
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/206e05d3-7730-4579-9cab-5157cc3d0872.roa
File: 206e05d3-7730-4579-9cab-5157cc3d0872.roa (raw, json)
Hash identifier: tWMBtMUD1FBdIeCLd8vU+yIhuDfgkI58e+YShARilDI=
Subject key identifier: CA:13:20:B5:0D:9B:C2:E1:12:AC:18:D9:5D:9C:6F:84:50:3A:E6:BC
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 46FAE7D4618F13A31669E1D01FA9C224BF4E61B8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/206e05d3-7730-4579-9cab-5157cc3d0872.roa
Signing time: Thu 30 Oct 2025 21:51:56 +0000
ROA not before: Thu 30 Oct 2025 21:51:56 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:192c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:fa:e7:d4:61:8f:13:a3:16:69:e1:d0:1f:a9:c2:24:bf:4e:61:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:51:56 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=26618c194104c422149bff3de58591b3f1262f3799aad67538ae55f677ee3392, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:d1:33:77:bb:01:ed:83:b5:9e:50:63:bc:
41:96:00:2f:23:24:94:3b:ba:13:a0:a8:7f:aa:fb:
c6:0a:5c:f6:73:54:85:6e:07:6c:20:dd:77:78:39:
93:57:90:10:86:b2:0f:e6:bd:3f:fb:08:9c:c5:a6:
15:39:fc:c8:62:9d:73:3a:d3:e6:b1:d0:4f:ff:45:
bc:48:ab:13:1f:0c:bc:17:22:ee:e0:3e:ab:31:1b:
79:21:98:1e:66:41:b7:07:19:b3:a2:2d:55:b2:3b:
2f:cb:7b:68:41:da:5a:3e:60:cb:af:94:ba:74:98:
de:43:e9:18:21:ac:db:7b:24:ab:cd:09:7e:65:5d:
15:de:5b:8e:3c:24:ec:e0:9f:aa:07:b7:ae:02:09:
45:23:78:31:8b:ff:70:8c:48:48:41:40:f5:54:3c:
6d:42:1a:28:6c:ad:29:bc:84:39:bc:ee:31:a0:fa:
ba:fd:51:8c:18:e3:a9:43:16:f2:59:36:37:6a:92:
cc:2b:59:9a:8e:19:7b:c5:98:47:96:b8:83:fd:32:
fd:49:07:73:5f:51:e9:1e:8a:9b:8c:d9:91:e4:89:
a5:6f:d4:2a:5f:47:6e:c9:9e:74:b5:df:d7:47:95:
a3:02:c3:80:e1:8d:d4:dd:39:51:8a:ef:a7:2e:00:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:13:20:B5:0D:9B:C2:E1:12:AC:18:D9:5D:9C:6F:84:50:3A:E6:BC
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/206e05d3-7730-4579-9cab-5157cc3d0872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:192c::/47
Signature Algorithm: sha256WithRSAEncryption
08:cd:f0:18:0d:f9:d6:69:18:fa:a9:ec:09:1d:1c:ae:d3:81:
a4:f6:f6:95:53:be:31:2a:3f:1b:24:de:b2:0a:b0:9f:f6:25:
8d:6d:b2:f2:78:fd:88:b6:5e:ab:5a:1c:bc:cc:f4:5e:09:03:
d3:af:6f:fa:be:d2:5d:5a:8d:7b:c4:1c:6c:6e:f0:72:14:39:
6d:6b:87:35:ee:85:1d:b8:19:ef:ab:64:cb:55:e3:66:93:37:
d9:65:12:08:25:ac:6a:be:f2:9a:54:d4:ec:5a:c1:b3:76:5b:
f7:2d:33:92:e3:4c:c6:29:61:f9:46:03:40:36:1c:6e:f0:04:
b3:96:b1:5b:35:64:50:aa:39:58:ca:6f:67:a7:03:51:f8:43:
38:ff:f8:11:0b:1d:f9:0f:9f:f1:85:01:5e:63:16:05:63:27:
c7:4e:cf:d0:51:dc:ee:0a:7b:07:be:28:ef:ce:bc:ac:59:89:
1f:f8:95:ad:7b:3e:20:0d:9a:74:93:a8:75:4e:3d:fe:e4:58:
2f:b2:fb:40:ce:b7:f8:e3:e8:73:94:58:c0:6a:d7:5e:39:13:
fd:36:5d:89:86:f3:ef:7e:d7:5c:e0:37:f8:6e:dc:cb:ad:72:
0c:1a:cf:7b:10:fe:d8:05:2a:a0:64:26:ab:43:a2:11:c4:a0:
a4:96:69:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:39 2025 by rpki-client