
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/209b3e4a-cb28-441a-8ffb-8ddcce93736b.roa
File: 209b3e4a-cb28-441a-8ffb-8ddcce93736b.roa (raw, json)
Hash identifier: 9tlse4GpwZc4cCS4ON6ORigf4Ir6NzOxb8QUUBz3pLg=
Subject key identifier: E5:2C:7A:F4:43:58:E1:4E:C3:1E:53:B9:F2:F2:C7:78:2D:22:4A:3E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1791A8709CC5FC8248CF67ED471FA150FBB5F61C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/209b3e4a-cb28-441a-8ffb-8ddcce93736b.roa
Signing time: Fri 31 Oct 2025 06:58:24 +0000
ROA not before: Fri 31 Oct 2025 06:58:24 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3a40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:91:a8:70:9c:c5:fc:82:48:cf:67:ed:47:1f:a1:50:fb:b5:f6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:58:24 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=c01524aca899ef05e5600889bd81d0a993c17b2a6777879eb6d4b2dfd300989d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:d3:cb:5a:52:8a:2d:3a:85:e3:ca:a0:59:
84:b3:f1:bd:18:55:df:a3:a2:b6:c3:77:1a:f9:c8:
87:ab:0a:9f:5c:2d:5c:ac:a0:3a:e9:eb:8a:60:ac:
ea:90:d3:93:b1:17:77:3d:b7:43:bc:f3:6d:be:9b:
9d:a6:17:0d:11:2f:14:f5:af:89:1b:11:bc:e6:74:
f1:9f:e7:57:33:71:ae:aa:fb:42:84:cf:f5:e9:ce:
cc:f8:fa:66:59:92:d4:c8:7e:89:72:86:d2:d6:65:
18:2f:84:63:40:87:38:23:3c:3e:37:ff:2d:df:47:
79:8e:da:46:31:2f:12:ac:45:50:84:f2:fb:23:95:
01:92:7d:83:32:47:c7:e4:82:4d:ce:1d:a2:dc:7c:
01:3a:29:64:97:01:96:cc:13:0a:a6:5a:77:22:5a:
c1:a2:10:75:aa:aa:bc:c7:31:9b:de:f4:81:c3:86:
ab:b2:07:fc:8d:21:f0:fe:f5:81:d5:ba:01:00:be:
d7:7f:fb:36:73:e5:db:7c:87:e7:25:97:6b:83:19:
c2:c6:81:6f:33:99:9e:eb:58:f8:ce:09:29:c8:09:
cb:c5:b1:78:30:68:eb:2e:87:67:d0:11:f0:98:e3:
24:79:d1:85:a9:3e:59:aa:ab:43:52:99:8f:6f:37:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2C:7A:F4:43:58:E1:4E:C3:1E:53:B9:F2:F2:C7:78:2D:22:4A:3E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/209b3e4a-cb28-441a-8ffb-8ddcce93736b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3a40::/44
Signature Algorithm: sha256WithRSAEncryption
0f:d3:91:e1:06:2b:23:be:5e:91:20:77:e6:67:00:cb:07:9a:
63:19:f7:cb:c6:91:51:d6:b9:99:c1:6e:c5:d7:87:15:e5:e4:
71:7c:0f:d1:01:83:b5:ce:15:b6:87:03:73:00:0f:22:ea:2c:
3c:98:e7:1e:da:61:ab:49:78:61:88:45:47:31:dc:7e:06:e0:
eb:54:f3:dd:a4:c1:bf:8a:87:9a:a7:40:3f:33:b3:8b:5b:ff:
e9:64:9e:ca:4f:9f:b9:d3:a0:71:26:dd:31:16:8d:97:99:b8:
32:5b:28:8e:f1:76:f6:3a:0b:03:90:b5:33:a8:90:d4:28:af:
52:a0:f9:59:7e:d2:c9:ca:01:a7:d8:f7:99:92:0f:21:3c:f3:
df:fe:61:58:d1:16:46:9d:80:2c:ce:b4:ac:cf:62:61:db:5a:
8e:f6:a1:97:33:e6:1f:dd:60:29:da:2d:3f:60:65:d4:b7:72:
f0:73:f7:da:27:da:fc:2a:89:1f:08:28:67:41:51:71:b5:d0:
36:1f:4c:7d:9a:02:97:2b:7a:53:81:ca:26:1a:a5:a6:49:d1:
47:15:2d:17:d0:97:42:3b:a8:e1:3c:1e:a0:79:fb:ce:ac:9b:
67:c5:17:dc:cc:a1:e0:7c:7c:4e:11:e3:6e:63:ce:1b:85:74:
c4:2d:cd:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:11:55 2025 by rpki-client