
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d5c9993-4654-4039-bb27-030f4fe6d648.roa
File: 3d5c9993-4654-4039-bb27-030f4fe6d648.roa (raw, json)
Hash identifier: VelkLjgy7ennBTXCQkgfMpkNPzmZ3Xiu1NJm3VOOaYY=
Subject key identifier: 46:82:47:A7:0D:59:AA:4F:53:76:0D:56:9D:A8:43:3D:A9:0F:8C:35
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 69F0B21E23D4D6B4191C21E3E419BF314E888B3E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d5c9993-4654-4039-bb27-030f4fe6d648.roa
Signing time: Thu 30 Oct 2025 20:27:16 +0000
ROA not before: Thu 30 Oct 2025 20:27:16 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:24e6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f0:b2:1e:23:d4:d6:b4:19:1c:21:e3:e4:19:bf:31:4e:88:8b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:27:16 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=c7f53406db39043759631294be38c04d97c05277872670dd12b3288b86ee897c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:d5:06:52:26:e2:5e:2c:03:14:09:da:67:
dc:88:f1:68:09:3d:6e:15:72:aa:3f:d6:f4:5c:15:
2f:c3:c8:d8:5c:a0:1e:fc:af:6d:07:54:a5:0a:26:
83:e0:8e:18:55:1c:27:7c:00:d8:2b:eb:bf:39:ab:
16:fc:c3:f2:ad:98:8c:c7:c2:3c:34:b1:ac:00:13:
fe:03:ab:88:10:cf:c9:32:8a:f4:44:fe:1c:05:9e:
21:0c:de:58:ec:71:28:30:93:18:3b:31:48:7f:33:
8c:c3:9e:a1:c0:48:57:11:6c:b5:f5:de:24:62:a3:
ee:cc:a2:6a:83:bc:0b:e8:42:75:aa:ab:02:84:57:
34:d6:e7:e5:81:16:a8:1f:d6:3d:4c:e4:0b:a6:42:
a3:c5:dc:31:c1:07:72:ee:9f:b3:1e:d8:d2:53:4f:
51:61:c2:31:e2:86:b8:a9:15:77:eb:75:83:ff:10:
52:62:a4:e1:a3:38:50:07:4c:9d:2b:0a:30:16:2d:
ab:ba:c2:a9:9a:d1:fa:04:dd:4e:b3:df:f7:12:7c:
b6:ee:d0:40:21:8a:04:1d:30:82:07:ea:c1:5f:62:
f7:2b:7c:77:60:ef:ed:9f:4a:3a:42:25:82:0e:2f:
dc:54:95:52:f5:4b:94:65:da:af:76:00:51:93:82:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:47:A7:0D:59:AA:4F:53:76:0D:56:9D:A8:43:3D:A9:0F:8C:35
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d5c9993-4654-4039-bb27-030f4fe6d648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:24e6::/48
Signature Algorithm: sha256WithRSAEncryption
5d:26:d4:d8:ff:b7:34:06:fe:34:a7:20:ca:e2:77:25:44:80:
f7:34:a2:0d:65:cc:12:b6:00:4b:8c:c3:de:12:c2:7e:8a:0f:
c9:8f:db:39:33:ae:ba:1b:96:e5:5d:5a:8a:35:4e:d1:a4:36:
83:76:49:01:c3:85:da:d4:42:81:99:b3:de:fe:0c:2c:82:ef:
f0:90:cc:14:9e:51:98:10:05:2b:20:79:c9:c4:20:fd:53:af:
5a:93:f3:e7:32:b9:9a:26:d1:b4:f6:2f:d2:1e:2f:22:93:07:
7a:83:a9:c1:23:c2:c3:96:3c:2e:16:7c:9f:50:8d:90:57:5d:
13:fc:58:6e:77:33:aa:65:9d:42:2b:40:f1:1c:61:36:b3:5d:
d9:b9:c3:a3:4c:62:98:e6:a3:28:75:e9:62:69:07:04:68:37:
86:dc:90:1b:35:25:fb:75:7c:44:5c:05:5f:2d:0e:96:09:f0:
55:80:0e:0c:1c:20:af:5e:bd:ba:06:34:88:7f:7f:60:a4:b4:
d9:94:1d:e5:5a:b1:14:66:fa:b1:60:a5:1a:b4:6f:9d:a0:43:
0c:f8:ee:a4:80:34:9f:88:45:13:51:4e:ed:f0:28:7c:f5:d3:
f3:0f:ea:fc:de:1a:67:e1:9a:12:05:bc:96:cd:63:49:ed:41:
97:0d:e9:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:41 2025 by rpki-client