
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/388b1956-f151-4f52-9161-aeac2ea1e76d.roa
File: 388b1956-f151-4f52-9161-aeac2ea1e76d.roa (raw, json)
Hash identifier: JZwxnBnVJal+q+WUu/cbSx39pFY5a74se4zZPc43i5A=
Subject key identifier: 27:90:14:B4:15:E2:80:30:06:ED:52:4D:A7:4A:E2:33:E7:6E:47:0A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2314B5EB4B3C244D08EDE9E1890A71CDDFFF5962
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/388b1956-f151-4f52-9161-aeac2ea1e76d.roa
Signing time: Fri 31 Oct 2025 07:41:00 +0000
ROA not before: Fri 31 Oct 2025 07:41:00 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:36c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:14:b5:eb:4b:3c:24:4d:08:ed:e9:e1:89:0a:71:cd:df:ff:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:41:00 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=82caed8596c517b7449358ea301fc06fa913ffb8deafd9d2da3af4f839457cfd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:40:11:e6:f3:3a:9b:8d:d8:66:25:6a:56:85:
e3:35:a9:ea:e2:59:37:bd:c5:20:90:3c:44:a8:41:
f8:06:0e:a2:7d:28:ce:c5:aa:2a:49:39:df:da:4f:
b3:ff:2e:0a:ff:1e:ae:fb:c5:db:62:64:3c:77:4c:
c9:a3:4b:7b:ca:06:34:ef:cb:6c:6b:04:3e:60:9f:
4c:b7:dd:5b:87:f0:c3:2d:f2:61:22:b0:1b:95:7f:
4d:ec:db:ca:e2:36:96:66:fc:3b:d3:d4:6b:ff:4a:
85:68:83:0c:2e:b7:31:d4:9a:44:65:4d:d3:c9:5e:
ea:c3:f0:0d:5e:a8:09:1f:7e:3b:d3:55:bb:75:56:
52:c6:3f:74:71:15:62:6b:67:6a:0f:fe:08:9e:47:
c7:24:06:0b:99:55:f4:2f:b7:6a:67:e5:4d:97:0b:
22:10:f8:7c:ea:68:47:56:38:e4:b2:bf:6c:6d:b0:
ba:a1:a0:c4:e7:4e:73:50:c5:f1:86:f3:45:46:18:
7a:2a:31:f3:e9:d0:4a:ee:68:48:49:cc:6c:5e:a5:
c1:c9:5c:83:8c:17:b2:1b:dd:ff:9e:2b:57:ba:5c:
18:bc:90:72:b4:3e:87:c7:dc:51:36:cb:5f:c4:11:
d1:70:b4:fa:14:e5:a4:6b:9d:a8:37:53:df:ae:bc:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:90:14:B4:15:E2:80:30:06:ED:52:4D:A7:4A:E2:33:E7:6E:47:0A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/388b1956-f151-4f52-9161-aeac2ea1e76d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:36c0::/42
Signature Algorithm: sha256WithRSAEncryption
48:90:d7:a3:71:7f:ff:cc:7b:9d:05:90:e0:4d:48:d9:e0:b7:
40:89:c8:da:a7:52:bd:fc:2a:e6:c3:c8:76:ad:76:0a:14:30:
73:82:a5:b5:2d:d3:a3:77:69:50:32:69:bd:9d:15:71:fb:35:
bd:b2:45:c6:d2:d3:e8:c8:e6:f7:6e:3d:a3:92:d3:dd:ff:16:
1c:54:40:d7:99:2c:35:17:80:b5:4c:5c:7e:01:42:34:a2:d2:
3f:aa:d8:8e:f1:5c:03:f2:75:c9:f5:77:57:e5:d3:aa:17:2c:
af:3e:52:d2:61:90:22:17:53:6c:27:6a:6d:ff:20:cc:5b:14:
12:d3:7f:78:ae:be:df:9e:5e:1f:36:75:bf:99:c6:78:e9:16:
da:aa:cf:df:cf:52:f1:d8:e5:02:29:d1:8f:59:4d:25:8b:be:
77:d4:60:ee:81:ff:17:a1:78:56:5d:e9:32:2c:e1:f9:41:ce:
3d:c7:6c:fb:d1:ac:4d:b2:e8:d5:0d:bf:bb:fc:c7:93:f9:97:
eb:59:76:e9:bd:7d:81:d6:20:d5:8d:da:07:3f:bf:73:02:31:
b3:c9:05:e0:8b:3f:26:eb:b9:5d:ac:b2:00:41:2d:4d:3d:cc:
d1:cb:d0:08:7b:8b:13:18:63:8b:22:fb:06:7e:ec:c8:aa:f2:
4d:f6:2e:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:24 2025 by rpki-client