
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/13be2828-7caf-4d93-9617-be8ae3d5bec4.roa
File: 13be2828-7caf-4d93-9617-be8ae3d5bec4.roa (raw, json)
Hash identifier: Ilzsr7mmlRaJSznlT1YCzt6tIXbHcxmSIJ9MMEhMVZY=
Subject key identifier: 45:D3:19:8D:30:5D:6B:91:D6:23:E0:23:11:F7:AD:BC:32:F1:A6:47
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 295511F36AC3EC988DF53EED326B19D02D621E4F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/13be2828-7caf-4d93-9617-be8ae3d5bec4.roa
Signing time: Fri 31 Oct 2025 03:36:57 +0000
ROA not before: Fri 31 Oct 2025 03:36:57 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b68::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:55:11:f3:6a:c3:ec:98:8d:f5:3e:ed:32:6b:19:d0:2d:62:1e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:36:57 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=211567f3dd54941a9ec338896226f8abbbb137d7c32838ffe3ed44ddd26cc200, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:95:31:32:c5:3a:c2:7f:3b:c4:0a:e6:d0:
8b:73:bb:96:0d:6c:10:e5:51:f9:b1:4d:54:ac:01:
6a:68:25:0b:f9:71:55:4c:44:c1:c2:a8:e5:1c:de:
5f:40:cc:36:9f:f0:d4:f8:9c:54:5d:5e:13:24:0a:
01:23:2a:65:57:c9:5b:fd:80:23:83:d3:fa:99:ff:
6c:f0:4f:43:f9:ad:da:da:2a:9e:75:b9:62:ac:bc:
e3:0c:86:07:10:43:ec:a8:3e:2e:f9:84:99:c9:54:
8d:a2:7a:f2:52:fd:a2:7c:6a:b0:0f:69:17:81:f1:
72:e8:f5:a2:8f:25:14:4e:ff:6c:fc:a6:0a:13:94:
39:87:90:65:95:fb:97:b2:ce:ca:ef:a7:0d:ee:4a:
84:ee:19:fe:4d:6d:59:fb:ea:10:d3:70:db:19:b5:
a3:4a:d2:a3:02:dc:b6:d6:ac:f1:51:59:e3:e0:7d:
b8:a3:6c:07:f8:98:0e:30:e9:32:4b:fb:58:05:7a:
51:93:54:2e:b2:7a:2d:2c:90:69:4f:4d:d1:95:ff:
94:bb:77:11:28:55:ea:df:74:7a:ce:9a:48:a9:5c:
6e:4a:4f:f6:5f:9a:23:08:50:45:98:a5:4c:b8:97:
72:ce:5f:8b:3b:e2:8c:f0:a6:6f:00:bc:79:a9:ca:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D3:19:8D:30:5D:6B:91:D6:23:E0:23:11:F7:AD:BC:32:F1:A6:47
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/13be2828-7caf-4d93-9617-be8ae3d5bec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b68::/46
Signature Algorithm: sha256WithRSAEncryption
70:fa:b1:5b:2c:b1:eb:9f:c7:9e:d4:9e:08:06:cf:d2:2a:7b:
42:1c:88:e4:eb:60:74:ac:56:5c:4a:da:36:ea:d2:8e:ef:2a:
47:ad:ea:b0:30:15:da:d8:22:16:6d:f6:72:e9:b6:44:cc:ae:
a2:76:06:11:a7:bd:a4:aa:67:6b:26:bc:cd:78:4e:f5:81:6f:
ea:92:24:46:36:af:0c:f2:96:6a:2c:ce:56:d5:f4:2f:6f:fe:
de:03:52:cf:5d:28:7d:bc:95:29:ee:8d:c4:22:2b:c6:dd:d1:
51:1e:5e:26:84:8d:80:70:a1:3d:ba:2c:9a:b3:02:eb:a0:5a:
28:8a:d3:fc:61:d7:1d:47:cc:52:7a:1b:0a:dc:57:9a:56:5e:
e5:16:cc:46:c9:65:6f:9f:84:8f:0f:48:03:f0:77:82:de:92:
ac:f7:20:d0:4b:6f:ac:d1:ae:fc:db:ec:e0:bf:8f:f7:ce:18:
c6:6e:c7:10:9e:6e:a4:b0:43:79:fc:93:73:3c:88:6c:1e:0a:
b4:f9:e9:a6:42:c7:2d:31:3a:80:98:91:70:4c:27:69:3d:9e:
d7:41:88:f4:68:fb:47:f2:c2:33:4e:55:c1:38:a8:94:4a:b1:
db:41:19:51:da:43:7c:30:f4:4a:13:0d:ce:e8:58:6a:ee:7c:
f9:be:ab:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:42 2025 by rpki-client