
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3b7b9b9d-66fc-4df9-b943-ec296800c9d9.roa
File: 3b7b9b9d-66fc-4df9-b943-ec296800c9d9.roa (raw, json)
Hash identifier: SQmikKQwq5qbMl+FG0RpRARLmiEeE6xVrAiqGblN69o=
Subject key identifier: 96:FE:06:D2:91:0A:C4:58:E2:43:D9:5C:DE:A7:BB:31:E0:86:0F:15
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 33E8931CFF39EBCA643591DE84484A296EF60E55
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3b7b9b9d-66fc-4df9-b943-ec296800c9d9.roa
Signing time: Thu 30 Oct 2025 21:08:44 +0000
ROA not before: Thu 30 Oct 2025 21:08:44 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1502::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e8:93:1c:ff:39:eb:ca:64:35:91:de:84:48:4a:29:6e:f6:0e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:08:44 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=b4948fc8276fc9656ec08d542322ec275da485ddcf298b00cb5c366051d38425, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:5e:67:68:a7:96:cd:82:b4:8d:9a:d5:f6:
c7:a1:38:77:70:44:ac:c4:10:28:2c:5a:20:21:ba:
69:82:b1:88:38:bf:54:46:17:a0:97:95:5e:f3:fa:
dd:98:92:30:77:e1:17:26:f3:16:ec:c9:07:4a:9b:
0c:17:39:c2:b6:87:ba:7e:ff:83:92:3f:61:79:b8:
df:c3:67:8a:d9:fc:1a:01:b5:2d:07:9c:b7:97:ae:
c9:b4:5e:61:b9:e1:02:b9:ba:2e:89:74:25:00:67:
0f:9f:73:aa:e7:48:53:6a:30:60:13:b9:1b:30:22:
8d:8f:13:d6:d5:fd:77:d2:a5:b8:e3:f3:0f:d0:5e:
d3:a4:0f:95:b8:d1:af:08:6c:a5:97:52:fd:2f:7d:
09:c5:5e:f3:eb:3f:25:bd:48:37:42:fa:56:72:d7:
26:93:43:dd:69:e6:e7:48:24:4b:d2:d8:72:e9:eb:
66:2b:bc:4b:76:19:25:09:96:66:44:2f:d2:9c:93:
40:9c:fb:2c:2f:28:01:41:4a:25:13:e2:91:84:f1:
44:a3:6f:47:29:18:02:1e:91:41:10:94:bd:3b:5e:
3a:db:46:26:52:4e:97:f8:b2:c0:e7:a1:88:e8:38:
85:a7:9e:10:3b:c9:37:4c:19:7d:2a:e7:f3:d9:aa:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FE:06:D2:91:0A:C4:58:E2:43:D9:5C:DE:A7:BB:31:E0:86:0F:15
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3b7b9b9d-66fc-4df9-b943-ec296800c9d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1502::/47
Signature Algorithm: sha256WithRSAEncryption
4b:28:e0:fc:95:ea:f5:ba:8d:c2:3a:65:b3:0b:1c:c5:97:25:
81:8b:05:33:a3:c3:a1:e7:52:9f:62:ca:b1:3b:10:22:e7:ed:
55:cf:5e:d0:31:f8:31:9c:9c:10:67:02:a5:5e:b9:1d:81:e6:
6a:73:1f:22:16:7c:ee:cb:2f:8b:a0:4a:af:4f:3d:70:22:d3:
b5:b9:e8:84:2a:86:bc:5c:79:09:b9:d7:b0:7b:28:ae:26:be:
5f:8e:7c:22:1d:98:3f:ff:a5:83:04:e1:55:a9:0c:9c:21:b7:
96:ae:a2:4f:7a:39:35:0c:7c:30:11:cd:09:c0:b0:be:32:64:
25:d8:01:e8:fc:62:88:04:f4:34:a8:ce:3a:8c:4f:ae:06:30:
72:84:24:62:09:63:9a:98:27:6e:a7:d5:5d:72:29:96:e1:b1:
2e:ac:c3:b3:12:05:aa:88:68:e0:5a:39:38:c2:46:26:20:ec:
0a:9d:53:48:75:e0:af:ff:c9:41:31:28:23:f8:69:35:29:e1:
c1:c6:de:ed:c1:f1:27:bc:7c:8e:46:82:2f:49:68:2c:60:82:
f3:1a:f0:7f:af:a9:e7:a7:a1:47:6f:67:39:7e:63:5a:2b:4a:
32:5c:89:7b:fb:8d:62:92:cb:55:fe:1f:88:e7:51:02:a7:80:
e0:d5:e3:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:05 2025 by rpki-client