
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1de914cb-be42-4aea-81f2-6c843a189d70.roa
File: 1de914cb-be42-4aea-81f2-6c843a189d70.roa (raw, json)
Hash identifier: QiQBrxnC/p/ObgdkYppbBmAIVgw61K1dD1g7VYcqLak=
Subject key identifier: B0:3B:F7:26:2D:11:6D:D9:A9:80:37:52:8B:38:F3:2C:A0:B5:CC:0C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 45C77B7D5513CA77722348CF29560E9517AE194F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1de914cb-be42-4aea-81f2-6c843a189d70.roa
Signing time: Thu 30 Oct 2025 23:58:57 +0000
ROA not before: Thu 30 Oct 2025 23:58:57 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:327a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c7:7b:7d:55:13:ca:77:72:23:48:cf:29:56:0e:95:17:ae:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 23:58:57 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=b4364760edb139fd8e26fbf57fb12d472bcdae577d85087d8bcf1b796f504f39, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:1c:8d:c5:d0:a2:1b:3d:d6:3e:8f:f7:50:
9d:93:42:8d:0b:da:4a:91:ec:bc:1a:88:05:4d:05:
73:3a:5e:49:8a:1d:a2:3a:00:a8:8c:e9:07:6c:43:
0c:ed:5f:36:8f:ad:6c:52:2f:47:b5:44:61:03:da:
2e:20:94:d0:c5:01:0e:3a:8f:50:e7:6a:33:45:d8:
34:04:db:31:36:c7:1d:7c:26:b9:33:eb:7a:c7:3f:
f7:3e:2c:29:07:2d:3f:a3:12:b6:10:80:cd:be:21:
dc:9e:6d:5e:df:00:53:7d:45:28:f7:75:82:85:e3:
ff:38:85:ff:e6:d3:7e:59:20:df:2d:c8:7c:7a:de:
d0:c5:0d:66:48:9f:8b:dc:ca:62:8f:06:b9:c3:70:
ef:2d:d2:26:4d:be:aa:08:3f:fc:5d:7c:bd:27:83:
c5:56:94:93:25:70:d8:88:8c:92:10:37:e7:a5:8d:
d8:53:09:99:d4:54:ee:a0:93:46:3e:27:41:20:e2:
58:1a:cc:17:0f:59:76:e7:70:79:85:e6:6d:57:09:
96:c3:84:d7:4c:d8:f9:8a:b0:e6:34:fe:17:15:bd:
a1:6b:22:b7:fb:96:4f:45:b9:d1:58:9c:7c:d4:e7:
86:65:96:fa:cf:61:93:1c:e0:d4:b5:95:fe:db:a9:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:F7:26:2D:11:6D:D9:A9:80:37:52:8B:38:F3:2C:A0:B5:CC:0C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1de914cb-be42-4aea-81f2-6c843a189d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:327a::/47
Signature Algorithm: sha256WithRSAEncryption
82:d8:30:62:56:b6:3e:bf:f9:09:8f:97:11:52:0c:f8:e3:4b:
77:82:d9:cf:e8:47:61:db:5f:29:95:d4:b0:56:1f:eb:68:36:
2e:ee:f4:05:95:17:db:c3:41:70:e3:1d:28:5c:a3:05:93:21:
27:cc:66:81:ee:fd:ea:81:27:5a:56:25:4c:c9:fc:a2:d3:28:
7c:51:d5:8f:55:60:3c:7e:fd:13:2e:09:08:bb:0a:71:ff:3e:
53:97:7f:b4:50:4d:75:c3:0d:9c:c2:01:67:bd:c5:91:38:e0:
7f:92:44:bc:de:bf:fd:6b:2d:c8:92:c2:b7:ae:ae:c1:09:40:
eb:75:6e:a0:af:5a:35:f0:5d:49:60:88:b1:ca:71:65:0d:1e:
5a:8c:7b:6c:25:da:29:42:31:b5:7a:c6:bc:1c:bd:f4:15:2d:
d4:13:95:27:17:a2:1a:0e:d5:54:c4:6c:fe:0f:52:35:9b:83:
07:13:9a:a9:7a:f5:c4:d2:9a:7f:28:90:ff:48:7a:34:0c:7b:
2b:70:b3:0d:47:56:cc:b8:dd:32:a6:9e:24:23:f3:54:a9:09:
33:bb:ca:8c:4b:7e:6c:fb:be:09:a0:dd:d5:5b:3c:91:87:fe:
fe:89:06:39:1d:e5:f0:5c:82:c6:aa:3a:42:a4:c4:f7:a3:4c:
03:98:40:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:36 2025 by rpki-client