
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/383ac30d-439a-4d43-abbe-ff8ceaa95281.roa
File: 383ac30d-439a-4d43-abbe-ff8ceaa95281.roa (raw, json)
Hash identifier: eT/KOn2GZLb9sPRVrDOzRQa0r1Kgx+lO7u9NaOQbh80=
Subject key identifier: 50:29:A1:E2:D7:05:9F:51:B0:F4:89:6F:14:54:77:0A:B6:6B:93:C4
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 23076D6801D848BFD5E608BEBBC11A7BC4B508EA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/383ac30d-439a-4d43-abbe-ff8ceaa95281.roa
Signing time: Fri 31 Oct 2025 05:55:30 +0000
ROA not before: Fri 31 Oct 2025 05:55:30 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:32c8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:07:6d:68:01:d8:48:bf:d5:e6:08:be:bb:c1:1a:7b:c4:b5:08:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:55:30 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=83629818c60e34200ebd01454d228391bbe1abfcb5ca8fdba047ec2cc2d4a3b6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:cb:f5:b1:88:c5:50:f7:92:ec:89:8f:86:
f9:e7:a5:98:1e:82:85:48:d7:5c:ff:b6:d1:92:d1:
24:1c:e5:df:c5:9d:5e:8e:a6:f5:ad:ea:51:3c:57:
b3:73:1e:db:a4:58:ad:cb:79:0d:33:66:34:05:0c:
57:c9:32:3c:02:29:8c:2f:42:9b:7f:d2:e3:c3:ef:
79:51:2f:dc:d3:84:b8:ea:6f:37:3a:25:a8:a5:5b:
cf:70:47:0f:aa:b6:28:84:da:71:e4:75:0b:18:90:
a5:7b:f0:54:59:7c:0f:a0:50:f9:75:ac:9d:b2:53:
c3:cf:58:33:e7:31:11:4c:c9:63:8b:6e:9f:28:a7:
40:39:33:89:60:b8:70:44:8c:49:9b:3a:15:eb:a1:
fe:00:de:69:a6:89:ab:a2:4d:9d:05:8c:cc:41:55:
bd:0c:8e:58:19:87:c2:16:18:35:79:fe:2e:f7:bd:
19:a1:eb:5e:be:90:44:e0:63:75:18:07:9e:12:ce:
26:74:43:e9:40:a1:92:30:e9:9e:70:c0:e4:ef:89:
17:09:df:cc:f2:84:2c:a9:de:69:43:ca:d6:b8:8a:
28:e3:29:e9:3a:fd:39:3b:08:89:df:fd:2b:7b:31:
88:13:0a:90:c3:45:1d:41:3f:73:89:14:90:bb:90:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:A1:E2:D7:05:9F:51:B0:F4:89:6F:14:54:77:0A:B6:6B:93:C4
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/383ac30d-439a-4d43-abbe-ff8ceaa95281.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:32c8::/45
Signature Algorithm: sha256WithRSAEncryption
40:01:d3:54:ab:f4:8f:b4:83:fc:68:82:7c:0e:a3:95:de:d7:
be:aa:9c:b7:e6:9a:02:38:91:35:06:8c:6e:9f:e0:6f:21:49:
38:91:5e:f1:5c:13:fa:e4:70:1a:1c:45:7b:62:d0:34:74:ae:
5b:2f:6a:43:5e:4c:5a:8d:56:d0:de:c9:29:07:71:0e:14:8c:
fa:c6:53:39:06:48:a7:37:77:2a:9c:7f:52:2c:7d:eb:fa:86:
94:79:94:69:56:8d:8f:9a:b8:f1:38:fa:a3:21:1c:fe:84:8b:
30:09:6b:1e:01:f5:8f:b6:64:fe:51:6a:1b:ca:83:9d:62:81:
e6:ef:54:02:c7:a7:c5:ef:a1:8f:09:60:7d:5c:35:8c:6f:6e:
ee:d4:72:1b:91:46:32:27:ec:b6:33:57:fc:1a:e8:fa:4b:63:
85:4a:56:d5:15:60:08:db:d1:fc:91:30:cd:98:f3:9c:4c:38:
4a:9c:8d:4b:fa:04:ac:ca:de:54:a2:71:79:f5:b2:a1:db:9a:
d4:19:39:ea:32:b4:df:a2:94:e5:90:97:fe:f7:05:a1:f4:ac:
5a:2a:6b:38:90:69:cb:c9:4b:f7:64:ea:89:65:93:e2:9b:6b:
11:67:63:50:4c:be:dd:23:55:93:6d:b2:3a:fd:4f:fb:b6:21:
02:59:31:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:41 2025 by rpki-client