
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a0eb6a6-d797-499f-8d38-eda09f89b137.roa
File: 0a0eb6a6-d797-499f-8d38-eda09f89b137.roa (raw, json)
Hash identifier: YZpi4Wq+RTwQyvzNEP0AdjAfQC0hhp7qhg7nyvlIvro=
Subject key identifier: 19:C7:D8:B7:A3:11:BF:3F:99:01:13:23:1C:97:94:EE:E8:1F:F7:03
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 11A3C1128ECE1B77CE2A85E092CC0735D5E94E39
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a0eb6a6-d797-499f-8d38-eda09f89b137.roa
Signing time: Fri 31 Oct 2025 04:55:17 +0000
ROA not before: Fri 31 Oct 2025 04:55:17 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3eb8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a3:c1:12:8e:ce:1b:77:ce:2a:85:e0:92:cc:07:35:d5:e9:4e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:55:17 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=b023debb2517f3b849d57526457de0dc4726f053ffd9e70372ac28887e5c0c0c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:4e:87:75:d1:8c:d5:6d:34:25:7d:96:4d:
7a:9a:84:c7:fd:53:3e:54:e5:6b:bd:f5:33:ba:18:
ba:21:38:4d:ff:a0:0a:37:8d:54:5c:ff:ed:fd:20:
5c:cd:32:c5:43:a0:e9:25:fd:02:ba:93:54:21:56:
f0:58:24:12:f0:2b:34:7f:df:b8:86:02:7b:e4:40:
c7:ec:ae:32:5f:4d:e3:bc:51:bd:c4:16:56:0c:04:
3f:08:23:44:d9:5f:e9:1c:9f:10:d7:b2:31:02:23:
10:4c:c1:80:e1:d1:49:73:94:64:8f:d8:6c:3b:82:
45:d7:54:a4:41:8d:ec:97:15:84:21:1a:ca:5b:75:
bc:99:bf:0d:be:d7:06:f2:f4:b0:49:0b:f8:9e:96:
97:41:2c:7b:d2:1f:e1:e4:fb:0a:f5:90:a6:fe:e9:
62:dc:f4:b3:a3:51:08:33:1e:40:a3:f4:ea:7e:5e:
42:f1:a0:9a:73:1b:b7:34:28:24:f2:25:dd:aa:c2:
5e:c7:5f:73:b3:a6:73:86:eb:7f:68:9e:b2:1e:8a:
24:e8:3b:43:fa:72:da:46:a8:a4:51:a6:85:64:d1:
31:ea:38:af:71:27:e1:06:09:8a:f8:86:08:56:15:
14:6c:1d:12:17:79:7e:06:c0:60:7c:75:a0:f8:ff:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C7:D8:B7:A3:11:BF:3F:99:01:13:23:1C:97:94:EE:E8:1F:F7:03
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a0eb6a6-d797-499f-8d38-eda09f89b137.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3eb8::/46
Signature Algorithm: sha256WithRSAEncryption
08:ab:fd:20:ee:04:e9:41:59:c3:14:7f:70:5b:3c:08:49:07:
64:05:49:05:fc:82:09:ff:70:d6:4b:82:ec:04:70:28:4c:e5:
b3:ff:d6:22:68:2c:6c:e3:a3:dc:b8:c6:48:64:06:4d:c7:77:
82:d5:71:12:5b:6c:d9:c6:38:17:64:87:dc:d5:70:f5:46:8f:
14:d1:f9:12:8d:36:96:ef:57:54:d8:2d:65:56:68:12:92:ec:
1f:c5:7c:78:96:68:0a:3f:08:db:85:26:d5:7b:39:e7:a0:f0:
e5:f9:a0:70:88:32:09:e6:cc:69:9a:52:9a:85:41:83:ba:e8:
e4:bd:9b:ad:55:d8:60:9a:fa:f0:43:8e:19:6c:26:8a:ff:7d:
95:2e:e1:11:d3:83:44:c5:2a:4b:f4:a3:04:e2:02:18:e7:82:
c9:9f:e8:95:68:6e:59:e9:d6:d5:0c:ed:5e:5d:85:28:2a:58:
a8:44:48:36:64:c6:93:e5:7c:be:66:80:4e:d6:ef:c9:e7:a3:
63:7e:dd:fc:ff:b3:88:9b:e2:c3:76:87:fb:99:4e:1b:94:1c:
c1:0a:ec:b7:df:84:f3:f7:bb:24:92:fe:5a:12:c1:ca:dc:1d:
b8:c5:bf:4f:75:54:e3:61:b3:c4:86:d6:de:cc:96:f0:6b:a8:
f2:5d:a5:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:04 2025 by rpki-client