
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/39da1912-6ccb-4412-839a-bcd76138dc96.roa
File: 39da1912-6ccb-4412-839a-bcd76138dc96.roa (raw, json)
Hash identifier: f6/w4OluJbE31eT9Kqh8ZpmsTystwWib3sME90y47iA=
Subject key identifier: 29:EE:CB:51:00:76:41:A9:EC:AF:52:83:70:22:29:2C:FC:7C:63:7F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5932E6EE8FC74BB281DC15BAE20FA7F71E230E50
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/39da1912-6ccb-4412-839a-bcd76138dc96.roa
Signing time: Thu 30 Oct 2025 21:13:33 +0000
ROA not before: Thu 30 Oct 2025 21:13:33 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:15aa::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:32:e6:ee:8f:c7:4b:b2:81:dc:15:ba:e2:0f:a7:f7:1e:23:0e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:13:33 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=177bc2915be8ac6af971f6d2c3d12c553330c3f70e218d74efe8989d5c3e4ff1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:e4:bd:25:3b:2e:b2:db:78:ec:00:66:cd:
b7:3f:28:4f:1a:93:65:55:0c:c4:2b:65:3b:88:56:
3f:3d:e0:61:3e:80:97:bd:27:09:a3:bc:d7:66:6b:
0e:e4:35:0c:a8:b2:d7:b8:c4:76:43:38:5b:14:11:
6f:c3:f7:9e:70:e1:90:4d:c6:a2:ae:83:4c:4e:aa:
9f:78:50:8a:1c:54:3f:2f:6c:8e:cf:5d:66:7c:4d:
0a:59:90:ff:bf:b8:42:0b:4f:34:a5:97:20:ad:91:
b7:54:f3:b4:20:6d:0b:67:27:5c:6c:c5:99:e6:24:
4c:c5:f9:d5:43:e5:d8:68:66:9e:0f:1e:63:c8:bb:
58:37:0a:45:f6:aa:d4:3b:ec:ab:01:62:44:f6:63:
de:ee:b2:22:c0:3a:95:f2:81:23:84:d9:32:38:47:
2e:43:7d:14:30:6d:fa:4a:99:b7:3c:34:21:a2:59:
4b:da:a6:cd:5d:01:9c:6a:6d:fb:be:31:33:dc:62:
b7:3f:a5:02:de:4f:df:d7:06:ea:fa:ab:12:87:c1:
38:d6:53:f5:2d:40:99:c9:ac:d1:05:58:57:92:69:
21:ad:20:bd:d0:99:d6:58:b4:49:e0:ba:77:6c:81:
94:fa:9f:df:f7:5a:1e:9f:65:17:5e:e6:8b:4b:b4:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:CB:51:00:76:41:A9:EC:AF:52:83:70:22:29:2C:FC:7C:63:7F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/39da1912-6ccb-4412-839a-bcd76138dc96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:15aa::/47
Signature Algorithm: sha256WithRSAEncryption
6b:e4:50:06:c9:6f:d1:8b:72:01:96:7b:cf:03:c5:47:50:61:
84:e2:ce:5a:f6:b6:e2:4d:18:30:7c:64:ef:82:af:41:ad:2d:
61:d8:0a:ee:97:3e:4a:07:b1:86:12:33:30:34:cf:79:5b:ba:
d3:56:be:60:0d:98:18:45:65:db:46:9c:12:fe:0b:f3:be:7b:
3a:09:1a:ba:23:20:c9:bd:4b:b6:59:22:58:60:ad:ef:7d:68:
53:15:e1:75:1d:6c:f3:7e:80:ac:40:8b:f1:66:3f:ff:02:11:
0e:49:48:8f:01:e7:6b:d7:b4:19:10:d6:4a:56:45:68:f1:d1:
6d:08:7a:a2:25:e0:6b:ae:ca:03:66:60:e2:be:12:ff:ec:dd:
3a:f1:5a:cd:7e:91:51:a5:ba:c1:fb:77:56:7f:5e:e7:16:54:
79:08:0b:71:b3:42:2f:e3:01:ce:c6:9d:da:dc:50:35:53:d2:
27:cd:b6:ec:8c:d3:a7:37:c1:55:84:29:2b:b9:8b:3f:fb:98:
27:99:aa:37:aa:aa:78:fa:d7:62:38:8d:6d:08:b0:c0:4c:2d:
70:39:f8:4b:6c:94:eb:e4:d6:fb:10:12:d9:cb:ca:b1:41:34:
53:cc:73:9b:1c:90:bc:90:9b:0b:41:ef:90:84:16:06:8c:e0:
1d:f3:8f:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:47 2025 by rpki-client