
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/198a606b-825b-4332-a993-ea40278918a6.roa
File: 198a606b-825b-4332-a993-ea40278918a6.roa (raw, json)
Hash identifier: gMJFleAjvwPgorhUV1ARdolArXuIJDGX6iss6OPAy9k=
Subject key identifier: 7A:BE:57:FE:77:4B:A9:DE:B8:E0:37:95:80:40:13:F8:0D:9B:E5:9E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 69F88AFE8E4D6333E052A73C02F203619ECB2F3C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/198a606b-825b-4332-a993-ea40278918a6.roa
Signing time: Fri 31 Oct 2025 04:23:35 +0000
ROA not before: Fri 31 Oct 2025 04:23:35 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:378c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f8:8a:fe:8e:4d:63:33:e0:52:a7:3c:02:f2:03:61:9e:cb:2f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:23:35 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=2725537dd4c66605ab98ee58dab8cc6242a154ad79c8aacc9c76862033d06b60, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:5b:65:91:55:55:4d:6b:7b:53:99:05:e3:
e5:2c:22:6d:7b:83:54:cc:86:e9:d6:a6:1c:69:4c:
25:cd:24:d3:d0:f0:fe:7c:ff:c2:e0:73:b5:cb:58:
53:7f:23:ac:be:42:e7:39:34:d8:a8:4a:7e:81:10:
40:3b:fb:d4:33:a1:ec:ee:10:40:25:f3:d5:e8:f8:
6a:5f:e6:46:6c:97:6f:d7:ca:92:08:44:38:6c:fc:
19:7c:fd:30:3e:49:3b:79:f4:67:6f:e3:66:4b:98:
97:f2:fd:84:dd:36:ef:82:c4:9b:63:b8:f6:63:72:
83:04:14:47:95:43:2f:db:84:79:8a:79:0c:21:32:
13:8e:ed:92:fb:f2:8f:10:c9:6e:91:d1:eb:ec:23:
74:96:58:7b:01:bc:c6:94:1d:e0:c1:86:59:e5:71:
ea:b1:df:e2:6b:90:c1:12:89:88:62:f1:be:56:1e:
11:81:44:eb:79:78:23:f6:c7:78:88:a4:11:63:4e:
3f:81:29:b6:26:38:4a:5e:01:e8:8e:f6:8d:15:84:
8f:e6:2e:06:4a:cc:27:15:9e:aa:84:f2:e7:c4:5c:
f8:fd:5a:71:bb:69:40:ef:e2:87:5d:ea:1f:66:33:
9f:4f:1c:d8:12:e1:02:c4:55:d3:1a:83:3a:89:78:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BE:57:FE:77:4B:A9:DE:B8:E0:37:95:80:40:13:F8:0D:9B:E5:9E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/198a606b-825b-4332-a993-ea40278918a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:378c::/46
Signature Algorithm: sha256WithRSAEncryption
87:18:3f:5b:53:49:7c:5a:5a:65:c0:5a:66:5e:df:59:f8:aa:
0e:47:12:8a:12:fc:ae:ef:27:29:89:de:fc:1a:e9:9c:60:1a:
23:60:fc:87:ed:ac:2b:4b:fa:68:a2:05:2c:c6:d6:a6:22:39:
dd:f8:eb:3e:ca:ed:a8:bd:95:20:c8:0c:d4:d5:f1:85:00:93:
7a:e9:ed:82:12:61:5b:c2:05:fb:99:fd:c0:9a:30:ab:40:da:
1f:0b:a3:5d:aa:90:40:a8:ed:ed:75:0e:f1:80:a2:47:a9:22:
9b:61:31:43:51:98:4e:7d:8a:eb:e4:0d:a8:f5:68:19:d5:40:
71:43:16:26:f6:2a:d0:97:46:b1:7d:d9:24:fe:a5:54:ae:a5:
bb:0e:e5:bd:d3:3c:21:e0:09:f5:6a:6a:4c:85:c2:c4:be:fa:
51:17:d7:7a:8d:63:a8:5b:c7:58:5e:7e:72:ab:5f:3d:bf:af:
32:75:ce:62:35:a0:92:08:a2:d4:55:08:5b:df:09:2f:8a:65:
4b:a9:79:6d:ce:68:19:68:4f:e0:7c:dd:07:93:e6:b1:bc:1c:
4d:e8:a4:26:02:32:a3:a8:b6:75:e0:bc:59:59:fb:04:38:0d:
65:1f:bb:74:da:1d:51:56:92:80:f9:29:f2:de:6f:bc:80:f6:
21:bc:8c:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:12 2025 by rpki-client