
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/229dfab3-7ffb-4950-bdef-d9207e3715d2.roa
File: 229dfab3-7ffb-4950-bdef-d9207e3715d2.roa (raw, json)
Hash identifier: Lj0JbL1dpgW/EsOJidg3zZXN7fM1h4+j4HSzE0GqAh4=
Subject key identifier: A8:51:92:4C:0D:D3:5B:F7:7C:BD:D5:A8:60:FF:2A:86:95:D6:5D:DE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5F6568345234ABE9154CC284A5D1A3EE16A70271
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/229dfab3-7ffb-4950-bdef-d9207e3715d2.roa
Signing time: Fri 31 Oct 2025 03:06:54 +0000
ROA not before: Fri 31 Oct 2025 03:06:54 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1bd0::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:65:68:34:52:34:ab:e9:15:4c:c2:84:a5:d1:a3:ee:16:a7:02:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:06:54 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4edc5268e239f46978388af7faef42214b733b021088b9d89795094be4db4b91, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:66:96:28:ce:d9:7f:84:41:6b:4f:7b:de:
fa:01:f5:e5:fd:5e:8f:e2:5d:6f:69:7c:c5:98:ff:
ef:2e:ca:d9:e1:6f:6a:43:83:f6:e0:88:4c:7d:6a:
80:ff:4c:5d:08:bf:e7:04:76:c7:ed:9d:4b:4d:e7:
d2:ac:85:f4:ce:49:12:94:76:87:4c:a8:bb:da:65:
26:7f:e9:7e:40:a5:4f:bf:d9:f7:0f:6c:bf:05:44:
54:45:61:1d:40:2b:4a:0f:cf:e1:12:92:d9:c2:b0:
30:d7:a4:69:6f:dc:cb:2b:e8:44:05:d6:1f:dd:26:
04:1a:00:c0:74:84:a7:fe:e7:54:43:11:d9:14:c7:
ca:fa:48:54:13:bb:48:1a:99:0c:9e:40:90:d5:ad:
96:c0:1a:bf:ba:eb:d3:3d:f1:b0:fa:b0:5a:fe:e7:
3a:4a:48:d9:3e:4b:57:0f:ef:6f:8c:c4:70:c6:62:
a5:fb:22:47:0b:be:b3:2e:d9:7a:c1:ae:f6:75:62:
40:df:ce:35:49:fe:6a:1c:3b:a7:83:e8:c6:62:cb:
03:c9:d1:fc:ae:50:c4:4e:23:07:05:dd:6d:74:4a:
43:74:c7:e0:9b:f9:0c:de:f1:31:19:ba:a1:f6:50:
a3:3a:8d:16:33:98:06:6a:fb:14:18:a1:73:ba:94:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:51:92:4C:0D:D3:5B:F7:7C:BD:D5:A8:60:FF:2A:86:95:D6:5D:DE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/229dfab3-7ffb-4950-bdef-d9207e3715d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1bd0::/46
Signature Algorithm: sha256WithRSAEncryption
1c:77:0a:4b:72:18:68:f0:2b:20:c0:e4:cf:d0:e6:d8:07:71:
cd:d2:41:0e:9f:01:85:e5:22:41:02:1f:f0:5b:d2:0b:8a:c8:
53:3e:17:6a:c7:cc:60:30:1c:6a:82:7e:88:a8:31:cc:c8:29:
6a:71:b4:3a:50:a1:c6:1b:95:46:b4:80:15:a0:fd:ce:41:3d:
54:01:5b:b6:b4:cb:4b:f0:e3:7a:f5:05:23:45:ba:af:92:59:
db:c0:fc:c3:fb:d3:51:93:f9:a7:89:a0:91:8c:94:d4:6e:1d:
96:d7:30:00:92:66:40:7d:1a:02:a1:3e:04:7e:13:e9:e3:d8:
36:b2:2b:e1:df:1e:d6:25:5c:b2:f2:63:43:20:16:4a:6d:3e:
ea:33:0c:8e:0b:82:52:19:3b:47:da:c0:47:87:02:8f:34:3a:
77:d0:c3:83:72:70:d7:a8:3c:01:e8:dc:a0:d9:ed:c9:64:29:
2c:be:71:db:63:56:89:1f:96:d7:40:09:e8:72:00:93:c6:fe:
25:80:0b:f8:af:d2:41:4b:c0:c3:a1:39:df:1a:22:02:c8:b4:
bc:d4:58:78:5c:78:ba:81:d5:50:c7:6c:39:09:b2:c7:6b:02:
35:b3:c9:3a:e2:e3:12:e1:4f:5c:7e:9b:47:11:e4:73:1e:f7:
dd:29:a5:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:20 2025 by rpki-client