
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/394fad82-9db2-4bfb-999b-e19f80fd61ed.roa
File: 394fad82-9db2-4bfb-999b-e19f80fd61ed.roa (raw, json)
Hash identifier: KGnY0c+ATLbRtSj2DcsJsINQITehLAw+UWjRGfIpINs=
Subject key identifier: AB:B2:58:F0:D0:EC:E1:73:91:0D:63:41:98:42:1D:5C:2B:B7:69:60
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3F6351CAC1979D8BF85D92905E3925C9D2DC64
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/394fad82-9db2-4bfb-999b-e19f80fd61ed.roa
Signing time: Fri 31 Oct 2025 05:12:23 +0000
ROA not before: Fri 31 Oct 2025 05:12:23 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1668::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:63:51:ca:c1:97:9d:8b:f8:5d:92:90:5e:39:25:c9:d2:dc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:12:23 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=1a420935718bb586936e570fd9ca53d3f4abdf1c985f3f7dfa34718f60ee8f52, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:6e:c8:58:c6:a6:63:5c:d2:60:0b:c7:cb:
8c:3c:c7:76:30:43:b9:e0:24:3f:de:3a:e9:4f:6a:
e0:d1:5b:a3:0f:d7:3d:9f:2b:44:df:ce:e8:88:e9:
cc:08:44:e8:bf:fc:b9:fc:42:72:a8:a8:c1:9d:81:
a5:9d:bc:b2:e7:12:07:fb:56:95:48:ab:04:f5:d8:
e2:c7:2d:fa:46:ea:5c:cc:16:36:79:d0:fa:41:0b:
3b:b9:3b:b7:e2:06:ce:b9:39:68:fd:b1:9e:23:8d:
38:ca:54:c9:19:82:16:4c:98:61:14:0c:78:6e:a4:
0c:f9:c2:02:1b:97:40:31:b8:e8:38:3a:2d:32:be:
64:d4:ac:a7:88:b6:c8:c1:2f:30:4e:f7:2b:47:a7:
85:76:a3:ab:b1:68:44:0c:63:1e:07:fc:dc:4f:ca:
83:f5:df:91:8b:53:98:fb:ff:1f:c4:58:df:77:74:
f1:6e:d7:9b:62:df:68:63:5f:fa:53:e1:af:02:50:
38:33:36:fa:7e:d4:29:7f:8e:a9:e9:97:5d:08:2d:
57:28:49:aa:c5:33:4d:1d:0e:42:aa:d8:0d:46:fa:
c0:5e:c1:2e:7f:a3:73:f3:20:dc:49:85:49:e3:fc:
7a:be:14:c3:21:91:ae:49:84:5c:9e:fc:a8:53:41:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:58:F0:D0:EC:E1:73:91:0D:63:41:98:42:1D:5C:2B:B7:69:60
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/394fad82-9db2-4bfb-999b-e19f80fd61ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1668::/45
Signature Algorithm: sha256WithRSAEncryption
08:45:11:9f:30:62:0a:29:4d:21:e3:bf:bf:75:4d:a5:4d:68:
95:b4:5d:df:28:77:85:c0:45:4d:51:99:fc:8d:15:d9:67:a5:
67:2c:3b:5c:bd:34:42:ed:13:28:c0:6a:5b:5a:04:d7:20:84:
18:c7:49:d9:a8:da:05:35:05:2e:40:7b:25:b3:72:4e:73:41:
b9:d6:99:ab:4f:8b:79:6c:91:99:94:d3:75:b7:82:b6:ef:2b:
1a:36:c1:69:d6:aa:1b:0c:b9:d2:8b:9d:03:05:50:a4:22:67:
81:1c:a6:45:46:f5:db:e8:60:98:2b:2b:38:8d:7d:a3:77:a2:
61:79:76:06:67:42:be:8d:ea:0d:5b:b3:f8:6a:4b:52:15:ba:
18:b4:76:96:ba:80:0c:ef:49:a7:4a:c5:fd:80:2e:6f:2f:bc:
e3:a2:ac:f4:ca:8d:06:68:c6:6f:16:d0:8e:e4:a3:dc:f7:e1:
4c:e8:44:b1:bd:8b:50:d9:68:29:9b:22:6e:f7:f1:2c:c0:a5:
38:95:b6:78:f5:11:47:2f:01:d6:8d:05:66:b7:c7:35:71:fe:
c8:8c:23:bd:ea:a7:1c:1e:58:19:b2:27:79:a1:9c:12:5f:ba:
24:ee:78:1b:54:3d:41:cf:ee:73:92:17:74:18:77:33:ff:a8:
2a:28:db:b3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITP2NRysGXnYv4XZKQXjklydLcZDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzEwNTEyMjNaFw0yNTEyMDUyMzU5NTla
MHoxSTBHBgNVBAUTQDFhNDIwOTM1NzE4YmI1ODY5MzZlNTcwZmQ5Y2E1M2QzZjRh
YmRmMWM5ODVmM2Y3ZGZhMzQ3MThmNjBlZThmNTIxLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMd+bshYxqZjXNJgC8fLjDzHdjBDueAkP9466U9q4NFbow/X
PZ8rRN/O6IjpzAhE6L/8ufxCcqiowZ2BpZ28sucSB/tWlUirBPXY4sct+kbqXMwW
NnnQ+kELO7k7t+IGzrk5aP2xniONOMpUyRmCFkyYYRQMeG6kDPnCAhuXQDG46Dg6
LTK+ZNSsp4i2yMEvME73K0enhXajq7FoRAxjHgf83E/Kg/XfkYtTmPv/H8RY33d0
8W7Xm2LfaGNf+lPhrwJQODM2+n7UKX+OqemXXQgtVyhJqsUzTR0OQqrYDUb6wF7B
Ln+jc/Mg3EmFSeP8er4UwyGRrkmEXJ78qFNBaYMCAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBSrsljw0Ozhc5ENY0GYQh1cK7dpYDAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvMzk0ZmFkODItOWRiMi00YmZiLTk5OWItZTE5ZjgwZmQ2MWVkLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHAyYAkAAWaDANBgkqhkiG9w0BAQsFAAOCAQEACEURnzBiCilNIeO/v3VNpU1o
lbRd3yh3hcBFTVGZ/I0V2WelZyw7XL00Qu0TKMBqW1oE1yCEGMdJ2ajaBTUFLkB7
JbNyTnNBudaZq0+LeWyRmZTTdbeCtu8rGjbBadaqGwy50oudAwVQpCJngRymRUb1
2+hgmCsrOI19o3eiYXl2BmdCvo3qDVuz+GpLUhW6GLR2lrqADO9Jp0rF/YAuby+8
46Ks9MqNBmjGbxbQjuSj3PfhTOhEsb2LUNloKZsibvfxLMClOJW2ePURRy8B1o0F
ZrfHNXH+yIwjveqnHB5YGbIneaGcEl+6JO54G1Q9Qc/uc5IXdBh3M/+oKijbsw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:41 2025 by rpki-client