
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2da1938a-3182-4b1e-be70-0ab574af7cec.roa
File: 2da1938a-3182-4b1e-be70-0ab574af7cec.roa (raw, json)
Hash identifier: zRdIPNyjYN7XgnXNVYOBVQvBpB3QOT1wVeTF5NXCBaE=
Subject key identifier: 51:74:77:CB:17:62:38:94:1B:E1:5F:EE:B5:7E:F9:5E:92:71:7C:28
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7B7D87F70FD9022507F38D2B78410FC4045A61AA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2da1938a-3182-4b1e-be70-0ab574af7cec.roa
Signing time: Thu 30 Oct 2025 22:53:52 +0000
ROA not before: Thu 30 Oct 2025 22:53:52 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:29b4::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7d:87:f7:0f:d9:02:25:07:f3:8d:2b:78:41:0f:c4:04:5a:61:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:53:52 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=347197aab1d4885a8d53a17d43073e77ebdda2cd456f8443eb39ecb8d21e9de3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:ec:b6:c6:d7:79:8c:cf:e1:62:f8:ba:d9:
80:e7:53:bb:e0:db:8d:36:6b:dd:47:f9:54:b8:a4:
c8:d1:3d:92:24:c7:04:b9:ea:4a:f9:ea:9b:a7:ac:
04:25:67:df:b3:3a:e1:9f:ca:4c:03:f9:47:83:af:
b4:36:48:a5:4f:7b:f9:1c:bd:23:e8:18:51:cd:29:
c2:3e:3f:48:59:08:f3:f3:c6:86:6d:e8:40:16:80:
03:3d:cc:d8:73:49:97:99:07:aa:ff:72:62:cf:7e:
e4:27:3d:7f:1a:9d:ff:b9:2b:20:da:a2:2e:af:20:
d5:11:db:23:5a:06:1d:d7:99:58:82:76:6c:f1:cb:
24:02:73:09:68:41:3f:18:e4:d5:f4:02:9b:b4:c4:
ae:de:41:b5:a5:6b:7e:0b:cd:3d:11:77:2a:a1:cb:
5a:cb:3b:25:24:a3:2c:ef:58:fd:c1:2e:27:eb:35:
f0:06:a5:bf:21:47:0f:42:3b:1b:95:b1:00:8f:9e:
03:c0:79:e8:87:9f:af:4b:14:20:07:1b:5d:20:fb:
90:11:b7:64:77:8d:63:28:90:13:38:b5:47:9f:1e:
7b:23:ee:17:42:01:3a:08:09:5c:bd:ea:2f:a2:36:
02:7e:3b:bf:a1:08:dd:2b:a4:a8:ac:44:9e:0a:b6:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:74:77:CB:17:62:38:94:1B:E1:5F:EE:B5:7E:F9:5E:92:71:7C:28
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2da1938a-3182-4b1e-be70-0ab574af7cec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:29b4::/47
Signature Algorithm: sha256WithRSAEncryption
4b:0d:a8:c8:28:60:c3:0a:33:db:bb:3c:1f:5a:85:e0:e3:0b:
93:0d:e6:4e:c3:72:05:60:d4:c9:bc:c5:72:83:c3:67:8d:65:
60:d3:b4:8e:4f:c4:65:8e:19:af:a6:e6:2b:5d:19:32:20:16:
ad:d7:fc:29:bf:0f:97:24:39:a3:cf:e5:e3:68:32:d9:15:ad:
97:a1:ee:18:17:49:04:11:ce:b0:ca:93:89:bc:ab:ae:e6:33:
44:ea:a6:b6:06:05:4d:f0:63:5c:b0:f5:f4:6a:db:74:ed:31:
a3:89:76:ce:42:f7:78:7c:e3:20:4b:fc:9f:8f:19:2d:de:d9:
97:f1:74:48:64:1c:68:04:53:de:2a:25:eb:2a:5d:62:88:e5:
04:5e:cf:5f:ea:63:37:58:56:ce:c2:8f:f6:b0:31:86:5f:fe:
d3:75:93:6f:2e:c2:0b:04:0e:71:4e:9f:0e:fe:8b:50:7c:c9:
a8:27:8f:56:2c:b0:63:6c:44:10:fd:4b:6e:0a:bc:6e:1d:02:
63:90:94:c6:60:4d:b0:44:57:09:4d:73:b1:70:d5:34:5b:f4:
f6:b1:4b:3e:47:65:6b:60:8f:3c:49:02:16:54:61:ab:8a:03:
fe:ba:8d:70:20:ee:07:fb:f4:40:0c:17:76:a1:f1:b2:85:92:
30:d3:02:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:24 2025 by rpki-client