
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c93df48-a83f-44ca-88b0-22106ddf2f10.roa
File: 0c93df48-a83f-44ca-88b0-22106ddf2f10.roa (raw, json)
Hash identifier: rJDoqtST3EbnB15u8vAV/XahcIR0fS33iboFOLvLQGM=
Subject key identifier: 30:48:A8:25:BD:99:90:1F:76:FF:84:6F:66:5A:D3:A2:40:8E:D9:83
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1C41E4C61BFB0CA6485AE3EE0D3FE32B9E09D3BA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c93df48-a83f-44ca-88b0-22106ddf2f10.roa
Signing time: Thu 30 Oct 2025 22:28:53 +0000
ROA not before: Thu 30 Oct 2025 22:28:53 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1d96::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:41:e4:c6:1b:fb:0c:a6:48:5a:e3:ee:0d:3f:e3:2b:9e:09:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:28:53 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=5d2af21ead7dc245ed2ce350a9b4beac1ecc6494329118c6e0c516a2b388b8c6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:6f:48:e6:3e:55:3f:85:59:e8:6a:8e:38:
dc:cf:cc:e4:8f:84:ef:19:8a:c0:7f:d1:e7:15:4b:
48:0d:bd:db:89:12:7b:84:d1:9d:d6:ef:93:aa:83:
94:03:85:dd:4d:79:19:bc:d2:85:9a:6a:c1:13:6e:
17:ec:f5:9c:6f:25:78:7c:ea:99:32:d0:14:5c:b0:
33:5c:f7:34:00:37:22:16:4a:c6:4d:b9:04:32:00:
c5:e7:e9:09:7b:1e:ef:ab:c5:64:df:2f:0f:cd:15:
48:c9:3f:d8:c4:73:5f:dc:9a:48:9b:ef:c8:53:89:
9f:1f:8f:bc:f1:e4:e1:13:be:58:69:42:a5:c3:e6:
d4:a2:42:e9:36:1a:3e:44:4b:39:1f:fa:b8:ff:ad:
53:87:07:f7:10:dc:7e:f3:e9:c9:e2:7d:6b:2a:09:
c7:6d:a3:66:4a:4b:88:73:ab:ab:13:8e:35:09:79:
aa:65:97:ef:cc:90:cc:0d:a9:ee:46:88:84:46:8b:
31:d9:6e:b5:23:2d:87:7e:11:07:ce:63:ee:98:d6:
0d:5c:99:f1:39:d4:4c:ea:62:c3:04:21:94:de:4f:
fd:d4:31:d5:f4:90:cd:b9:9c:77:53:3a:2c:df:71:
65:85:08:26:48:3a:bd:f5:ae:17:ea:03:77:5b:a1:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:48:A8:25:BD:99:90:1F:76:FF:84:6F:66:5A:D3:A2:40:8E:D9:83
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c93df48-a83f-44ca-88b0-22106ddf2f10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1d96::/47
Signature Algorithm: sha256WithRSAEncryption
49:7f:5f:f8:f3:fa:0e:c4:dc:55:d4:d5:40:57:d6:b3:68:3f:
6c:60:46:7c:24:cd:b8:29:37:ba:e3:ca:1f:44:88:16:e7:3a:
47:b2:54:16:83:7b:5f:40:5f:a8:2b:ca:7f:ff:51:1b:a5:3c:
84:d8:07:a3:3b:d8:4d:6e:40:cf:4d:44:19:14:1c:ed:b8:a4:
e7:84:3f:5b:67:f4:62:19:c0:24:ac:d7:9c:cf:dd:3f:b0:bf:
62:4f:5a:40:c5:10:a7:b3:4d:83:2e:ee:00:93:ef:78:ab:6b:
da:07:5a:55:09:14:ae:c7:03:c8:4c:ff:1b:b2:84:b5:b3:dc:
27:6c:9a:a6:3c:4e:19:e8:f3:ba:b3:e8:e7:b1:97:4e:39:4f:
69:36:59:ba:9a:3c:7b:73:d3:2b:bb:35:60:cc:a0:38:13:bc:
f7:c9:bd:51:d2:3d:8a:da:34:87:fc:f8:bd:44:90:67:cf:a0:
2d:25:25:d4:6e:6a:70:15:05:bd:22:ac:7d:b8:d2:73:a3:90:
98:d0:de:81:c8:1d:95:12:b2:73:c4:51:c4:1d:61:b5:73:1e:
62:59:30:08:2c:f8:cc:14:1e:f9:1d:ef:6c:96:ca:09:a2:04:
95:90:c7:16:1f:75:bf:5e:1f:f7:5b:68:ea:0b:b2:2b:da:1e:
a3:d7:99:1e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHEHkxhv7DKZIWuPuDT/jK54J07owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIyODUzWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZDJhZjIxZWFkN2RjMjQ1ZWQyY2UzNTBhOWI0YmVhYzFl
Y2M2NDk0MzI5MTE4YzZlMGM1MTZhMmIzODhiOGM2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxpm9I5j5VP4VZ6GqOONzPzOSPhO8ZisB/0ecVS0gNvduJ
EnuE0Z3W75Oqg5QDhd1NeRm80oWaasETbhfs9ZxvJXh86pky0BRcsDNc9zQANyIW
SsZNuQQyAMXn6Ql7Hu+rxWTfLw/NFUjJP9jEc1/cmkib78hTiZ8fj7zx5OETvlhp
QqXD5tSiQuk2Gj5ESzkf+rj/rVOHB/cQ3H7z6cnifWsqCcdto2ZKS4hzq6sTjjUJ
eapll+/MkMwNqe5GiIRGizHZbrUjLYd+EQfOY+6Y1g1cmfE51EzqYsMEIZTeT/3U
MdX0kM25nHdTOizfcWWFCCZIOr31rhfqA3dboQzFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUMEioJb2ZkB92/4RvZlrTokCO2YMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzBjOTNkZjQ4LWE4M2YtNDRjYS04OGIwLTIyMTA2ZGRmMmYxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAHZYwDQYJKoZIhvcNAQELBQADggEBAEl/X/jz+g7E3FXU1UBX1rNo
P2xgRnwkzbgpN7rjyh9EiBbnOkeyVBaDe19AX6gryn//URulPITYB6M72E1uQM9N
RBkUHO24pOeEP1tn9GIZwCSs15zP3T+wv2JPWkDFEKezTYMu7gCT73ira9oHWlUJ
FK7HA8hM/xuyhLWz3CdsmqY8Thno87qz6Oexl045T2k2WbqaPHtz0yu7NWDMoDgT
vPfJvVHSPYraNIf8+L1EkGfPoC0lJdRuanAVBb0irH240nOjkJjQ3oHIHZUSsnPE
UcQdYbVzHmJZMAgs+MwUHvkd72yWygmiBJWQxxYfdb9eH/dbaOoLsivaHqPXmR4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:32 2025 by rpki-client