
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22ce9ce6-7577-453d-b516-d789334cbf9f.roa
File: 22ce9ce6-7577-453d-b516-d789334cbf9f.roa (raw, json)
Hash identifier: wXbtlE0+kgobRDaMV10tI/gI3z009L58xW/tq+dJ5ts=
Subject key identifier: B3:78:3A:EE:6C:34:00:98:F1:71:84:45:FC:D2:02:6A:26:C4:2F:A2
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 04FA3CE42873FD2A84A20B5BD60D0C5D283D601A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22ce9ce6-7577-453d-b516-d789334cbf9f.roa
Signing time: Thu 30 Oct 2025 22:59:05 +0000
ROA not before: Thu 30 Oct 2025 22:59:05 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2abc::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:fa:3c:e4:28:73:fd:2a:84:a2:0b:5b:d6:0d:0c:5d:28:3d:60:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:59:05 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=9b7b20387365042f3c99ae4700ae3a52f8c7e649aaae6f46d60aac689e03ae3f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:ba:a7:13:17:2f:e8:4a:54:cd:02:43:2a:
c7:2d:d8:75:27:f2:60:05:89:d8:ca:46:49:33:6a:
6b:9a:7d:08:ef:ed:4f:54:ab:29:09:9a:30:4c:22:
ad:9e:09:f6:b6:a0:46:b4:7e:75:d0:49:b4:09:b7:
4c:ed:08:c5:5c:40:21:c1:e6:e4:09:b8:b9:7a:da:
6d:6f:84:90:60:48:e8:ab:16:1a:a2:d4:b9:78:f7:
52:10:9a:37:ec:cd:4a:87:48:3d:ce:d7:ca:71:ff:
cf:2d:1e:15:cc:2d:0f:33:74:54:6c:85:07:ab:ef:
0e:f6:cd:36:26:8f:e3:cf:7a:77:c1:3c:af:03:85:
f1:01:7e:95:5b:30:92:bb:b3:77:04:f9:cf:4d:31:
25:3a:e8:9e:e8:de:f8:6d:d7:9c:e7:f9:0c:32:91:
c4:26:9e:72:68:c1:e0:4d:27:7c:e3:12:f2:62:3a:
27:59:45:f3:1d:98:cf:af:75:dd:7e:4b:ef:d3:40:
35:97:01:87:2f:2d:46:52:ca:c0:45:05:d4:c3:76:
cf:98:20:df:cc:0d:b8:5e:8e:9a:11:75:89:62:7e:
72:cf:aa:2a:d7:34:9b:52:d3:5c:cc:c6:c4:5a:03:
be:f2:a6:5e:95:f9:fe:83:d9:ee:a2:ed:d2:39:6d:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:78:3A:EE:6C:34:00:98:F1:71:84:45:FC:D2:02:6A:26:C4:2F:A2
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22ce9ce6-7577-453d-b516-d789334cbf9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2abc::/47
Signature Algorithm: sha256WithRSAEncryption
54:64:c2:0c:cb:f3:20:da:2e:19:0d:e2:88:4e:2d:49:58:8c:
ec:02:0e:d3:d6:ed:11:f6:56:06:95:aa:3b:22:1c:14:a3:58:
ac:c6:cf:6f:ad:19:f4:5a:19:1c:b3:5e:94:7e:b5:32:eb:d3:
a0:25:d5:6d:03:17:ac:e2:b1:f5:b3:94:9a:8c:ad:7f:2c:a8:
06:4d:14:b5:0a:5d:53:5b:4d:9b:87:67:ab:fe:ee:84:b6:bc:
c2:65:6e:5f:15:63:4c:59:19:66:03:75:cc:2a:e0:b9:86:53:
f6:f6:9b:1d:b3:55:a3:01:01:34:b5:25:c9:cf:39:1a:be:c1:
27:a7:e3:46:99:4b:65:03:6f:50:66:80:09:a1:1c:fd:70:c5:
6c:29:89:4d:43:1b:28:1b:8a:04:f8:95:82:d4:d4:42:f1:93:
f9:c5:45:ca:d0:be:95:1b:da:65:75:30:20:62:17:e5:81:80:
ad:50:17:14:0f:f5:e0:d9:8b:91:3e:27:53:0c:09:10:74:da:
8c:8f:4c:4b:86:43:34:7d:0f:10:87:62:de:59:a4:ff:cd:f7:
89:12:4b:53:cb:15:9e:46:9c:c1:59:35:b9:75:69:e7:1e:69:
28:8d:83:c7:9f:d1:e0:47:38:cd:4f:89:2d:6a:f8:78:96:fd:
03:dd:af:4e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBPo85Chz/SqEogtb1g0MXSg9YBowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI1OTA1WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjdiMjAzODczNjUwNDJmM2M5OWFlNDcwMGFlM2E1MmY4
YzdlNjQ5YWFhZTZmNDZkNjBhYWM2ODllMDNhZTNmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCT5bqnExcv6EpUzQJDKsct2HUn8mAFidjKRkkzamuafQjv
7U9UqykJmjBMIq2eCfa2oEa0fnXQSbQJt0ztCMVcQCHB5uQJuLl62m1vhJBgSOir
Fhqi1Ll491IQmjfszUqHSD3O18px/88tHhXMLQ8zdFRshQer7w72zTYmj+PPenfB
PK8DhfEBfpVbMJK7s3cE+c9NMSU66J7o3vht15zn+QwykcQmnnJoweBNJ3zjEvJi
OidZRfMdmM+vdd1+S+/TQDWXAYcvLUZSysBFBdTDds+YIN/MDbhejpoRdYlifnLP
qirXNJtS01zMxsRaA77ypl6V+f6D2e6i7dI5bfR5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUs3g67mw0AJjxcYRF/NICaibEL6IwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzIyY2U5Y2U2LTc1NzctNDUzZC1iNTE2LWQ3ODkzMzRjYmY5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKrwwDQYJKoZIhvcNAQELBQADggEBAFRkwgzL8yDaLhkN4ohOLUlY
jOwCDtPW7RH2VgaVqjsiHBSjWKzGz2+tGfRaGRyzXpR+tTLr06Al1W0DF6zisfWz
lJqMrX8sqAZNFLUKXVNbTZuHZ6v+7oS2vMJlbl8VY0xZGWYDdcwq4LmGU/b2mx2z
VaMBATS1JcnPORq+wSen40aZS2UDb1BmgAmhHP1wxWwpiU1DGygbigT4lYLU1ELx
k/nFRcrQvpUb2mV1MCBiF+WBgK1QFxQP9eDZi5E+J1MMCRB02oyPTEuGQzR9DxCH
Yt5ZpP/N94kSS1PLFZ5GnMFZNbl1aeceaSiNg8ef0eBHOM1PiS1q+HiW/QPdr04=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:47 2025 by rpki-client