
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/38c7a7b5-7e83-4557-8e83-cc66a0834ed7.roa
File: 38c7a7b5-7e83-4557-8e83-cc66a0834ed7.roa (raw, json)
Hash identifier: YlWcIGv005fh15foaSOgV83uv02wAxLE69xv8ycXtF8=
Subject key identifier: 7D:38:89:E0:C5:2E:0B:DE:95:DC:09:52:7D:F7:98:4A:55:A9:41:20
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5CD0CC8C3A0FE24D89D45750E94B37F2D41B7B6F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/38c7a7b5-7e83-4557-8e83-cc66a0834ed7.roa
Signing time: Fri 31 Oct 2025 03:38:40 +0000
ROA not before: Fri 31 Oct 2025 03:38:40 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2bd0::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d0:cc:8c:3a:0f:e2:4d:89:d4:57:50:e9:4b:37:f2:d4:1b:7b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:38:40 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=54b397716869728e923277f620520a0b7f2eec8e94e831f3d1d776406780748d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:9d:08:c3:56:0b:2d:7b:1a:57:ad:05:ab:
f9:4b:63:08:33:80:ce:a5:36:73:09:ff:18:f7:d0:
d4:26:1c:6d:e3:a2:6e:25:a2:3d:73:cd:c1:12:8f:
b8:c0:32:3d:0b:a8:03:65:fe:a2:96:04:8c:30:ec:
56:e8:00:82:fb:83:d4:14:5e:26:c0:85:55:a4:18:
16:da:3b:f2:ff:e8:e6:b5:15:ad:cc:b5:5f:81:15:
88:d9:77:04:3c:0c:2f:9c:7b:84:4a:90:05:dc:cd:
b9:f2:07:a4:1e:e8:c2:e7:69:06:33:03:6e:42:83:
d4:ac:0e:1e:27:f5:9a:87:62:70:29:e3:aa:b5:ae:
0a:6a:18:16:d5:fc:e0:63:b6:b9:62:99:25:f8:89:
c1:47:a4:db:9c:d9:fc:ed:8b:d5:ec:7c:d3:19:c8:
d0:ed:d9:89:2b:db:7c:6f:26:85:f2:c9:c4:a7:3b:
b7:7a:d0:12:77:1f:4f:c1:2e:e2:cd:5d:14:81:03:
c4:e4:2e:2b:3a:95:2f:17:64:8e:88:26:4b:10:2a:
39:3c:ac:67:eb:53:34:fc:6f:51:18:48:d4:45:f9:
c8:8b:8c:a0:5c:b3:f8:d3:69:65:01:03:6c:f1:fd:
9d:89:c8:33:05:55:bc:ff:18:d4:fd:75:3d:ce:33:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:38:89:E0:C5:2E:0B:DE:95:DC:09:52:7D:F7:98:4A:55:A9:41:20
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/38c7a7b5-7e83-4557-8e83-cc66a0834ed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2bd0::/46
Signature Algorithm: sha256WithRSAEncryption
46:4b:27:82:1b:ce:b4:82:c9:d6:e7:06:89:cd:3e:83:84:a4:
1e:21:c3:24:3d:9a:d2:16:15:2f:d1:43:20:59:c6:17:3d:83:
22:1f:00:20:95:56:5d:d0:33:47:1e:9a:b3:50:27:0e:aa:76:
be:f8:23:42:a4:48:fb:c0:c8:61:b6:ac:5c:09:2d:52:8b:65:
ca:c4:85:98:61:b0:05:65:75:a2:81:f0:c7:10:5f:b0:05:76:
3b:be:3c:88:82:50:9d:7b:0e:8d:e3:f0:ff:13:bb:0d:d1:60:
b9:18:9e:d0:a7:6e:09:a1:2e:63:7f:fc:ec:62:0b:5a:07:d9:
73:49:db:b8:43:5d:a1:a5:af:b6:af:22:1b:45:ba:2b:70:9e:
25:3a:f0:e5:2b:ca:1d:3b:4a:00:0e:9a:ed:ad:f2:2a:8c:9e:
b8:d9:ae:b7:8f:f6:08:ad:40:a4:98:1e:66:2a:39:9d:95:4f:
3d:3f:6c:d5:3d:ea:70:a5:36:2c:bf:d9:6a:9e:aa:ac:82:6c:
04:c3:e4:ed:9a:af:72:d3:64:88:f9:02:17:df:c4:af:ba:a2:
a8:64:ae:63:69:e3:13:cf:fd:b5:8d:62:40:d1:e4:69:9a:26:
82:f1:6d:90:c1:16:03:a3:48:8d:a1:d2:7f:7e:bc:ee:b8:b4:
60:96:3c:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:21 2025 by rpki-client