
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22a5ae26-12f2-4699-bd04-0153bd88a2d2.roa
File: 22a5ae26-12f2-4699-bd04-0153bd88a2d2.roa (raw, json)
Hash identifier: zPHL9h12VvzD2cCv3hsV1FzlbwzmvHvv0UxWKSBxLs8=
Subject key identifier: 05:A4:CE:FE:A7:4D:82:4B:28:9B:FF:F2:43:AC:E9:BF:D7:97:7B:7E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 54FD6E69756AE395D673554B26A39AB37DA1E2D9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22a5ae26-12f2-4699-bd04-0153bd88a2d2.roa
Signing time: Fri 31 Oct 2025 07:21:57 +0000
ROA not before: Fri 31 Oct 2025 07:21:57 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:27a0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:fd:6e:69:75:6a:e3:95:d6:73:55:4b:26:a3:9a:b3:7d:a1:e2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:21:57 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=bb3690ecf9071c442448596eaf08c19449c1f4763b60a0fadd8a9aa77a2081da, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cb:9b:6d:dd:8e:c5:60:84:7f:a8:45:bf:b0:
0a:33:7c:b6:ac:b1:b5:13:13:cb:7b:34:c4:06:79:
b3:a8:00:e2:0f:64:38:e8:12:75:91:3b:8f:fb:74:
c0:25:89:cc:69:b7:16:21:46:33:12:4e:a3:89:6f:
16:c2:b6:3e:e9:c2:06:f9:de:7f:ae:38:0c:ef:d4:
4e:84:bf:de:ed:f2:b5:3a:c5:63:f4:92:1c:ea:8b:
aa:f2:56:bf:6a:f1:31:c7:40:ce:59:5f:fd:1d:77:
4a:71:98:54:b4:84:b8:e5:de:ad:f8:b1:7f:1b:f4:
ca:c8:47:32:a1:33:43:98:34:0c:95:18:5b:bf:2c:
cf:b9:b9:50:fd:6f:a4:62:c5:dc:c2:92:81:f4:ca:
ed:32:25:19:56:55:bc:92:f4:04:99:32:44:3d:57:
c0:93:97:6f:c6:ad:8c:cd:da:81:db:b6:28:08:c5:
0c:b3:55:3b:cb:8f:62:2b:a2:b6:53:88:38:ed:aa:
f7:82:9d:c1:82:f8:33:32:95:dc:fc:24:b2:b9:45:
75:c7:ff:1f:7a:fd:32:24:a4:21:bb:04:42:98:3b:
07:d9:10:16:c5:e5:50:84:17:6f:8d:fe:49:8a:2e:
e2:81:7f:d5:9c:5b:a2:ed:4f:43:93:35:de:a7:53:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:CE:FE:A7:4D:82:4B:28:9B:FF:F2:43:AC:E9:BF:D7:97:7B:7E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22a5ae26-12f2-4699-bd04-0153bd88a2d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:27a0::/43
Signature Algorithm: sha256WithRSAEncryption
5d:9b:93:96:f3:91:a9:87:c6:87:80:04:16:b0:f8:55:b9:34:
12:26:a9:ff:4b:ab:ef:9c:b3:7e:e0:a7:bd:3d:4f:04:f7:cb:
95:97:8f:5e:4d:5d:f0:88:28:40:bb:9e:3a:b2:26:10:74:12:
98:da:5f:65:16:fa:6f:27:bd:d8:8e:a6:56:fd:50:20:76:78:
f6:1e:8e:fa:b2:89:09:c6:2c:3a:f8:9b:1b:10:ab:74:6f:f7:
69:40:0d:93:55:9e:c4:07:43:af:93:f5:a8:73:6b:45:53:36:
07:9a:af:1b:bc:bf:cf:dc:b2:98:fd:e6:3a:19:0e:dc:0a:3c:
a9:30:b4:79:f7:2a:3d:e9:5c:d0:0e:08:21:94:d2:90:a6:3e:
f4:e3:21:74:94:95:41:e5:f1:c8:60:85:72:f3:9a:8b:4f:3e:
5d:a6:fc:86:f1:e5:26:41:f5:7b:0c:b5:dc:3e:10:2d:9a:15:
69:44:08:7f:2f:d2:0e:9e:2b:06:7e:5b:fa:22:a7:54:f2:31:
64:82:a8:4a:14:d4:08:8b:e3:74:c1:13:0b:76:6f:b2:84:e5:
7e:d9:d4:57:ae:6d:11:21:a3:44:7d:73:07:0b:03:2e:3a:0a:
4d:c3:72:16:60:5d:d1:4e:e1:67:a7:24:52:46:85:53:90:7f:
89:d2:cd:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:48 2025 by rpki-client