
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e789fc1-7d5f-40c8-81d0-cc431ae4cc88.roa
File: 2e789fc1-7d5f-40c8-81d0-cc431ae4cc88.roa (raw, json)
Hash identifier: pOD5BbbuM6Bjq97zUoBn3946szd16vqbW9rHwzBKncg=
Subject key identifier: 98:59:AF:D9:98:0F:F8:AB:FA:D8:9A:8C:DC:F2:CF:AF:76:5B:87:5B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5A6E5D792987165AE235F5C5EDC9DCDF46F68BEE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e789fc1-7d5f-40c8-81d0-cc431ae4cc88.roa
Signing time: Fri 31 Oct 2025 01:51:49 +0000
ROA not before: Fri 31 Oct 2025 01:51:49 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3dd6::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6e:5d:79:29:87:16:5a:e2:35:f5:c5:ed:c9:dc:df:46:f6:8b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:51:49 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=1495b135998b837c6706e14317213dbef33c72ca8e3b25295691b6e37ac6f63f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:22:1e:48:0d:b5:aa:02:74:a8:9c:b8:b0:
38:f2:21:c9:db:ad:20:ef:b0:ba:d3:33:ce:b7:f4:
99:28:c2:39:e8:a3:06:b5:0a:61:a6:06:66:46:ec:
a8:a4:ce:b6:7d:f9:ea:50:71:b2:6c:c7:2a:39:ac:
f3:31:d3:47:90:65:4a:e6:34:8b:10:35:5e:54:9c:
d9:49:ef:77:b6:d8:f5:d2:09:6b:73:e5:42:2c:42:
b8:b2:29:bb:5d:fb:a7:02:58:d6:1d:33:92:a4:54:
5c:e4:f5:c5:48:4f:76:3b:6c:27:5e:0f:21:a7:ff:
15:c4:5a:f1:79:09:36:64:f0:ca:5e:9f:bf:cd:f4:
f4:cd:5c:18:96:03:1a:f2:68:4c:a0:ec:f0:66:f8:
08:7e:c5:bb:8e:3c:1b:41:eb:4a:57:5f:5e:15:f5:
7e:96:15:e2:59:72:3c:0f:db:db:7d:83:fb:f7:72:
2e:2c:e2:57:10:e2:f0:34:99:ab:bc:a9:df:75:31:
8d:0d:35:bf:30:6f:1b:37:50:38:97:a5:f4:64:28:
b4:40:68:4b:ff:0b:a3:51:80:97:1c:d0:e6:e9:6f:
27:df:f0:22:93:d8:ce:99:be:c7:42:42:c4:57:8e:
b2:a5:81:b5:0a:bb:70:42:b7:e9:c5:80:3a:44:2a:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:AF:D9:98:0F:F8:AB:FA:D8:9A:8C:DC:F2:CF:AF:76:5B:87:5B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e789fc1-7d5f-40c8-81d0-cc431ae4cc88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3dd6::/47
Signature Algorithm: sha256WithRSAEncryption
04:e4:b4:1d:16:82:d6:41:7a:87:75:f8:23:74:b2:6c:84:44:
df:e5:e7:5f:49:0c:3d:af:39:99:09:9d:ff:b5:7d:af:05:17:
46:e2:5e:9f:42:4b:ea:48:b4:27:36:9b:1f:1a:7d:5b:f4:10:
e4:0b:50:0f:59:8d:e1:84:8d:98:36:28:68:81:de:24:17:67:
45:11:10:45:a9:d7:10:e3:25:7b:6b:8f:bf:02:ff:8e:c1:ec:
7e:c3:1a:44:cd:11:a4:23:a0:c5:71:4b:ce:94:1a:1d:0f:d8:
5f:5a:42:a3:7b:d8:75:84:ad:18:ab:b8:23:10:2e:aa:34:82:
91:9e:48:26:78:1b:76:7a:6a:14:19:f8:a1:95:95:58:ee:5e:
bb:88:34:a6:59:4c:76:78:1c:c5:de:b3:a3:7b:8c:d1:06:5b:
13:d0:4f:83:3c:1d:10:5b:61:e8:25:09:60:16:0e:98:14:ab:
b7:07:30:51:be:b3:78:db:29:0c:a1:6a:2d:8b:2d:9a:37:9d:
db:58:1d:e7:ed:f0:c8:87:ad:60:22:91:f0:52:85:37:f5:b9:
08:46:23:d2:b2:7f:b9:91:fe:15:f5:90:99:78:3c:1a:8f:88:
0b:fd:43:88:f3:5e:f3:0b:cb:b0:6c:1a:28:62:4a:01:56:73:
69:bd:91:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:42 2025 by rpki-client