
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26a29306-97dc-4d21-b579-846ab06b9b20.roa
File: 26a29306-97dc-4d21-b579-846ab06b9b20.roa (raw, json)
Hash identifier: Xx8KrAVMdyT8cxGYBbOyPWAGeBARx72FfMVlaWxKFTo=
Subject key identifier: 2A:5C:54:43:AF:F6:2E:AA:21:AF:B9:A3:AE:34:ED:90:81:DC:25:A5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4D533C5D860546224B8262190C35D0DD6CBEEA30
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26a29306-97dc-4d21-b579-846ab06b9b20.roa
Signing time: Thu 30 Oct 2025 21:57:19 +0000
ROA not before: Thu 30 Oct 2025 21:57:19 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1a46::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:53:3c:5d:86:05:46:22:4b:82:62:19:0c:35:d0:dd:6c:be:ea:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:57:19 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=15f43085830bd3636cb80b25171c7958582812c1fa68daa616c893680c362929, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:a7:59:e2:a9:bf:86:18:a4:85:95:9f:82:
e6:ec:1e:9c:61:53:de:49:f8:46:54:87:13:07:80:
bf:24:e8:10:a3:7b:25:0a:70:1c:b8:dc:0b:cd:e4:
23:eb:d8:86:d9:02:3e:5b:76:49:5c:25:ca:37:1f:
0e:70:b9:80:ae:c3:0b:50:66:e4:ff:ba:10:f2:85:
be:eb:c1:d0:b9:cd:1e:15:b1:1b:b4:13:e4:f1:39:
d1:ad:e5:4b:0b:ab:d4:69:0b:22:66:25:27:8f:37:
ac:ee:d6:2c:32:e5:62:6c:5d:b1:f9:df:ec:7a:1c:
ec:a3:25:26:90:08:2d:86:9c:d3:35:83:ca:dc:45:
30:cc:35:64:49:35:3e:8a:34:39:cf:9d:a0:48:52:
a9:9d:59:5c:4d:94:df:d7:b4:00:ac:2a:6b:81:ed:
3a:f7:50:47:52:c2:e5:11:4d:47:20:ab:6f:0d:a4:
78:c2:56:cc:f0:23:30:51:a5:ee:cd:79:36:fa:47:
4a:ca:91:64:d1:ed:c6:c7:03:c5:d7:fc:b1:64:f4:
c1:1b:c9:81:49:39:62:5e:9d:f9:7e:2b:8b:f5:8b:
43:cf:8b:e9:4d:8a:b6:31:91:65:70:80:8e:05:01:
96:7e:8c:d2:cd:9e:f0:2d:df:2f:7b:69:8f:ed:c3:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:54:43:AF:F6:2E:AA:21:AF:B9:A3:AE:34:ED:90:81:DC:25:A5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26a29306-97dc-4d21-b579-846ab06b9b20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1a46::/47
Signature Algorithm: sha256WithRSAEncryption
31:1d:2f:88:5d:fc:af:b9:9c:2e:db:31:46:c5:f0:50:30:17:
2e:b9:e6:5e:31:0d:a4:d3:a6:d3:19:ec:18:e8:f6:84:7b:f6:
a3:c8:34:b9:ca:7c:d9:3f:9d:25:cd:ac:61:89:de:fa:00:5b:
0b:7a:98:56:fe:2b:cb:d4:ce:57:4c:56:10:ef:27:52:f9:ee:
09:48:d6:a2:0a:23:6f:b7:11:a8:24:2f:7f:ed:66:af:62:e1:
77:91:92:72:5c:4c:3c:31:d7:7f:ee:1b:0b:7d:6a:ca:c3:53:
c7:83:48:5e:0c:26:5f:f5:6b:ea:f4:1c:f2:47:74:ac:e6:da:
5e:46:8a:b0:13:5a:bb:bd:67:88:c9:37:de:ff:a1:50:f3:90:
8d:1c:8c:2d:7d:36:2e:bc:24:dc:79:68:5c:cc:a5:29:26:79:
46:7b:34:7f:a3:28:11:06:ac:35:61:e9:90:b3:6b:2f:9d:16:
fd:51:39:72:b5:61:59:0b:ca:00:ce:11:12:fe:42:76:e2:fa:
4d:36:37:97:fb:c4:61:03:ef:a3:be:29:04:44:be:ab:a6:95:
c9:34:51:ce:6f:ec:5d:8e:ed:09:39:21:5c:c3:f1:9e:0d:e6:
8c:32:bc:29:f2:34:b4:25:c4:51:27:24:24:3c:42:b7:11:85:
9c:6d:35:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:55 2025 by rpki-client