
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c95dcd8-5bb7-4e25-8f05-cfb2f426f184.roa
File: 1c95dcd8-5bb7-4e25-8f05-cfb2f426f184.roa (raw, json)
Hash identifier: airCCni/pBHlIPgVoRXo87QW50Lrjd6mHJrZRvPau5Q=
Subject key identifier: C1:75:17:C5:C3:E2:28:EF:2C:68:8E:B4:33:9B:0B:F4:A0:91:66:A7
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3E73E2001E9AD9BF6D7CDA9564CF43FD8C026009
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c95dcd8-5bb7-4e25-8f05-cfb2f426f184.roa
Signing time: Fri 31 Oct 2025 07:52:05 +0000
ROA not before: Fri 31 Oct 2025 07:52:05 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:73:e2:00:1e:9a:d9:bf:6d:7c:da:95:64:cf:43:fd:8c:02:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:52:05 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=0c75a8ebfc906431579025d96264aa6acc0924190bcbb5d78a068e41f2bb1e40, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:4c:60:cf:36:b2:8c:2a:45:be:46:51:35:
1c:ed:e3:10:e2:15:52:a6:df:b7:bd:e3:14:e4:01:
61:c4:d2:18:3b:6c:a1:09:0f:a2:82:18:e4:d2:ef:
3b:4f:f0:cd:b9:ee:88:fa:cf:dd:ed:fd:e0:2d:e4:
33:27:8c:27:ff:0d:eb:89:86:d2:c2:e0:ba:3b:5e:
74:7d:87:43:c8:b1:2e:5a:1e:16:04:66:48:03:f7:
5b:e9:9c:dd:ae:75:96:93:48:dd:26:5f:f1:03:ba:
5e:fe:fc:a2:0a:d7:d1:80:db:f3:ef:8c:69:c1:a1:
b5:a0:50:71:8e:25:58:4e:6b:a8:a9:01:8d:7c:99:
c5:15:7d:22:ae:7d:5c:f8:1d:4f:46:f3:98:86:13:
99:e9:57:87:ac:0f:93:d3:7f:24:0a:71:c8:4b:8b:
56:65:1b:d2:b0:81:88:f0:5b:fb:98:8f:cf:6d:db:
63:bf:51:77:0d:98:fd:9c:65:4d:c0:dc:0c:1e:e6:
5d:88:a2:b3:9d:d4:d7:6f:24:b0:21:02:41:81:e8:
b4:61:6f:b9:c2:05:3a:7f:6c:3a:e0:40:e0:ed:79:
ef:b4:cc:07:68:a7:79:b4:72:a2:be:8d:17:2a:80:
12:26:5f:c3:af:d0:93:fc:18:a4:4a:cf:01:16:09:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:17:C5:C3:E2:28:EF:2C:68:8E:B4:33:9B:0B:F4:A0:91:66:A7
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c95dcd8-5bb7-4e25-8f05-cfb2f426f184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c00::/41
Signature Algorithm: sha256WithRSAEncryption
90:e7:31:84:11:7d:61:7f:2d:de:8c:bf:3d:6e:e2:df:c7:dd:
09:fe:9d:ec:31:a1:14:89:ae:c2:2c:65:3a:c2:25:be:cb:8c:
c4:75:59:e4:98:67:e1:fd:45:ca:03:e8:3c:e0:08:2d:15:99:
00:d9:03:a3:42:43:ce:d6:ec:bc:bc:e2:a7:c5:4b:87:5d:3f:
da:0d:77:18:08:cd:e8:4d:3c:05:00:16:fc:8c:39:d6:1c:a3:
b9:fe:14:f3:aa:82:f0:3f:e0:9a:a5:b7:78:1b:4e:27:58:9f:
6f:1a:a6:62:4a:3a:a0:3b:61:bb:64:5e:9e:cc:31:8f:b0:13:
1c:38:04:63:e3:25:56:4c:62:81:98:1a:84:e0:10:92:9e:9f:
45:e1:ae:3d:ad:03:71:15:da:5a:a7:07:39:6c:fd:11:3f:1d:
2c:af:42:b1:d5:2c:39:15:50:35:d3:7f:cc:10:5f:b6:f6:d7:
ed:5c:e4:82:4b:df:7a:93:53:04:a4:2a:22:5d:6e:b4:22:b6:
76:64:c1:9e:82:e2:87:f1:67:ca:db:ec:ac:08:f5:1a:17:d1:
14:4c:b0:c8:14:44:40:76:4f:d3:8e:76:24:9b:b5:a0:8a:b8:
ad:88:68:35:69:36:41:da:7f:df:f1:68:1f:d6:a1:6d:18:77:
85:60:36:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:03 2025 by rpki-client