
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/369a47b3-012c-43e3-bdb7-ec2a89ac4079.roa
File: 369a47b3-012c-43e3-bdb7-ec2a89ac4079.roa (raw, json)
Hash identifier: 66eumTXKPNZfUVcILMBMlvZt0FtU9rPCczrKraHJiTI=
Subject key identifier: 52:1C:8C:E2:42:39:17:D4:A7:9F:B5:CA:75:7E:59:00:17:51:36:CB
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 353030D605DC62F330C0DC36DCDE9C750EF02B77
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/369a47b3-012c-43e3-bdb7-ec2a89ac4079.roa
Signing time: Fri 31 Oct 2025 01:23:12 +0000
ROA not before: Fri 31 Oct 2025 01:23:12 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3afa::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:30:30:d6:05:dc:62:f3:30:c0:dc:36:dc:de:9c:75:0e:f0:2b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:23:12 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=33766bcde744928abd0729a9a779a5843444132cda4e3d864e795516f8941612, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:65:53:02:67:91:de:14:11:f1:05:be:96:
83:bd:e9:46:37:b9:c1:52:b8:08:0d:9c:ab:b4:bc:
3c:f9:c2:d9:ee:ee:c9:c4:18:1f:3a:d9:e3:26:6c:
f0:b4:db:3d:7c:28:9d:9d:95:c5:9e:5e:48:d5:ef:
85:a0:aa:e3:30:05:9e:30:dd:9c:eb:47:d1:c8:a9:
dd:45:58:8a:cc:94:96:59:3c:36:ef:03:2e:94:a7:
22:45:d5:57:d4:97:84:16:a7:e3:a3:d2:5a:6e:dc:
58:8b:61:a0:75:64:24:3d:92:37:48:fe:ae:3e:ed:
eb:ec:3f:fc:19:88:6a:ab:f2:a6:23:df:4f:bf:c6:
0e:07:35:1e:c4:23:65:c2:14:ee:d6:9b:6a:90:39:
4d:4f:bb:75:93:92:2d:79:d0:22:cd:e1:d0:f0:4c:
a2:bd:c7:e6:5a:d3:77:7f:b3:b5:cb:f5:c1:46:fd:
1e:a9:6d:bb:ca:ef:9d:34:2a:21:e2:02:16:14:1b:
62:28:9a:34:84:ca:99:ef:c0:42:73:38:8d:89:50:
0c:bd:1e:00:0f:55:17:b7:9e:77:b1:e3:46:a2:ee:
8a:2a:9b:e0:b7:06:b0:a9:20:49:97:7c:c4:83:d5:
22:ef:15:3d:0f:9c:63:30:d7:5e:57:01:b2:ab:cc:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1C:8C:E2:42:39:17:D4:A7:9F:B5:CA:75:7E:59:00:17:51:36:CB
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/369a47b3-012c-43e3-bdb7-ec2a89ac4079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3afa::/47
Signature Algorithm: sha256WithRSAEncryption
8a:8f:15:28:2a:50:d7:b1:e5:2c:f0:32:11:90:93:1d:2c:da:
eb:70:bf:28:1f:fa:8f:65:69:6c:1c:aa:2a:7d:57:c9:c5:44:
f0:82:45:13:70:c1:68:66:26:4c:9a:bc:06:4f:88:70:1c:ff:
96:53:b3:5c:4a:95:a3:f9:1a:7c:e1:fa:32:3f:8b:15:5e:6b:
b1:67:42:67:b1:09:e9:8f:d8:60:3b:b6:28:ed:25:19:7b:35:
55:fa:d9:c7:97:a1:54:6d:f4:75:78:0d:fa:85:7b:12:9d:12:
5d:5b:f0:5c:5a:33:0c:d6:25:4d:81:99:73:85:0d:f2:73:d7:
2a:b7:a7:d9:ec:85:ee:24:f6:9e:60:c9:ca:a5:2b:4c:d7:2c:
d7:e7:51:71:9e:7d:ea:a9:3d:24:e2:46:15:47:2f:58:29:a1:
03:b0:7c:68:24:d4:f0:d6:a2:d6:93:1d:91:10:6e:e0:67:7c:
bb:2c:95:f3:5c:88:4d:a0:f7:00:0c:c7:8e:af:5a:00:72:18:
94:f7:ef:a2:1f:85:1c:65:52:b0:79:09:1f:2b:60:cf:ef:89:
c5:ed:25:21:bd:74:8e:40:fb:9e:31:66:ff:bc:87:0a:47:bc:
75:78:d3:fe:93:80:8a:2d:88:60:7c:11:3b:79:58:86:0f:30:
b5:b3:3f:44
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNTAw1gXcYvMwwNw23N6cdQ7wK3cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEyMzEyWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMzc2NmJjZGU3NDQ5MjhhYmQwNzI5YTlhNzc5YTU4NDM0
NDQxMzJjZGE0ZTNkODY0ZTc5NTUxNmY4OTQxNjEyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0YWVTAmeR3hQR8QW+loO96UY3ucFSuAgNnKu0vDz5wtnu
7snEGB862eMmbPC02z18KJ2dlcWeXkjV74WgquMwBZ4w3ZzrR9HIqd1FWIrMlJZZ
PDbvAy6UpyJF1VfUl4QWp+Oj0lpu3FiLYaB1ZCQ9kjdI/q4+7evsP/wZiGqr8qYj
30+/xg4HNR7EI2XCFO7Wm2qQOU1Pu3WTki150CLN4dDwTKK9x+Za03d/s7XL9cFG
/R6pbbvK7500KiHiAhYUG2IomjSEypnvwEJzOI2JUAy9HgAPVRe3nnex40ai7ooq
m+C3BrCpIEmXfMSD1SLvFT0PnGMw115XAbKrzLohAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUhyM4kI5F9Snn7XKdX5ZABdRNsswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM2OWE0N2IzLTAxMmMtNDNlMy1iZGI3LWVjMmE4OWFjNDA3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOvowDQYJKoZIhvcNAQELBQADggEBAIqPFSgqUNex5SzwMhGQkx0s
2utwvygf+o9laWwcqip9V8nFRPCCRRNwwWhmJkyavAZPiHAc/5ZTs1xKlaP5Gnzh
+jI/ixVea7FnQmexCemP2GA7tijtJRl7NVX62ceXoVRt9HV4DfqFexKdEl1b8Fxa
MwzWJU2BmXOFDfJz1yq3p9nshe4k9p5gycqlK0zXLNfnUXGefeqpPSTiRhVHL1gp
oQOwfGgk1PDWotaTHZEQbuBnfLsslfNciE2g9wAMx46vWgByGJT376IfhRxlUrB5
CR8rYM/vicXtJSG9dI5A+54xZv+8hwpHvHV40/6TgIotiGB8ETt5WIYPMLWzP0Q=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:48 2025 by rpki-client