
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/385ed98f-853b-42f6-81da-caee68be712c.roa
File: 385ed98f-853b-42f6-81da-caee68be712c.roa (raw, json)
Hash identifier: 0bIOJHJvgnhOX/g5O7TRpc2uj5UNqqdatQgSfiuJ/co=
Subject key identifier: 86:BA:9B:A3:76:AA:6F:A4:BD:73:4F:0F:D4:F7:7E:7B:DC:F6:14:FF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2523B3D8245663DD65A66E7EF075D9DBAC4184EA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/385ed98f-853b-42f6-81da-caee68be712c.roa
Signing time: Fri 31 Oct 2025 06:40:20 +0000
ROA not before: Fri 31 Oct 2025 06:40:20 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1c60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:23:b3:d8:24:56:63:dd:65:a6:6e:7e:f0:75:d9:db:ac:41:84:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:40:20 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4f9ce68a0bc3764a9b4f299c6f5c845c5b95ea3522779dde0e791308357f5e86, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:82:29:c3:f1:ee:2e:d3:ae:14:d4:4d:41:
38:23:c8:12:5f:a1:53:c1:dd:f3:ee:30:61:de:02:
fa:5c:11:57:45:f3:1e:04:82:28:32:08:96:5d:f2:
4d:52:c5:46:33:bf:b3:a6:42:81:6e:4c:55:61:d4:
b2:91:9c:24:ae:1d:0d:26:ee:d9:71:ac:b8:ee:85:
f6:6f:e0:30:40:e7:25:fa:bd:b0:0b:83:9b:9f:db:
85:ee:3a:5c:a8:4f:36:16:20:12:ca:28:a9:35:3b:
12:98:d5:a5:51:11:e9:d2:12:20:9d:8f:21:4c:02:
28:61:d1:35:d4:09:e4:ab:7c:8d:d6:4f:00:c3:f4:
e0:bb:f2:1a:d8:4e:03:e4:c9:c1:18:87:58:d2:41:
e9:6c:cf:d8:42:34:96:6d:e2:c1:d0:4e:6f:7b:1e:
55:59:e1:54:08:f1:ac:d1:bd:5e:35:c4:73:d1:b0:
30:49:42:d6:66:f1:0d:a4:d7:1a:92:5b:4f:44:af:
3d:02:32:54:90:d2:a6:76:43:20:c0:39:43:78:33:
55:16:8a:71:b1:a8:cf:d4:c4:66:2e:cb:17:88:c2:
80:ab:c0:cb:a2:e4:2e:32:72:f0:22:11:ac:77:e7:
7e:81:56:79:44:eb:45:dc:62:17:62:ed:32:e5:bb:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:9B:A3:76:AA:6F:A4:BD:73:4F:0F:D4:F7:7E:7B:DC:F6:14:FF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/385ed98f-853b-42f6-81da-caee68be712c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1c60::/44
Signature Algorithm: sha256WithRSAEncryption
2c:e2:ba:c6:7f:1c:f0:f1:a5:62:59:2f:17:b9:44:2d:f5:f9:
1d:d9:70:5a:59:4f:49:7b:94:31:7c:5b:0c:1b:82:a8:fe:5c:
cf:7c:08:bf:b9:34:2a:0e:13:3b:4f:5d:b2:a9:f7:36:27:f1:
1e:9b:3f:44:70:98:97:05:17:97:d7:e1:b3:9c:4b:f5:e3:b9:
b3:45:18:f3:39:38:7a:4f:34:e3:f5:dd:1d:2c:2b:30:e9:69:
b2:08:3f:fb:8a:87:b0:fd:7d:70:ec:c1:fc:0f:2a:5b:6e:9c:
20:a9:3a:74:b5:69:e4:e7:15:4c:dd:fd:ab:7e:f6:e4:f0:17:
3a:32:f2:cf:60:9d:a1:d3:c0:a2:d0:d0:15:59:e1:33:a4:1b:
07:57:43:20:db:00:8f:4f:9c:cc:f7:14:be:58:0f:92:cc:5b:
3b:ec:d7:a9:10:6a:7b:3e:2a:5f:51:6f:6e:0f:a2:85:58:b9:
2d:36:db:2d:44:3e:69:1a:7c:94:2a:cf:d6:ba:b1:b3:93:44:
0c:72:26:f3:70:bd:e7:67:31:c8:67:c9:94:72:07:37:11:c5:
bd:a5:34:7c:c7:46:4e:60:c1:34:bc:40:39:c7:79:f8:ed:f3:
5a:72:a3:14:a9:84:42:74:c9:a1:b0:75:ab:c4:7a:ec:5a:bf:
fa:da:d8:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:24 2025 by rpki-client