
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21d15943-d3b7-4aec-a431-f11fd9eb1d94.roa
File: 21d15943-d3b7-4aec-a431-f11fd9eb1d94.roa (raw, json)
Hash identifier: EoV9cf7qZ0SqxAhLeWVecEIIRhxvBmFmOaKpiequ23A=
Subject key identifier: AD:D3:59:6C:CC:B3:66:26:41:04:6E:BF:45:1A:D6:66:00:FB:6C:B9
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1E3F8ABCB0B069F99F036D4B83E178AC3EAEBAA2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21d15943-d3b7-4aec-a431-f11fd9eb1d94.roa
Signing time: Fri 31 Oct 2025 02:21:58 +0000
ROA not before: Fri 31 Oct 2025 02:21:58 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1268::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3f:8a:bc:b0:b0:69:f9:9f:03:6d:4b:83:e1:78:ac:3e:ae:ba:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:21:58 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=72e14914d89d3cde8d324db5520c36a2eceba065f60fe8830f5d47805dfcb1c1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:12:09:62:c0:06:c1:0b:83:ad:05:16:b9:
57:f5:b7:a3:99:fd:f2:06:2f:d4:0f:9f:67:59:4c:
72:d9:17:50:f9:a0:ad:c2:7a:61:ac:ff:41:46:b7:
75:d3:89:e5:1e:5c:15:24:71:c7:ce:0b:b7:df:9f:
56:02:dd:f6:34:43:e1:52:31:b4:50:50:e7:65:ee:
a0:4e:78:0b:3a:67:33:8e:59:81:72:bc:61:ec:e0:
a7:fc:7c:3c:96:f5:c3:8b:7e:13:a6:8c:54:66:ce:
7b:50:cd:a4:44:a0:4f:18:f6:7f:d6:93:7c:6b:36:
5e:90:7a:56:45:88:bc:5f:d1:a5:56:77:92:71:1e:
2c:f2:9b:cc:89:eb:63:de:34:1a:dd:ae:1b:55:5e:
f0:41:75:5d:e5:61:00:1b:76:99:f6:0a:6c:bc:53:
40:d1:55:22:85:05:60:a9:79:32:17:9d:b5:3f:7a:
bc:38:5b:9b:98:45:06:c5:41:a7:a3:bb:60:f1:03:
e9:ae:a0:ec:d4:55:5d:5e:a8:f9:82:dd:61:43:8c:
0b:88:b3:e6:3e:fd:47:e8:b7:cc:bb:8c:4c:af:19:
31:68:00:2a:44:27:4f:bf:1b:c9:08:ed:7b:e8:cd:
5b:ce:3e:a4:56:e3:38:78:5b:63:83:dd:7b:cb:8a:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:59:6C:CC:B3:66:26:41:04:6E:BF:45:1A:D6:66:00:FB:6C:B9
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21d15943-d3b7-4aec-a431-f11fd9eb1d94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1268::/46
Signature Algorithm: sha256WithRSAEncryption
1f:c7:6f:1a:22:dc:b3:c0:70:22:04:29:9b:23:98:15:53:72:
8c:d7:f2:09:94:be:e8:39:56:0a:66:37:29:78:15:cc:a5:fd:
4f:f3:0d:3c:84:94:68:d4:0d:33:37:fb:e3:06:4c:9f:ca:78:
66:b1:e9:0b:7d:ab:08:82:58:5c:c1:11:be:61:06:e8:be:e6:
12:9c:8c:0c:81:1f:fc:e2:db:b9:35:7e:41:ea:e1:9c:10:ba:
db:e5:8a:d2:d4:5e:ac:29:29:9e:b8:04:6f:43:aa:0f:b4:9e:
d4:37:95:8d:5d:1f:71:3e:16:71:63:a1:cf:6d:4a:7f:82:31:
06:0e:2a:df:e3:2c:72:79:38:dc:31:72:3c:41:66:5a:9e:9b:
6c:ad:b6:4c:d7:6a:84:3e:73:55:12:c5:11:de:ef:4d:00:58:
7a:8b:86:98:d4:1b:9c:3b:49:2e:de:59:ba:71:f4:28:5e:1e:
dd:21:a4:82:52:2e:1b:b8:cc:b2:25:68:3e:0e:82:e5:4b:86:
c2:ce:69:41:c5:ac:82:a8:05:63:c2:ea:6a:dc:81:39:35:7d:
bb:9b:82:87:c5:ed:24:98:66:ed:40:e0:de:f9:c9:64:5b:30:
be:10:a6:90:3e:50:d2:07:d0:6f:8d:88:66:7b:4e:a3:ad:aa:
48:6e:1b:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:24 2025 by rpki-client