
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3112c4ba-35c6-4680-a255-6cb08f899efa.roa
File: 3112c4ba-35c6-4680-a255-6cb08f899efa.roa (raw, json)
Hash identifier: VNjIPnioPIJzQBuUB6DwElzFsx9PqZO/aRXB8H0XPFo=
Subject key identifier: 9B:58:59:7D:3C:9D:25:E8:C4:F5:ED:38:75:99:5E:5B:53:D8:8C:5E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3D885FD72D842AF1B3936B0222DD7CDB9F7A6213
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3112c4ba-35c6-4680-a255-6cb08f899efa.roa
Signing time: Thu 30 Oct 2025 22:25:27 +0000
ROA not before: Thu 30 Oct 2025 22:25:27 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1cf8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:88:5f:d7:2d:84:2a:f1:b3:93:6b:02:22:dd:7c:db:9f:7a:62:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:25:27 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=d22d57a27360fcfcb0fac195751e7c66adac1e1db779aa2c5b2c98ed85d85a73, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:69:70:8e:22:58:80:e0:dc:95:2f:30:ed:
10:33:ab:e5:37:4b:8e:3a:c0:bd:f0:81:97:39:1b:
d3:ff:7b:36:2a:dc:26:63:d1:40:95:98:33:a1:14:
f4:5e:a4:32:12:88:f9:6d:0e:3c:89:fc:32:73:2e:
45:41:14:84:2d:f1:5c:72:8b:48:56:89:01:09:64:
a5:56:3e:50:fc:26:02:a4:05:fd:7b:8a:7d:c5:5c:
1b:69:59:3f:14:7a:0c:cd:de:46:ed:de:5e:0b:52:
4e:f1:1a:99:7d:b0:71:51:72:1b:34:ac:13:ae:cf:
66:b2:8f:54:7c:60:30:5c:d2:42:5f:db:a0:2c:a9:
d1:7f:5c:f8:73:e8:f5:43:c3:e2:e5:62:33:73:e9:
12:43:cf:91:7c:c6:43:e5:f4:4a:bb:d3:b7:6e:08:
f8:7b:ce:6c:09:cc:cc:59:a7:e1:00:ae:53:5f:fd:
b5:b4:c7:0b:d3:fb:7f:fc:bc:c3:45:d6:3e:3b:17:
a0:be:60:8c:14:9f:df:43:63:d1:26:e6:21:ec:d9:
da:56:21:15:6b:99:23:37:f4:cb:ee:ee:70:29:c3:
f3:9a:f3:1d:39:fd:f6:53:f3:e5:2d:f5:03:83:9e:
80:a3:bd:15:49:cb:9c:1a:4a:c1:bf:a9:83:5d:a7:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:58:59:7D:3C:9D:25:E8:C4:F5:ED:38:75:99:5E:5B:53:D8:8C:5E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3112c4ba-35c6-4680-a255-6cb08f899efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1cf8::/47
Signature Algorithm: sha256WithRSAEncryption
05:33:34:f0:da:7c:49:f0:0b:e1:ce:f0:27:fb:8e:58:4a:68:
ee:b5:a9:bc:31:6d:a4:ec:9b:42:16:e8:d3:32:98:62:d2:12:
e1:f1:31:8a:94:8f:de:08:b8:12:12:f5:a8:ed:64:cb:95:1f:
12:b5:2a:cc:35:7e:49:72:9e:fc:cc:a0:dd:74:2b:15:4e:18:
a6:e7:04:db:92:f3:a1:9d:c8:05:0b:04:c6:ae:8d:4e:b1:38:
5b:d9:13:08:ed:cd:14:39:8d:4b:aa:96:31:33:d1:85:90:3e:
7f:7d:9c:8b:72:89:21:39:0a:58:70:cd:6d:b6:72:61:3a:a3:
bc:1b:0b:00:30:2b:67:e2:3f:1c:cc:3d:4f:a5:15:df:43:cd:
6d:78:04:54:ca:65:59:8a:27:9b:cc:37:18:dd:f7:3c:06:c9:
ff:61:e5:af:df:99:0c:47:90:fb:38:9b:de:39:96:dd:e3:30:
5d:3a:9a:80:c4:db:f1:f7:2b:7f:40:ba:64:d6:bb:38:0c:3c:
21:71:d6:08:84:2a:a0:cd:08:de:a4:61:12:21:7c:f6:11:52:
ea:65:c1:19:99:df:0b:74:30:17:28:dd:0d:fa:11:67:d9:b9:
ad:8a:2d:38:79:a9:92:a7:7f:3e:0e:98:55:26:21:7a:1a:4b:
34:24:0c:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:52 2025 by rpki-client