
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fc0f63f-7425-4a43-88a8-0809404fcd72.roa
File: 0fc0f63f-7425-4a43-88a8-0809404fcd72.roa (raw, json)
Hash identifier: YF+rqNAe0APbUDvY5ZFjch6Epljc/g0vD0y0cmhamDk=
Subject key identifier: 64:0C:32:AE:A5:69:9F:AB:C7:BA:61:90:85:33:96:4B:E8:F9:B1:E3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 04D898357FAFEA0C062DEE428DA87A9B050F081C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fc0f63f-7425-4a43-88a8-0809404fcd72.roa
Signing time: Fri 31 Oct 2025 04:10:28 +0000
ROA not before: Fri 31 Oct 2025 04:10:28 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3518::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d8:98:35:7f:af:ea:0c:06:2d:ee:42:8d:a8:7a:9b:05:0f:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:10:28 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=e26114ca04c90d0b86bed487f5bfb3c2e899e237401e5d1be2124273043239c7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:fa:8d:1f:72:7d:ce:97:5c:11:b0:ef:a0:
c8:5b:42:2c:c1:25:17:42:5a:b4:c5:f9:b1:af:10:
58:f1:36:a3:c5:36:0d:12:ee:c0:9a:ee:f7:3c:cb:
96:6f:f2:8b:ab:14:41:fb:f7:b4:9a:ce:60:b6:d9:
71:80:ea:cb:f0:fd:53:52:66:29:4e:98:f5:51:dc:
f4:c7:dd:d9:a1:14:90:64:eb:41:62:bb:2b:5d:c8:
08:11:13:19:59:ff:f1:d2:1b:d4:e1:c0:51:83:83:
eb:6b:0a:8f:ab:36:30:ad:77:aa:8b:20:63:3f:62:
f5:3c:61:58:b0:87:6e:bc:de:32:5d:6b:28:5b:ec:
ff:96:fe:4b:99:a5:a5:a5:2b:c1:5f:12:b6:19:fa:
aa:70:e2:eb:e9:0d:1a:5d:ef:bc:29:02:ca:a7:bf:
45:2a:55:c6:2c:68:e1:6a:bc:18:4e:e9:37:51:88:
65:ac:0f:33:fc:ec:91:9c:55:7f:eb:32:80:fe:92:
bb:3a:48:af:08:c8:4b:ca:7b:3b:e8:96:b9:ec:d7:
f5:0c:75:47:e8:e1:01:48:72:d9:eb:e9:dc:22:62:
80:32:89:7e:3a:ea:50:24:d3:68:6e:c7:18:c5:06:
dc:62:65:1b:e1:2d:ea:1f:15:41:3b:d7:56:94:09:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0C:32:AE:A5:69:9F:AB:C7:BA:61:90:85:33:96:4B:E8:F9:B1:E3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fc0f63f-7425-4a43-88a8-0809404fcd72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3518::/46
Signature Algorithm: sha256WithRSAEncryption
11:50:27:69:66:b7:ab:07:7f:bd:7d:01:3e:10:f6:3b:e9:b8:
d4:c4:0f:6b:15:6a:cd:06:f5:99:af:61:e0:dd:b3:74:0f:d2:
da:71:23:49:8f:d9:d1:e9:0d:ac:d3:d3:8d:9e:0b:0a:7d:71:
72:60:3a:a2:5b:bd:f8:bc:86:8f:b9:13:8e:08:e5:9c:e5:20:
85:12:86:40:20:2f:bc:e1:f4:42:90:3a:17:ab:d0:c9:fe:c2:
17:76:2a:5b:d5:10:90:4d:b0:70:e4:5d:03:ef:b6:0f:47:0e:
26:48:b7:33:48:9a:9e:78:76:bb:88:18:21:ea:64:83:6b:80:
1d:68:85:e5:d4:6c:c6:67:80:98:67:05:9b:63:05:c9:00:28:
c5:c9:e0:a7:43:65:5f:66:91:50:6b:39:10:f1:a9:99:cd:d6:
17:b5:46:71:44:91:92:c6:ca:15:eb:a1:31:2b:74:54:ed:92:
67:2e:50:9a:3e:6f:58:f6:7c:60:54:84:a7:c4:d2:b5:48:71:
d2:b7:3b:cd:20:a6:31:96:8f:64:d4:87:3a:17:66:e1:42:af:
87:5e:82:32:52:c2:74:3e:a7:e6:56:7c:ad:02:24:d8:4a:ea:
45:c0:ac:38:0c:ea:25:a5:27:a6:31:68:2a:d7:95:0a:f3:a7:
82:ba:86:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:24 2025 by rpki-client