
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c4148aa-6b12-4de4-bb3b-aff16d434358.roa
File: 0c4148aa-6b12-4de4-bb3b-aff16d434358.roa (raw, json)
Hash identifier: 8THpS7rm8H2HCssc1C54k9HvgEcNiU+Ad2XROHjak9U=
Subject key identifier: C5:CD:60:84:86:E9:55:60:C8:62:F5:76:CE:00:30:F4:9F:B4:C2:81
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7A0168AA3070930ED621DB0AE8291891CC6102A2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c4148aa-6b12-4de4-bb3b-aff16d434358.roa
Signing time: Fri 31 Oct 2025 07:53:41 +0000
ROA not before: Fri 31 Oct 2025 07:53:41 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:01:68:aa:30:70:93:0e:d6:21:db:0a:e8:29:18:91:cc:61:02:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:53:41 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ce807042acfb24f94757629df9008a80559737ffabc7c5f2ef61c635f6a996d6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:55:55:6e:12:25:a9:fc:53:21:31:cf:50:
07:ac:e5:6e:ed:b2:fa:a3:69:b0:c3:06:65:7f:24:
83:df:41:48:82:be:53:df:16:06:f7:b0:c6:3f:27:
73:5e:84:44:a1:bf:15:a2:1e:cb:1b:6f:a9:fb:66:
db:21:2c:5b:2e:d2:71:04:20:fa:b9:ff:9a:06:2c:
5b:fb:b4:64:55:4f:49:36:cf:0e:24:ff:98:23:fd:
9b:12:69:7b:84:e5:37:f1:cc:46:21:3b:b7:e3:ac:
d7:18:55:da:a9:6c:8a:6f:50:05:9e:47:e1:24:e9:
22:d2:f7:0a:1e:61:ff:3e:44:7e:e8:95:16:4a:09:
97:12:82:01:7b:57:90:8b:1c:9c:65:63:1c:df:7f:
df:f4:af:13:8c:78:a3:6f:a6:80:cc:4b:0d:2a:e1:
16:33:3f:e5:fc:d6:57:df:11:23:9a:44:68:9d:ac:
af:fc:24:03:78:a3:d7:15:93:a9:e0:fb:e7:15:d8:
ab:6f:16:bb:14:01:b4:cb:e8:f5:b5:48:e6:ef:87:
8f:08:1d:d2:4a:18:01:01:28:fe:39:5a:48:6c:e1:
e2:75:a2:ab:dc:71:5d:92:67:46:80:fc:57:34:cc:
12:31:1d:88:c5:a3:42:71:e9:4b:6c:d0:8e:a9:aa:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:60:84:86:E9:55:60:C8:62:F5:76:CE:00:30:F4:9F:B4:C2:81
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c4148aa-6b12-4de4-bb3b-aff16d434358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1900::/40
Signature Algorithm: sha256WithRSAEncryption
87:aa:45:7b:4c:97:f5:84:23:2a:98:20:c3:cf:ef:cb:cd:90:
63:9d:34:79:b0:96:8a:b2:25:a1:af:a0:ca:e9:23:95:8c:33:
7f:f4:ed:9b:68:9b:e6:c8:76:5b:cc:c0:14:cc:17:a4:75:d8:
70:c2:16:66:b0:c1:15:66:11:15:d0:d1:14:da:d8:d4:1e:43:
4c:c2:69:bb:12:a2:dd:6f:1d:61:80:5c:c0:e1:f7:52:06:0b:
b4:71:be:81:3c:1b:00:5a:33:2a:03:24:2c:5a:ec:1d:58:38:
b5:19:1a:7c:9e:1d:fd:a1:f5:d5:b0:de:7b:ad:a6:8c:7d:78:
b7:df:11:e8:3d:b0:3b:e2:42:5c:9a:61:11:08:aa:89:4c:69:
47:9f:33:7e:c0:95:1f:72:fb:80:17:3e:50:64:b9:2e:55:f7:
b9:1e:76:43:58:96:c9:c9:35:62:4c:cf:97:94:98:77:64:9b:
3a:3c:8b:18:90:98:f9:ad:e7:fe:ad:80:32:3f:99:1f:61:0e:
d1:5a:ff:e6:b8:b9:26:e5:e2:82:4e:82:34:d1:b0:80:63:26:
84:bc:a2:4c:90:99:05:f0:de:45:6b:4b:f2:11:97:6a:8c:54:
55:90:21:3b:35:ea:58:9d:1c:f0:13:6e:77:7d:8a:af:21:2b:
75:c0:80:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:30 2025 by rpki-client