
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/29b191c5-411b-4e1d-8370-223de34c61e7.roa
File: 29b191c5-411b-4e1d-8370-223de34c61e7.roa (raw, json)
Hash identifier: H9bFxXEhfV7z0T0Dvs4+QiOPueC6NYVpAjZKsvMdy8Q=
Subject key identifier: B7:6D:B9:76:E7:47:8E:58:0B:7B:C9:1C:97:A9:19:EC:64:66:50:77
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 01133FCA7E0AE33DAC8F8D7BB9FD0BAECD312075
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/29b191c5-411b-4e1d-8370-223de34c61e7.roa
Signing time: Fri 31 Oct 2025 02:08:17 +0000
ROA not before: Fri 31 Oct 2025 02:08:17 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3fb8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:13:3f:ca:7e:0a:e3:3d:ac:8f:8d:7b:b9:fd:0b:ae:cd:31:20:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:08:17 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=1f8be1895572dd6c3fa8a477ada1fe57803c6a18fb7d9de7cbdb50b082d4249d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:76:db:a5:2b:7a:28:ed:23:15:dd:4c:2d:
da:fc:19:e7:45:57:8b:d9:a7:43:45:30:c9:88:47:
7a:56:8c:a4:29:a2:53:5a:13:04:64:b5:cf:44:60:
6d:2e:42:d2:a7:1b:22:87:bd:ce:25:53:db:e4:20:
7f:76:7f:5d:f0:ef:e7:fc:82:df:4c:bd:b6:36:ac:
9d:01:fe:8c:50:0e:ba:bd:d8:3e:5e:9e:c5:dd:8a:
9a:29:ed:8f:3c:64:0c:30:dd:c6:8d:fc:b6:95:79:
4c:c2:87:2b:12:47:be:e4:2b:3f:fd:fc:53:2e:3e:
40:4e:63:de:7c:e1:46:e8:0d:c7:12:3d:9f:3e:be:
a3:d5:1f:df:1a:d9:f6:0c:e0:76:ed:27:93:c5:2b:
70:d7:02:66:34:32:21:52:9c:dd:22:1b:f5:ae:cb:
13:d6:da:25:6e:d2:3e:2f:94:eb:5a:37:72:b1:30:
0f:7d:49:a8:26:09:49:d8:8a:23:54:8b:c7:ed:91:
4c:c4:19:47:5d:dc:23:0b:e4:e6:3e:10:24:a9:8b:
36:91:9d:f7:ab:0d:db:5d:44:38:ea:75:ee:c5:74:
6b:77:b6:e1:da:44:05:6e:a5:85:ef:3f:cf:51:5b:
97:30:5a:43:d5:de:b7:93:d3:f4:19:e0:27:97:a5:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:B9:76:E7:47:8E:58:0B:7B:C9:1C:97:A9:19:EC:64:66:50:77
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/29b191c5-411b-4e1d-8370-223de34c61e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3fb8::/47
Signature Algorithm: sha256WithRSAEncryption
4a:8f:6e:57:64:7c:fa:ff:aa:9d:73:91:02:59:29:37:0d:f4:
be:36:27:56:24:fa:96:0a:0f:1f:f4:5f:7a:19:82:8c:d7:52:
a6:7a:7e:83:f8:16:8a:1c:0f:c2:1c:ec:2b:e0:d4:5f:e0:43:
8c:b2:04:37:04:f3:d7:ed:ec:ee:e0:3b:99:12:db:e8:52:96:
f7:d5:2e:8e:e9:30:3b:68:37:71:ca:00:10:bf:a6:d9:f5:78:
fa:62:67:78:fe:8f:fd:16:8b:59:a7:e5:ca:07:ef:59:8a:96:
6f:97:13:d6:fb:d2:d9:42:5d:04:62:be:ee:5e:58:5d:77:91:
cc:27:d6:1e:e0:76:0d:31:02:df:68:ed:bb:17:eb:19:e9:c9:
59:8f:1d:b6:ed:34:c3:1d:6b:60:58:0a:a4:92:ee:45:f3:93:
67:3d:d8:8c:fa:56:ac:63:b6:e3:ce:d5:cd:b0:01:b0:09:d6:
53:17:40:02:6e:0d:32:d2:9a:3d:d8:b9:01:e7:b8:a3:67:af:
99:38:55:54:8f:83:98:e1:50:35:11:7d:c4:c1:cb:2f:c6:81:
f5:13:7a:6d:57:c6:f0:5f:f1:a7:86:ce:d8:3b:81:58:3b:59:
db:ce:40:71:ff:58:6b:7f:3d:b6:5c:62:0f:dd:35:75:ec:df:
dc:7c:81:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:26:46 2025 by rpki-client