
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e9868c0-b1d0-4159-9bee-5d7fa6d503f6.roa
File: 3e9868c0-b1d0-4159-9bee-5d7fa6d503f6.roa (raw, json)
Hash identifier: 0/5RCiu4wDX4u5wZbloHKMvAtVFfL085OXOebLb94Ls=
Subject key identifier: C6:37:BD:1A:64:94:DC:4C:2E:F7:46:4C:5D:A4:4E:4F:5E:63:63:8C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 19303D3A46F0D9879EBFF3758FD05D76BD65B5F9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e9868c0-b1d0-4159-9bee-5d7fa6d503f6.roa
Signing time: Fri 31 Oct 2025 06:25:24 +0000
ROA not before: Fri 31 Oct 2025 06:25:24 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3ef0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:30:3d:3a:46:f0:d9:87:9e:bf:f3:75:8f:d0:5d:76:bd:65:b5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:25:24 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=1c6463cc26422238f48b73047941cb9c284032842b61f3fc13fb16254540c132, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:d1:d9:65:2d:68:77:b9:40:a6:c7:36:3e:
4a:aa:77:09:73:41:d2:11:58:d7:0c:ff:68:2e:48:
37:4d:47:41:ba:8c:a6:b5:f2:c0:28:bb:2b:17:3e:
e2:be:72:2b:80:63:7d:5b:65:08:69:a2:5e:a5:4e:
b0:c6:cb:86:c9:a8:3a:c6:45:b4:99:9c:b9:fa:74:
bc:df:cf:63:bd:37:53:ed:0b:95:a5:fa:df:cb:c4:
20:3e:09:4b:3f:86:a4:76:ba:ec:96:ba:2d:a6:60:
c4:f3:15:b1:ee:c0:5d:ad:9c:67:1e:1e:f2:ce:f5:
81:b1:00:25:ae:6d:fa:fe:8f:f6:a2:21:8c:6b:6e:
13:4e:51:5e:f8:05:2e:19:90:79:73:85:62:2e:3b:
fe:36:bf:eb:aa:12:3c:18:42:40:06:48:d2:94:b4:
2a:1a:67:72:d6:90:13:d0:e2:f4:ad:1d:17:3b:37:
fe:e1:1f:4e:80:f2:02:f3:79:97:21:5b:86:e0:25:
b6:75:29:76:8e:1f:6d:f7:0f:76:fe:76:d1:ca:c4:
72:d5:86:cb:6b:16:1f:1a:dd:66:9f:b7:f2:a7:40:
1c:28:ee:f9:a9:22:d0:d0:35:e3:88:8d:a0:24:fb:
8b:37:45:af:67:01:6c:f7:3d:cc:06:0f:5d:91:0e:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:37:BD:1A:64:94:DC:4C:2E:F7:46:4C:5D:A4:4E:4F:5E:63:63:8C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e9868c0-b1d0-4159-9bee-5d7fa6d503f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3ef0::/45
Signature Algorithm: sha256WithRSAEncryption
29:3c:a7:a7:bc:4e:52:82:2d:50:7a:94:e7:6d:12:c1:95:f2:
8f:86:22:1a:e2:0b:dd:7f:64:8c:88:fa:ab:9c:e6:34:2f:e5:
e0:83:53:ef:f2:1a:3f:e8:93:bf:41:36:e3:83:ba:0b:be:69:
5c:73:6d:e8:ba:63:8b:33:77:f7:38:33:8e:3a:d7:7a:6a:e6:
b7:eb:83:c6:a0:43:6e:56:ae:19:5d:c7:7b:c8:34:34:2e:2a:
04:07:07:ff:1d:6d:13:99:08:61:1a:fa:3d:bd:70:3a:1a:87:
f2:f4:78:31:d6:7b:fe:86:6d:ab:5e:c4:5a:60:84:2b:7e:c8:
cd:b0:f0:76:47:fc:0f:8c:65:b0:b0:0b:b3:7f:c1:b6:01:49:
98:b2:5b:a3:ae:11:a0:48:86:1b:aa:ae:99:21:17:1e:1b:bb:
ed:68:ae:97:af:c4:e9:6d:39:1a:42:76:2a:91:8b:7c:30:c4:
9d:0a:f2:bd:eb:04:dc:b7:fd:37:5e:05:70:d9:e3:18:a1:e7:
d4:8c:1b:41:9c:a5:10:62:e3:ec:ce:68:ec:1a:0c:49:bf:1c:
11:1c:f4:96:92:4e:bb:a1:d9:bf:fa:79:e2:c5:95:39:f3:01:
35:13:af:06:5b:3a:b6:a1:c5:49:09:02:ff:c0:39:63:56:8f:
a9:c3:2e:18
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGTA9Okbw2Yeev/N1j9Bddr1ltfkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyNTI0WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYzY0NjNjYzI2NDIyMjM4ZjQ4YjczMDQ3OTQxY2I5YzI4
NDAzMjg0MmI2MWYzZmMxM2ZiMTYyNTQ1NDBjMTMyMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMV9HZZS1od7lApsc2PkqqdwlzQdIRWNcM/2guSDdNR0G6
jKa18sAouysXPuK+ciuAY31bZQhpol6lTrDGy4bJqDrGRbSZnLn6dLzfz2O9N1Pt
C5Wl+t/LxCA+CUs/hqR2uuyWui2mYMTzFbHuwF2tnGceHvLO9YGxACWubfr+j/ai
IYxrbhNOUV74BS4ZkHlzhWIuO/42v+uqEjwYQkAGSNKUtCoaZ3LWkBPQ4vStHRc7
N/7hH06A8gLzeZchW4bgJbZ1KXaOH233D3b+dtHKxHLVhstrFh8a3Waft/KnQBwo
7vmpItDQNeOIjaAk+4s3Ra9nAWz3PcwGD12RDrivAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxje9GmSU3Ewu90ZMXaROT15jY4wwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzNlOTg2OGMwLWIxZDAtNDE1OS05YmVlLTVkN2ZhNmQ1MDNmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAPvAwDQYJKoZIhvcNAQELBQADggEBACk8p6e8TlKCLVB6lOdtEsGV
8o+GIhriC91/ZIyI+quc5jQv5eCDU+/yGj/ok79BNuODugu+aVxzbei6Y4szd/c4
M44613pq5rfrg8agQ25Wrhldx3vINDQuKgQHB/8dbROZCGEa+j29cDoah/L0eDHW
e/6GbatexFpghCt+yM2w8HZH/A+MZbCwC7N/wbYBSZiyW6OuEaBIhhuqrpkhFx4b
u+1orpevxOltORpCdiqRi3wwxJ0K8r3rBNy3/TdeBXDZ4xih59SMG0GcpRBi4+zO
aOwaDEm/HBEc9JaSTruh2b/6eeLFlTnzATUTrwZbOrahxUkJAv/AOWNWj6nDLhg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:34 2025 by rpki-client