ+BbjEYQJKhda02erkPGeI35CJUhK8RYw/MdzQI8pB6
AoSvcTnmhZ/VRwr/Mdlj/2UbpH9D4zWlvym3UMz/dBwKnq1eehWTxbLgvelD5Ktq
eoPrFDT5MYCbvWMaUgBD3t80VMcy0Fd9vAkuGrryBWCQL5ZCqS74MCLMgiC2Z3E=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:24 2025 by rpki-client