
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f7e3795-911f-4972-b7fa-f67ee9150e2c.roa
File: 0f7e3795-911f-4972-b7fa-f67ee9150e2c.roa (raw, json)
Hash identifier: iTxULkdT6RW15/I5On4A7YzgXwP50zT60O4bRX3aFb4=
Subject key identifier: B1:0D:9E:91:C8:C0:FF:56:6F:B0:FA:ED:5A:19:15:E8:E0:0A:C2:C1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 545731E111AA228E56CCF5FDB398AB055503DBB4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f7e3795-911f-4972-b7fa-f67ee9150e2c.roa
Signing time: Fri 31 Oct 2025 06:29:06 +0000
ROA not before: Fri 31 Oct 2025 06:29:06 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1660::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:57:31:e1:11:aa:22:8e:56:cc:f5:fd:b3:98:ab:05:55:03:db:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:29:06 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=eeff71fbf5f4beddb2e7195c90a8997b21a21d7d7fa90d44aebc02ad904fa9df, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:0a:cf:29:54:f2:38:43:58:51:26:fd:6d:
22:9f:40:70:f3:c6:df:57:5b:4e:7f:2d:52:92:c5:
92:93:e4:16:12:90:41:f5:b4:39:f9:c1:34:f1:65:
62:09:d4:1e:35:58:8d:70:b6:df:8a:d2:0e:2b:6e:
fd:2e:cd:86:d7:d6:6a:6e:b9:d8:3d:56:84:20:be:
4f:ec:7d:ad:36:23:e3:43:e3:2c:2c:9a:c6:f3:d4:
77:ef:aa:b7:c1:16:52:b3:31:f2:e5:3b:bb:e7:e0:
61:33:84:b9:38:b4:2b:85:86:61:5d:2e:44:42:4a:
27:b4:ff:75:13:86:d6:43:6a:c8:af:51:7c:9c:51:
4d:31:e9:ca:b0:51:90:8f:d3:70:d8:c6:ec:e7:5c:
90:9e:c6:7c:a7:38:82:ff:01:a9:8d:c5:9a:7d:d1:
8c:a0:08:26:a8:14:12:d5:41:ba:52:c4:c3:cf:61:
93:8b:5d:d9:7c:c4:8e:fb:91:b5:4b:67:40:e5:ff:
cc:62:56:77:b3:0f:dc:d7:30:9a:f1:fa:c3:c2:ce:
8e:5c:4f:0a:c2:0e:bf:86:45:58:a4:60:d7:8a:98:
dd:ea:28:df:30:e2:25:94:f3:95:dc:0b:da:77:b5:
5d:91:42:e2:05:d8:e9:43:1d:f6:20:a5:1f:4a:38:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:9E:91:C8:C0:FF:56:6F:B0:FA:ED:5A:19:15:E8:E0:0A:C2:C1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f7e3795-911f-4972-b7fa-f67ee9150e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1660::/44
Signature Algorithm: sha256WithRSAEncryption
43:ac:9c:77:20:b0:f4:e7:b5:8e:95:6d:8d:d4:61:47:cf:f3:
7e:a1:77:14:b6:6b:77:1c:a6:a2:b4:4e:c4:c3:f3:b2:d4:b7:
0f:26:8a:85:98:13:01:d9:c5:a3:a2:75:48:ff:db:73:2d:35:
b9:a2:db:20:a0:a0:55:9d:53:73:ba:04:a4:7f:31:31:07:c4:
c6:e7:44:e4:56:35:9e:4b:af:19:7d:e0:ce:a6:fa:32:e4:64:
8d:11:a9:11:0f:35:49:41:f7:0e:bb:16:14:86:cc:3b:10:5f:
93:17:6b:49:f6:bd:24:91:88:32:f6:36:58:aa:a0:ed:ba:04:
5b:d9:9b:d1:2f:cd:f7:62:81:20:dc:1c:18:87:02:d5:ae:29:
f4:9b:f1:85:48:b7:e0:27:4e:7f:5b:4d:f6:65:e0:2a:04:19:
83:83:db:df:bd:53:26:fb:ac:61:b6:b7:31:51:57:28:c4:5e:
96:9d:12:d0:12:63:41:0e:bc:98:55:df:99:ec:9f:77:14:c9:
34:81:56:82:b8:2c:df:56:71:40:04:27:85:d7:ec:1f:b1:59:
d0:51:47:15:1e:89:05:6b:4e:1d:ae:29:07:cd:41:44:51:71:
59:e1:43:3f:06:a4:66:27:dd:da:6a:3c:50:15:4d:e2:2e:b7:
42:49:34:3a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVFcx4RGqIo5WzPX9s5irBVUD27QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyOTA2WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZWZmNzFmYmY1ZjRiZWRkYjJlNzE5NWM5MGE4OTk3YjIx
YTIxZDdkN2ZhOTBkNDRhZWJjMDJhZDkwNGZhOWRmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfGQrPKVTyOENYUSb9bSKfQHDzxt9XW05/LVKSxZKT5BYS
kEH1tDn5wTTxZWIJ1B41WI1wtt+K0g4rbv0uzYbX1mpuudg9VoQgvk/sfa02I+ND
4ywsmsbz1HfvqrfBFlKzMfLlO7vn4GEzhLk4tCuFhmFdLkRCSie0/3UThtZDasiv
UXycUU0x6cqwUZCP03DYxuznXJCexnynOIL/AamNxZp90YygCCaoFBLVQbpSxMPP
YZOLXdl8xI77kbVLZ0Dl/8xiVnezD9zXMJrx+sPCzo5cTwrCDr+GRVikYNeKmN3q
KN8w4iWU85XcC9p3tV2RQuIF2OlDHfYgpR9KOOUpAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUsQ2ekcjA/1ZvsPrtWhkV6OAKwsEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzBmN2UzNzk1LTkxMWYtNDk3Mi1iN2ZhLWY2N2VlOTE1MGUyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAFmAwDQYJKoZIhvcNAQELBQADggEBAEOsnHcgsPTntY6VbY3UYUfP
836hdxS2a3ccpqK0TsTD87LUtw8mioWYEwHZxaOidUj/23MtNbmi2yCgoFWdU3O6
BKR/MTEHxMbnRORWNZ5Lrxl94M6m+jLkZI0RqREPNUlB9w67FhSGzDsQX5MXa0n2
vSSRiDL2NliqoO26BFvZm9EvzfdigSDcHBiHAtWuKfSb8YVIt+AnTn9bTfZl4CoE
GYOD29+9Uyb7rGG2tzFRVyjEXpadEtASY0EOvJhV35nsn3cUyTSBVoK4LN9WcUAE
J4XX7B+xWdBRRxUeiQVrTh2uKQfNQURRcVnhQz8GpGYn3dpqPFAVTeIut0JJNDo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:09 2025 by rpki-client