
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fefd375-1e26-449d-b11f-0d7b013dfc92.roa
File: 2fefd375-1e26-449d-b11f-0d7b013dfc92.roa (raw, json)
Hash identifier: HC4eHxrXbKsuukfhKCwd4ODaemqdOP/SWD42Mcw1n+s=
Subject key identifier: 65:0B:A2:68:4F:5E:35:5E:AD:90:E0:66:F6:80:A2:43:D3:0D:27:13
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 168FA5D53023CB11AF5D209FA74A9BFF48E8EBCE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fefd375-1e26-449d-b11f-0d7b013dfc92.roa
Signing time: Fri 31 Oct 2025 01:36:42 +0000
ROA not before: Fri 31 Oct 2025 01:36:42 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c56::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8f:a5:d5:30:23:cb:11:af:5d:20:9f:a7:4a:9b:ff:48:e8:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:36:42 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ea653e374c711569bf59e410a276060e2ccf4910bb465b6c0f1b3a2332e3cbd6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:72:bc:6e:ee:ee:33:7a:b2:08:e5:f2:de:
da:34:b9:62:c9:40:6e:1c:81:8e:95:54:e5:e7:3f:
57:6c:bb:5d:d9:4d:69:eb:a0:ce:52:95:df:40:fe:
0b:e9:8f:e9:d3:78:3b:32:05:32:36:b4:3a:1a:c3:
cb:14:5b:cf:4e:07:14:eb:f9:f4:48:6b:ae:bc:d1:
18:31:52:24:4b:f8:da:14:b4:0e:b4:54:4b:97:db:
4e:d7:82:59:88:88:f1:64:3a:68:71:3c:e2:84:b5:
e1:ad:c2:5f:85:0e:90:ff:d5:e0:98:0d:41:8c:b1:
e9:b2:a6:f4:6e:07:b0:88:a7:ab:53:eb:99:a5:82:
13:5a:92:9e:82:8a:e7:07:81:e7:5a:94:e8:1c:de:
d0:72:af:a6:d0:2c:3a:81:9f:d7:d8:08:9a:2b:e2:
c0:1c:44:70:09:1a:97:31:69:1e:73:aa:2c:18:2d:
bf:63:c9:e1:4f:dd:50:c0:ca:54:a0:a9:2e:97:12:
27:f7:1d:17:2a:6c:69:e3:35:9a:b8:bd:e8:05:42:
8b:66:18:1e:ef:63:d3:52:83:54:33:42:d8:ba:4b:
ff:ce:16:67:1b:26:fe:98:45:df:aa:42:0d:d8:00:
f2:30:22:97:90:44:75:8f:48:2e:43:aa:9d:6c:33:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:A2:68:4F:5E:35:5E:AD:90:E0:66:F6:80:A2:43:D3:0D:27:13
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2fefd375-1e26-449d-b11f-0d7b013dfc92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c56::/47
Signature Algorithm: sha256WithRSAEncryption
9a:e2:76:8a:ea:37:02:52:52:b0:36:15:40:3e:fc:de:56:42:
4e:3a:03:5b:db:6f:9b:9c:9a:c5:d2:ab:f5:14:d3:9d:ed:1b:
6d:ee:6c:25:c8:d0:3e:af:a5:80:5a:a8:c4:34:3c:09:34:70:
c5:70:c0:ea:d1:e2:72:16:96:75:ca:e8:21:4e:c9:e2:8b:ce:
4c:39:38:68:7d:00:ad:d5:bd:61:09:da:08:7d:5d:b7:ac:5a:
11:fc:9a:bf:a0:97:53:92:fd:e8:c5:7f:2b:9d:08:a3:50:74:
1e:d1:74:a1:4f:0c:29:02:c0:0f:5b:2d:61:8e:bb:cb:7c:d3:
ae:be:0a:77:5e:6c:80:c1:d7:8a:20:79:c2:c9:b3:b6:bd:61:
06:52:7c:a2:e1:63:8b:f9:6e:c0:22:93:ec:98:aa:bd:e0:87:
6c:8f:19:e0:7f:3b:85:22:52:bd:bf:6a:61:5d:b5:e3:9f:06:
a0:90:c6:10:0a:33:ef:99:00:48:13:57:fd:da:fc:eb:d9:49:
f2:55:12:e7:67:e6:02:73:f7:51:30:4c:b5:87:90:e0:90:ab:
6a:d8:77:b1:e5:f8:e3:68:c7:96:24:5d:65:97:99:d9:32:9e:
bc:c8:10:01:4e:08:47:bb:46:0d:ff:15:ec:2a:30:b2:19:b7:
1b:ee:c4:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:33 2025 by rpki-client