
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e131d5b-d58c-4149-967e-b659216c1850.roa
File: 2e131d5b-d58c-4149-967e-b659216c1850.roa (raw, json)
Hash identifier: x5Y5x0ReWlKglCJ+aFTTYoqawazfXgHTch/srYHQ1h0=
Subject key identifier: 1E:CB:D4:43:D6:05:9B:63:90:82:31:CA:C2:D5:94:10:CB:6D:11:2C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1131E581B948B3C7F5BB2C4AC5E2814D6082F76C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e131d5b-d58c-4149-967e-b659216c1850.roa
Signing time: Thu 30 Oct 2025 21:08:44 +0000
ROA not before: Thu 30 Oct 2025 21:08:44 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1500::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:31:e5:81:b9:48:b3:c7:f5:bb:2c:4a:c5:e2:81:4d:60:82:f7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:08:44 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=68741504feeefb56eaf1d543bbb28cfb7a21602f19c2b9dda7770036e5ab5c2c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b6:b6:b6:d0:8e:c8:ec:e5:5f:1e:2f:2a:56:
74:a4:ff:11:b9:a4:23:f0:f7:ee:6d:df:12:5c:86:
d5:43:14:5a:e1:ad:c3:15:d8:9b:f0:86:c9:34:c1:
f6:81:99:ba:ce:06:a5:16:2a:86:5f:25:ab:13:72:
85:db:9a:69:52:9f:ad:1b:d0:56:cf:7a:72:5a:3f:
24:6e:f1:3f:19:01:f4:55:db:31:20:b9:58:76:93:
0f:ea:75:13:b6:a7:a1:c9:6a:1a:3b:e2:42:0f:b1:
76:62:f6:a3:7f:d1:6f:2e:a8:ee:55:69:55:05:66:
3d:73:c1:4f:6c:86:12:a6:25:7d:c4:a9:77:07:24:
8b:23:d4:9e:b5:f3:95:78:99:a0:df:87:80:af:aa:
1d:d7:d5:7a:5a:32:bb:28:d4:05:a9:88:30:59:a7:
ff:8b:ff:da:4f:64:2a:44:5b:5e:38:23:9f:b4:9c:
b6:74:d1:73:e0:d0:5a:d8:43:85:1a:03:dc:46:66:
01:4b:48:e6:47:ca:a0:c5:f4:90:d6:df:f9:80:ae:
26:93:c2:a6:7f:86:d8:a9:c8:58:cc:42:ad:50:e0:
51:4f:44:08:8a:de:ba:df:3e:b9:b2:e1:0d:7c:78:
54:5f:47:95:37:5b:93:8c:47:24:7b:aa:40:52:ac:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CB:D4:43:D6:05:9B:63:90:82:31:CA:C2:D5:94:10:CB:6D:11:2C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e131d5b-d58c-4149-967e-b659216c1850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1500::/47
Signature Algorithm: sha256WithRSAEncryption
47:87:89:a8:78:36:7c:4b:db:92:ea:2c:09:01:41:96:17:68:
78:ce:f8:ff:c0:38:33:1f:ad:13:ab:85:f6:a9:07:38:05:7e:
72:eb:2a:10:9e:e6:8f:1e:3f:8b:ae:9b:bf:df:1c:c7:66:98:
fe:73:23:d6:90:ab:df:98:be:e8:8c:5d:ed:5e:99:6d:c6:e1:
cf:1f:8a:37:d3:42:3f:84:dc:61:ae:36:6b:74:33:d2:71:42:
14:c0:c9:83:56:ad:19:12:cf:8b:9d:b4:59:13:15:9d:fd:cd:
9d:84:47:64:8a:11:f7:a9:93:f1:33:f6:bb:91:e3:77:29:fb:
7e:dc:11:5a:19:5d:04:93:73:94:97:aa:0d:69:b6:f8:c1:fe:
58:51:3f:91:e7:ba:ba:63:4b:12:3e:59:cf:25:57:92:40:bf:
10:9f:32:e8:7e:5d:bf:ba:93:38:fa:f4:3e:9b:fc:35:8c:9e:
a8:63:ae:de:9f:14:08:ae:14:7c:f4:09:fa:1a:01:fb:76:3c:
2c:6b:fd:4b:4a:48:18:17:f7:83:91:a4:48:4b:64:f0:fa:71:
1c:a6:66:bc:26:99:29:06:f4:a3:d5:4f:ee:82:80:01:5f:af:
98:d8:ea:7b:34:e7:af:fc:28:e3:bf:cc:7a:8d:e9:83:57:61:
b9:5a:27:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:27:33 2025 by rpki-client