
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1e9c76dc-dbb1-4baf-9981-a4ac53fde9e2.roa
File: 1e9c76dc-dbb1-4baf-9981-a4ac53fde9e2.roa (raw, json)
Hash identifier: 5RYF7A33Jnft+KIMrSEibMCGHSgA4ySbLEETcLLxwT8=
Subject key identifier: C1:87:FE:9D:54:13:38:A0:42:E1:E2:98:D9:AC:02:26:CA:61:FA:C0
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0BF94A9B467FF7A62045F17CBC0637334D22A6A6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1e9c76dc-dbb1-4baf-9981-a4ac53fde9e2.roa
Signing time: Thu 30 Oct 2025 20:37:10 +0000
ROA not before: Thu 30 Oct 2025 20:37:10 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1244::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f9:4a:9b:46:7f:f7:a6:20:45:f1:7c:bc:06:37:33:4d:22:a6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:37:10 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=43f6ed9bfb6d5729a3e59bdd17b48c7d391a2e139dccae9e8b17cc84044da4f7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:4e:e7:a1:22:a9:9f:93:44:12:68:4c:57:
46:ce:29:16:a1:fa:dc:58:a5:7f:a8:1b:87:d4:61:
b9:82:14:bf:40:03:31:d3:73:94:14:5e:8a:ed:01:
95:42:75:59:10:c4:66:8b:03:87:8b:11:e4:22:c2:
8c:ed:2d:c8:47:06:0a:c7:31:7f:6f:cf:e7:a5:6c:
1e:9c:78:33:6e:e8:78:9e:ad:6c:00:e9:80:5d:25:
bb:99:b0:a8:da:a2:05:ab:48:14:93:dc:4d:e9:25:
22:51:0d:c0:dc:4a:0c:47:b5:a3:41:21:57:52:ca:
f6:89:39:31:3b:dc:4f:17:ce:a5:b7:66:c1:a7:a7:
16:11:fd:73:a4:d6:86:de:86:94:71:7d:c0:4f:5f:
9c:b5:02:0b:51:08:b0:b0:9f:ac:cc:57:40:26:09:
87:64:1b:0f:9b:a9:5a:63:cb:a3:74:3f:dd:22:15:
17:e0:89:96:a6:fe:d6:78:a0:bf:e5:79:1b:22:c5:
57:3f:ee:d5:c1:4c:80:a1:b9:81:3a:b7:95:d0:a0:
ad:03:e1:b3:f2:9c:89:69:5d:36:50:51:1c:b7:b5:
11:db:03:98:38:ea:62:08:1d:65:a2:49:68:1b:d2:
4e:43:a4:50:04:f7:3b:45:24:bd:01:b2:2f:9e:3b:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:FE:9D:54:13:38:A0:42:E1:E2:98:D9:AC:02:26:CA:61:FA:C0
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1e9c76dc-dbb1-4baf-9981-a4ac53fde9e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1244::/47
Signature Algorithm: sha256WithRSAEncryption
a5:39:b5:4f:e0:e7:cf:84:66:a8:69:bf:c6:48:6c:49:c4:ad:
e3:31:85:e9:7d:12:5f:50:11:d7:fc:01:2d:2d:18:2c:6c:27:
1a:8b:da:b2:70:f9:e5:99:a1:90:58:b7:27:16:91:8d:d0:d1:
8f:86:8b:04:d6:94:8d:4a:ee:6d:63:5d:59:69:2c:09:ec:62:
76:82:56:c3:a0:de:11:4c:bf:a3:e4:72:e4:24:dd:33:ff:c7:
a1:b0:ef:ae:68:c5:3f:10:5c:b1:be:0c:9b:ac:e6:7a:75:e5:
c1:a8:cc:cd:eb:e6:20:87:a9:7a:85:a4:eb:da:0c:b3:83:28:
2f:4e:9b:13:08:dc:2b:1a:77:f9:9f:96:f5:b4:97:de:c6:7d:
41:0d:6a:8e:5e:b5:20:de:e3:08:93:27:55:35:94:57:a4:0a:
75:f2:45:03:60:16:f4:f5:f6:e7:39:16:62:ae:e3:c9:ad:84:
cf:63:9e:fe:93:36:ad:da:d6:61:34:a8:0a:f9:1f:5f:29:a7:
c8:90:4f:7e:9b:15:98:e3:be:63:49:35:a1:fb:31:ff:e5:a5:
9e:61:26:8d:87:99:fa:81:58:d2:91:a4:f3:98:4e:e0:33:b7:
83:07:a9:cb:0f:b1:70:a1:48:13:55:3d:58:9b:f3:df:45:07:
1a:bc:f9:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:54 2025 by rpki-client