
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/257127cb-dc79-43e3-80aa-419748878577.roa
File: 257127cb-dc79-43e3-80aa-419748878577.roa (raw, json)
Hash identifier: YQjdiGcgH3n4BKn7ME1CXBXT9xeeJPtW/TscOthqMY0=
Subject key identifier: 72:76:0D:78:C5:AF:54:59:80:29:76:AD:7D:91:A0:BB:D5:D4:D1:11
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 468852A2FDAB11F75242CCDA8B71F94AFDCEB997
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/257127cb-dc79-43e3-80aa-419748878577.roa
Signing time: Thu 30 Oct 2025 22:25:25 +0000
ROA not before: Thu 30 Oct 2025 22:25:25 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1cee::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:88:52:a2:fd:ab:11:f7:52:42:cc:da:8b:71:f9:4a:fd:ce:b9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:25:25 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=20866a26fab323241d413550b9226a8b157c14fa6b87d2fe764d9a6d7874a89d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:c0:54:2f:7f:1b:14:f8:ed:ee:db:d9:05:
1a:c6:50:ff:09:a6:ea:0c:59:e2:ca:32:08:1f:85:
02:b7:1a:74:be:79:99:d3:95:14:e1:f1:de:68:38:
31:a7:a7:f9:81:e4:0e:53:0a:e7:9b:9c:95:3d:d8:
a8:db:3f:2a:04:e9:ab:56:e3:2f:05:62:c7:1d:43:
b5:5f:c8:c6:a6:d5:3e:bf:68:27:31:74:83:a2:ee:
44:99:da:d0:4d:3d:02:79:d3:86:fc:6d:55:b6:78:
3e:77:a3:2f:3f:1d:55:b6:24:d9:5c:96:02:8d:2f:
4d:55:db:10:47:74:83:26:0f:c7:9d:65:f8:c4:cd:
5d:51:94:e1:c5:64:50:2a:e4:aa:85:c7:81:e4:b8:
3f:d9:26:f0:f2:dd:88:b7:8c:b9:e4:c1:ab:9e:88:
e0:22:84:3c:a8:06:16:e3:32:5d:b8:1c:8c:3d:07:
c5:04:21:2a:7a:e5:b0:a6:50:93:21:2f:76:a4:b9:
8d:ba:8e:59:5f:02:40:69:81:ee:11:c1:77:55:d4:
59:f1:66:85:3d:a4:88:7e:53:03:13:09:ef:cc:71:
de:2d:e4:05:51:1a:5c:c9:08:6d:b8:25:65:5d:cf:
4b:4c:a0:07:6e:76:5b:f7:a2:c8:0b:99:cd:fc:22:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:0D:78:C5:AF:54:59:80:29:76:AD:7D:91:A0:BB:D5:D4:D1:11
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/257127cb-dc79-43e3-80aa-419748878577.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1cee::/47
Signature Algorithm: sha256WithRSAEncryption
72:67:03:a0:dd:29:0c:49:81:99:9c:0e:f3:71:a8:b1:df:42:
99:be:85:fa:31:48:e9:50:ad:99:66:d8:c0:44:42:17:81:a3:
9a:da:d6:8c:ce:ca:3b:a9:02:f3:b8:c5:73:14:0c:cd:f4:dd:
66:f7:20:e9:b3:f0:99:5e:d0:e5:4b:fb:e2:28:f7:36:ca:77:
15:34:b7:fc:66:d0:50:94:d6:8b:fd:ee:e0:5a:a4:04:25:76:
10:50:c4:ba:31:62:69:37:4e:b6:ec:cb:cd:54:45:97:76:91:
4b:1f:e9:80:a3:63:86:78:53:47:1f:eb:12:1a:fe:cd:68:e0:
ff:60:15:c2:4f:d9:39:53:e4:84:f0:20:d6:56:20:04:5d:aa:
79:60:2c:31:c6:bf:a8:14:4b:e6:b7:75:9e:78:e6:87:70:93:
f9:c9:13:c3:77:1e:f3:c3:b0:87:72:83:20:f0:83:a7:f5:b0:
22:52:5e:ee:06:f8:ce:09:db:41:35:f5:2e:ad:cd:f6:65:54:
2a:69:db:21:fa:9e:0e:49:98:72:5d:ca:ad:c9:43:aa:6f:94:
4b:e8:c0:a2:4c:72:06:ac:aa:2e:1f:54:1a:7e:25:e5:8c:16:
a8:64:8c:47:ad:1a:0f:57:df:08:47:29:8a:53:19:39:96:81:
9e:b2:61:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:34 2025 by rpki-client