
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/07895818-095a-45c1-921c-d208e83449cf.roa
File: 07895818-095a-45c1-921c-d208e83449cf.roa (raw, json)
Hash identifier: TjGvVpcMzvOnnWVbiBydyNuP9NQ2GTVFlrFjUEeeWcY=
Subject key identifier: F0:FA:D0:F1:26:F1:16:18:6F:98:85:9F:9A:65:90:EA:FF:F3:B6:0E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2A75E04B2FD5D842E2E81B91DE61F812A1565E7A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/07895818-095a-45c1-921c-d208e83449cf.roa
Signing time: Fri 31 Oct 2025 05:57:13 +0000
ROA not before: Fri 31 Oct 2025 05:57:13 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:33f8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:75:e0:4b:2f:d5:d8:42:e2:e8:1b:91:de:61:f8:12:a1:56:5e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:57:13 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=b8dbb9bee5a865bca7534bffe8f207f7f45344b29d34b68c745ef658be68ab20, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:70:76:02:f6:6f:78:53:bf:41:29:71:89:
42:7a:79:ce:09:2e:26:0e:4a:63:75:13:03:5f:44:
b2:ff:cb:5d:f5:b1:af:6b:30:46:d8:41:81:dd:54:
bb:e1:24:a6:fa:45:ce:08:ae:d3:cb:44:a1:e3:e6:
e8:9c:f5:40:28:67:73:4d:55:be:07:e5:75:d4:25:
36:f1:3c:05:da:1d:63:25:56:88:93:56:74:49:48:
9f:33:73:f4:2d:8d:48:0e:6d:58:1c:0c:98:31:26:
3e:68:97:52:5b:bb:45:d0:8b:9f:dd:f3:53:3f:27:
73:45:14:f0:87:a1:b6:00:67:9e:6a:ee:92:97:cf:
22:61:c1:b4:57:97:40:b2:13:3d:62:8e:fb:14:29:
7c:28:dc:9a:02:86:5a:95:e9:4b:71:f6:17:70:55:
c7:75:cb:cb:af:17:f2:68:b6:4c:ec:86:03:da:e0:
c3:f1:a2:85:cb:2d:dc:4a:1d:84:d6:42:72:de:03:
34:7a:cf:1d:25:26:37:58:87:df:0b:28:60:5e:1f:
85:16:cf:ba:d9:30:d2:a3:17:6d:1b:f6:b8:4f:61:
99:bb:ad:c2:8e:dd:5b:35:4d:70:58:87:ea:92:84:
27:90:ba:d8:82:3d:44:b6:d7:51:7c:25:30:e7:66:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:D0:F1:26:F1:16:18:6F:98:85:9F:9A:65:90:EA:FF:F3:B6:0E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/07895818-095a-45c1-921c-d208e83449cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:33f8::/45
Signature Algorithm: sha256WithRSAEncryption
40:a0:bd:2c:54:4d:19:df:33:3f:9f:92:79:f3:16:30:80:e3:
46:7e:a8:8c:45:e6:3e:82:49:41:f2:72:03:91:81:39:8f:45:
a4:45:c0:ea:37:37:56:2d:11:91:1d:e3:c3:4d:ac:7b:92:5b:
79:33:50:61:a3:3d:b5:93:71:17:40:c8:1f:54:c8:31:8a:54:
5f:d9:d5:24:2c:55:06:9c:52:cc:fd:88:61:ef:35:e3:ca:b0:
11:3f:9e:80:d2:10:3a:ab:64:db:22:bf:46:7b:eb:a9:90:e2:
e8:61:c0:22:50:49:04:10:6e:9e:c5:8c:60:51:3d:1b:c4:aa:
65:90:97:8a:98:25:03:64:92:9e:c1:ab:7b:5c:df:fa:b6:0a:
9a:2a:10:93:b1:db:de:dd:99:b8:87:f0:2a:9f:b5:5a:f4:ae:
6e:9e:f2:50:d6:fb:42:d3:4b:ee:41:35:3c:a9:39:46:6f:a9:
a9:30:cf:1d:35:e1:b2:6b:4d:a4:00:67:d9:4c:66:27:e2:86:
ee:c2:58:62:7a:e5:d4:d9:8c:ec:ea:dd:80:f7:ef:ce:01:aa:
60:f5:ba:53:b1:8e:4b:74:35:c6:c0:b2:b0:69:23:1c:6b:92:
d1:f7:2f:bd:52:2e:8b:e2:e9:70:86:26:64:c8:e0:bf:e7:03:
1e:90:14:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:57:32 2025 by rpki-client