
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2eeb5f9e-7964-4782-92cb-0da015b28706.roa
File: 2eeb5f9e-7964-4782-92cb-0da015b28706.roa (raw, json)
Hash identifier: tZyO3ig4e4yrddvLaNs/32L5kWVMd5hB2y7LqNp1xhc=
Subject key identifier: 2F:48:8C:BF:4B:71:25:64:85:8F:F0:67:92:12:DA:1E:4B:82:BA:CF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 19C24F5C4FD309E6CD3804759FAED378898429E3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2eeb5f9e-7964-4782-92cb-0da015b28706.roa
Signing time: Thu 30 Oct 2025 21:41:40 +0000
ROA not before: Thu 30 Oct 2025 21:41:40 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1882::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c2:4f:5c:4f:d3:09:e6:cd:38:04:75:9f:ae:d3:78:89:84:29:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:41:40 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=b78b9831fa935c9e5ef0fc0e2173632a3a1ed06a2881d85349bc97908d39def9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8e:e2:7b:8d:cd:6e:f0:c9:08:68:f7:c9:ca:
39:fd:0a:47:fd:72:88:d3:5a:65:48:a5:48:2c:bf:
18:d0:29:39:63:e3:19:bc:37:cf:51:43:e8:51:3f:
f6:9a:41:b8:71:92:c5:96:49:8e:c8:30:a1:86:87:
ac:0d:69:59:c6:1e:07:ed:7a:ca:28:8c:9f:48:49:
cc:fd:62:55:c8:e3:f4:d3:e9:3a:4e:a6:f5:3e:ba:
4d:b7:9d:90:9a:b9:df:2b:6f:48:78:66:85:fd:53:
57:b8:c2:87:42:32:3c:76:43:44:b5:f5:02:f5:2c:
61:62:7a:f3:b6:3a:d2:61:2d:d6:d6:a6:2f:79:a6:
2e:67:76:90:bb:7a:30:ba:9f:92:d7:c2:a4:1d:86:
8a:3b:f8:ea:24:c1:b8:07:f7:46:7d:20:f4:b0:74:
a8:e2:09:f3:1d:56:c2:d9:45:7f:e5:90:d8:5b:0f:
e5:68:cd:bc:e1:23:fa:56:d5:5b:95:0d:b2:d2:44:
4e:0a:84:42:0a:95:32:56:5f:6b:ca:1d:7a:e6:0f:
e5:2b:ff:14:29:73:2f:2d:34:91:79:a5:5b:b6:8b:
82:c6:ac:ff:6e:28:4c:c8:b2:af:c8:b5:b5:92:e7:
0c:76:9a:30:23:43:22:07:91:62:f9:57:ce:d7:fa:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:48:8C:BF:4B:71:25:64:85:8F:F0:67:92:12:DA:1E:4B:82:BA:CF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2eeb5f9e-7964-4782-92cb-0da015b28706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1882::/47
Signature Algorithm: sha256WithRSAEncryption
4b:d5:c7:ca:ea:f2:ef:d0:ff:b6:7f:9c:b1:55:8f:82:0c:ba:
9f:59:f6:32:4f:e6:11:e6:25:d2:60:8d:28:af:81:cb:61:4f:
78:be:e5:60:e1:26:96:a3:7e:eb:26:1e:31:87:78:a3:fe:6d:
88:71:b8:6a:96:34:63:39:d7:d7:4a:30:b0:db:11:64:d1:49:
2a:7b:3d:81:ae:c3:a5:49:28:32:c5:b1:d9:46:96:7b:85:20:
83:65:21:d9:c4:ae:4c:73:20:02:59:ae:2a:9c:23:73:a1:d8:
eb:07:42:d2:62:0f:5a:5e:97:6a:4c:0b:35:eb:86:44:a2:be:
96:58:6b:70:11:b4:10:e5:72:12:86:b3:c8:75:0a:b7:fa:d7:
53:23:4b:f3:d0:13:78:94:85:89:4b:8a:40:67:3c:28:33:70:
c7:65:93:e1:4f:97:36:e3:de:b5:f0:4f:a7:66:a5:4c:9b:6a:
73:d9:5e:11:81:ef:23:f4:54:69:9b:29:18:f6:26:6a:62:a1:
e6:b1:8d:41:9c:ea:a3:ce:11:94:e9:b8:80:a3:05:71:47:70:
53:e6:89:f5:ac:a0:fe:1f:18:53:a2:be:96:fc:69:50:8e:91:
4e:2c:a2:e6:02:b9:dd:c4:ad:f7:be:57:dd:f3:7d:da:1e:7e:
b9:ba:35:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:07:24 2025 by rpki-client