
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a27c438-f2d2-442c-be99-9d674c84fe98.roa
File: 1a27c438-f2d2-442c-be99-9d674c84fe98.roa (raw, json)
Hash identifier: v2rzC8xAlQVD5dihVbjhfn+6eQf+N6oJHF/I+tX+BMo=
Subject key identifier: 02:CD:8F:D7:F8:AE:67:DE:3D:B3:35:9E:47:12:75:53:86:B1:84:B5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 26F3F41835EBA7F205C6E419CFC1E026FF414407
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a27c438-f2d2-442c-be99-9d674c84fe98.roa
Signing time: Fri 31 Oct 2025 03:56:26 +0000
ROA not before: Fri 31 Oct 2025 03:56:26 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:31e0::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f3:f4:18:35:eb:a7:f2:05:c6:e4:19:cf:c1:e0:26:ff:41:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:56:26 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=da02edbe34a5ef937a005e11a3eb1fb607a02c6fd204e3e72588aa0031fcdada, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:37:a9:36:92:af:e5:34:f4:24:67:09:d7:
a1:57:bd:e6:0b:c0:c6:00:9c:e6:8e:b1:2b:2c:9a:
db:a0:62:01:5d:ec:3c:b7:22:f5:a5:92:d0:67:63:
8c:fb:ac:6e:d6:26:9a:cf:57:da:e8:f5:d1:03:42:
76:03:7b:26:56:ac:a3:0d:0c:61:44:cf:b5:fa:c4:
d9:5c:74:22:d9:c5:40:18:53:40:d5:5e:bf:fe:f4:
a1:9d:79:51:d9:95:a0:cb:74:e0:3f:63:f0:a0:99:
12:35:ee:db:b4:cb:e1:80:88:06:4a:2f:65:8b:32:
3e:2a:4a:4b:16:ff:29:b4:14:fa:55:b5:09:77:9c:
de:a0:51:3a:03:40:4b:70:3c:33:d3:e7:a8:78:0f:
db:cb:46:02:25:65:f9:cd:c8:3f:39:1a:3a:b1:be:
57:7f:be:46:77:0d:71:44:c1:db:08:c6:08:8b:a8:
02:b0:78:e4:cc:fd:cf:8b:74:86:c8:cd:be:04:67:
74:d8:76:eb:0b:09:e1:b4:94:b9:86:f9:fe:fa:dd:
4b:69:b9:b3:46:a7:8a:bf:2c:09:d5:c0:f0:36:e0:
21:3e:c6:c3:0b:03:e9:96:70:bf:6f:23:a8:63:ba:
7d:9b:2d:88:ae:8d:8a:05:97:27:46:e5:7d:c3:64:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CD:8F:D7:F8:AE:67:DE:3D:B3:35:9E:47:12:75:53:86:B1:84:B5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a27c438-f2d2-442c-be99-9d674c84fe98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:31e0::/46
Signature Algorithm: sha256WithRSAEncryption
78:ad:8c:39:93:3e:e6:f9:d0:8a:c4:94:d9:db:18:97:56:ce:
62:a1:18:fa:ef:3a:7b:21:9e:2f:e6:c7:40:b6:47:5c:32:e5:
7d:01:b8:ab:33:96:ce:00:e2:3f:0f:a9:2d:d7:99:3f:11:f9:
7e:95:04:5a:6b:97:01:c7:42:69:15:e7:dd:e6:91:a8:6d:e2:
f7:7c:90:bd:ed:f5:30:8c:68:da:65:9b:0e:19:0d:cb:93:8d:
e8:54:7c:21:5c:95:01:59:59:57:ef:54:9e:4b:05:64:ee:1b:
e9:97:93:79:49:9c:6b:56:4a:5b:01:62:4a:60:52:c4:8b:6e:
9c:06:c6:3f:4c:33:28:f8:5d:5e:2e:6c:4d:51:8c:98:16:cd:
6d:b3:16:a1:52:7f:0f:63:93:c9:ee:40:ab:a6:bf:15:e3:2c:
d3:8b:08:92:48:ad:4f:e1:1a:d8:4d:d8:e1:37:96:e5:bc:67:
11:c1:91:78:55:46:b0:63:a0:21:51:57:07:f9:6d:b1:67:6d:
1d:fe:53:c5:ce:6e:df:b4:04:da:c4:7e:95:ef:74:3e:11:73:
f3:c5:48:6c:37:ce:4f:47:8d:a0:1d:aa:e3:f3:96:de:f1:a3:
b8:dd:37:c3:10:d9:48:56:93:07:b4:21:0f:27:0e:89:71:d5:
e2:cc:13:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:44 2025 by rpki-client