
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08177198-181d-4966-8902-c78c6ce01b63.roa
File: 08177198-181d-4966-8902-c78c6ce01b63.roa (raw, json)
Hash identifier: oJz3mzJtcDoAU+6nAVxDyD4kx5FLuvndR0ZFowpllaI=
Subject key identifier: 7C:1F:A4:51:77:3C:97:8F:04:9F:26:FD:C4:DD:16:C8:8E:E7:0D:8A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5CEE125582B3C2FB6573656088D584BAAADFC742
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08177198-181d-4966-8902-c78c6ce01b63.roa
Signing time: Fri 31 Oct 2025 01:36:54 +0000
ROA not before: Fri 31 Oct 2025 01:36:54 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c7c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ee:12:55:82:b3:c2:fb:65:73:65:60:88:d5:84:ba:aa:df:c7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:36:54 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=29a583e0eebc30559afb70c9f44ded825de89d1c1987116f689fbc36472dcaa5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:03:90:ef:ba:68:68:7e:94:60:59:f2:d6:
e2:9d:1a:3d:e0:4c:1a:e3:10:3e:8b:2b:22:fb:1d:
ec:b4:ab:4f:07:58:3b:92:25:ca:b4:07:e2:b8:37:
2c:26:e7:e5:91:17:58:8d:1d:b5:de:f7:40:22:83:
77:ad:d9:5d:6c:48:e2:2f:fa:33:21:c2:61:fd:8d:
1c:0c:43:b1:3e:f6:fe:3c:82:32:99:56:74:48:d1:
32:10:20:9d:c2:a6:05:74:16:57:fa:de:6b:39:cc:
af:1f:ed:9e:f7:84:c2:c3:9e:17:35:b5:cb:2f:3b:
e8:5c:92:a8:1f:bc:8a:40:ec:74:b4:73:65:a5:82:
5e:e7:3c:2a:e7:bb:3a:ea:48:e5:fa:53:14:93:7a:
25:eb:44:3d:2d:92:26:da:3a:ff:0a:e1:c4:de:f1:
a2:b5:4f:7a:f0:8a:16:d2:25:61:41:9d:06:58:40:
1f:ae:f3:ab:43:fe:64:7f:16:e5:06:a7:74:8f:33:
9e:9d:81:a4:ab:f1:2f:f1:3b:fd:0f:32:13:ff:74:
fd:0e:61:39:fc:b6:ff:ef:56:4f:bb:42:4b:9d:3d:
ec:fc:83:d4:49:1f:77:ff:91:30:f1:12:31:c3:1c:
81:3f:75:d2:0f:80:27:13:52:3b:63:3d:57:86:aa:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:A4:51:77:3C:97:8F:04:9F:26:FD:C4:DD:16:C8:8E:E7:0D:8A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/08177198-181d-4966-8902-c78c6ce01b63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c7c::/47
Signature Algorithm: sha256WithRSAEncryption
15:ef:d1:20:7e:1f:f9:9a:fd:3d:de:99:ee:de:55:19:aa:8e:
61:ad:49:32:4b:e0:43:ff:16:be:10:ae:2a:9a:03:dd:be:c8:
76:69:f6:47:bb:0f:a8:b6:65:2e:9b:6d:85:b4:4f:a6:a3:fc:
76:99:10:b7:63:ca:2b:5a:c1:39:d8:e0:14:0b:68:71:20:39:
5e:7d:93:e5:cd:a2:d4:c3:52:b9:ea:eb:fa:c9:c7:b5:dc:b3:
5a:54:c5:ae:1f:c7:70:c3:5c:21:56:d1:71:dc:8c:6d:74:d6:
5a:70:24:7f:14:ad:52:67:71:a4:65:ad:38:9b:78:ae:ad:75:
0f:8b:e6:ee:ce:e7:f8:67:3f:70:37:57:ee:d3:03:b7:3e:0f:
15:b6:46:ab:f0:a4:b4:cf:80:13:7d:81:4f:5b:c7:88:ce:e6:
7b:1f:c6:e9:9d:65:7a:eb:e6:93:45:8c:3d:21:bf:4c:d7:20:
f2:08:92:fe:5b:ed:d2:1e:80:f7:ad:3b:e5:67:de:34:92:54:
8e:c9:6d:c2:92:e6:76:b2:0d:96:ba:14:f7:a2:ab:d8:6e:59:
2b:70:d6:42:b0:bb:7f:03:12:8d:da:ca:91:80:2c:98:60:8a:
8a:bd:3f:87:7f:3d:2a:ac:b5:1b:b4:10:e0:ff:eb:ae:67:6d:
5b:61:fa:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:48 2025 by rpki-client