
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32b57305-ee3e-4f9b-bc0b-759393736bd6.roa
File: 32b57305-ee3e-4f9b-bc0b-759393736bd6.roa (raw, json)
Hash identifier: iuQ9Am7ZnAeK9EZ3DeWOsZ1fN9fGNSaYnLyfhSzxKLA=
Subject key identifier: 04:E9:61:89:FD:0B:9C:67:6A:A4:C4:60:5D:57:67:43:C4:A9:E7:A4
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5A1EB2B24A0694EC9BCDA8E2A0022F68E7DBB79B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32b57305-ee3e-4f9b-bc0b-759393736bd6.roa
Signing time: Thu 30 Oct 2025 20:56:11 +0000
ROA not before: Thu 30 Oct 2025 20:56:11 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1404::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:1e:b2:b2:4a:06:94:ec:9b:cd:a8:e2:a0:02:2f:68:e7:db:b7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:56:11 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=aa2369005e784ea43f641d4f07ffba85f58cbbf28bfa25598a0d44c5a625bd1d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:af:86:9b:78:bb:80:d2:83:56:16:81:13:
77:05:77:b3:9b:52:d0:4f:0a:fc:60:1e:55:32:a4:
44:ae:71:7c:36:20:19:21:9d:48:5e:a9:2e:61:f5:
80:4a:bf:3b:cd:46:b0:3c:ee:20:5f:de:5f:58:e0:
94:50:6c:24:94:98:aa:50:76:31:c3:72:09:35:a9:
78:78:d7:18:4a:c7:0c:58:28:ff:73:e6:10:db:df:
86:9a:8f:9c:41:a5:33:82:c5:37:ac:5b:be:e8:64:
4e:82:c6:03:1f:34:f6:b8:0e:b9:21:81:7f:41:c0:
d6:3e:af:e6:5e:01:01:7d:60:1b:da:8a:2c:e7:af:
9f:72:f5:20:58:37:5a:cb:b4:31:bb:f7:d9:ac:58:
9a:18:36:42:71:f0:4d:f1:82:08:6a:c0:7c:a0:a3:
ad:97:81:52:af:b4:f8:d8:ff:73:4b:94:4d:81:5c:
37:c7:85:07:c6:16:39:9d:76:f5:54:8a:ce:e2:bf:
3d:1b:d7:6c:e5:af:a1:c1:42:4f:4c:c4:53:f9:c1:
b9:c9:bf:53:96:b6:83:64:91:38:f8:3e:29:1f:2f:
a8:46:57:4d:ef:78:a8:37:f6:41:5e:65:7b:bf:44:
5d:6b:7e:6c:d8:4d:4a:be:97:98:40:07:2b:31:a1:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E9:61:89:FD:0B:9C:67:6A:A4:C4:60:5D:57:67:43:C4:A9:E7:A4
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32b57305-ee3e-4f9b-bc0b-759393736bd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1404::/47
Signature Algorithm: sha256WithRSAEncryption
01:d9:95:f0:0a:e0:9f:ac:c7:3a:6e:4d:f0:29:ee:38:71:0d:
1c:80:09:14:54:5c:ce:8c:8f:ee:82:90:59:ec:02:f0:83:68:
6b:40:93:4c:cd:e7:34:a9:43:3b:f5:e0:61:49:ff:4c:05:22:
aa:7b:87:93:5c:c3:be:04:79:29:d2:5d:54:ac:62:62:57:cb:
3a:06:c9:62:b5:ad:8d:d3:af:1f:96:7c:ae:b3:c4:29:62:a2:
27:66:c8:92:5b:26:35:c0:b2:39:89:50:92:db:07:7c:96:92:
29:e5:b7:c7:f7:06:c9:8e:cd:6e:07:ab:56:61:cd:90:4c:c0:
29:78:52:62:15:f3:62:be:aa:44:a1:f6:7d:fc:b7:8c:39:23:
bc:a9:52:96:f2:47:c6:53:3a:a0:71:ce:2d:13:69:c2:b0:af:
8a:24:65:60:f7:86:16:f6:d6:7c:78:c1:58:6a:e6:23:d0:ee:
db:e5:b1:13:94:21:39:33:70:85:c5:08:b5:38:9c:f5:f1:8f:
3f:91:84:5c:8d:76:a9:a6:b9:50:76:d4:d2:17:9f:72:27:b6:
b0:92:12:0f:2b:c6:ae:1e:3e:71:9c:b0:05:2b:31:d6:62:d1:
98:35:ec:2d:03:13:45:b4:d4:11:65:87:69:43:8c:c3:c8:ad:
93:24:c2:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:35 2025 by rpki-client