
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ec449a2-a03a-4908-b8f7-951ac27ed8d2.roa
File: 3ec449a2-a03a-4908-b8f7-951ac27ed8d2.roa (raw, json)
Hash identifier: ZnesIov6rElcX5MAaRS0cHc2m0kog+juq/1WswOtyA8=
Subject key identifier: 6E:55:9C:6A:42:14:B8:CB:29:89:1E:D8:85:47:E4:5B:88:EA:4F:B8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 224FD170E39DEBC4FBDB98669C41FCE55DB81B78
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ec449a2-a03a-4908-b8f7-951ac27ed8d2.roa
Signing time: Fri 31 Oct 2025 02:22:05 +0000
ROA not before: Fri 31 Oct 2025 02:22:05 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1298::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4f:d1:70:e3:9d:eb:c4:fb:db:98:66:9c:41:fc:e5:5d:b8:1b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:22:05 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=2f5a1de92d38007be1f336458df5735271c7fe559a0a989b8cb7d0c819ae1e85, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:38:8f:04:5e:46:ba:1b:6f:80:3e:c8:e2:
42:36:d3:11:bc:f1:85:a7:63:c0:1b:d8:8e:c3:86:
f3:b9:9d:c9:22:4b:76:b4:16:ca:3e:62:6b:2e:71:
57:05:83:f3:8b:d6:ec:4d:2e:ee:60:76:fe:57:dc:
f0:64:36:fe:d7:42:68:fd:dc:a7:a2:10:dc:1e:a2:
be:85:2e:ad:15:75:c2:ea:83:ad:b1:19:43:92:73:
d5:ce:83:28:94:8f:fe:1c:6f:7d:59:b5:1e:c7:20:
8f:6a:07:67:c3:07:8e:15:54:e2:ed:ef:cf:f9:5e:
25:a0:ed:1d:e0:dc:f9:49:0d:f1:d2:3e:89:4c:9a:
56:17:e6:ee:4a:eb:cb:25:98:94:f7:bd:85:27:90:
24:36:36:07:ff:10:4c:a8:5d:a9:c8:c8:17:94:24:
0e:8a:94:52:e0:b2:00:2a:48:41:80:7c:96:69:ea:
91:da:b1:54:f5:f5:28:24:6a:24:ed:94:34:c5:94:
bc:ba:20:fd:81:8e:9b:cc:46:f7:f0:c1:aa:cd:0a:
3e:bb:9b:d3:b6:21:67:51:99:3b:7a:08:49:7e:4c:
0a:91:8a:2e:87:85:d7:84:30:bd:c7:d3:55:8f:fd:
c2:94:d5:75:8f:d6:71:cc:20:ad:f3:55:44:6f:82:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:55:9C:6A:42:14:B8:CB:29:89:1E:D8:85:47:E4:5B:88:EA:4F:B8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ec449a2-a03a-4908-b8f7-951ac27ed8d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1298::/46
Signature Algorithm: sha256WithRSAEncryption
54:77:66:df:58:ed:d0:04:4d:85:60:34:2f:53:54:e8:9c:3b:
1b:52:e1:e7:03:52:c1:e8:c2:65:77:c6:a5:9a:3a:0a:4c:45:
2c:67:bf:cf:c2:97:a1:0f:5c:a4:40:3f:08:97:df:87:d0:74:
9e:cf:db:ba:26:08:a3:71:44:7f:99:1a:1d:69:34:06:99:0b:
2c:9e:cc:1a:e8:22:bd:47:67:38:49:cf:ff:9e:ae:cd:ce:51:
c2:ef:fd:70:77:09:7b:8d:96:0d:8c:70:6b:47:c0:68:c4:8f:
84:bc:5e:24:49:60:eb:81:0a:f7:a0:05:8f:22:bb:7a:fe:5c:
19:87:93:85:84:be:d7:8b:7f:17:f9:46:e9:6c:96:e0:2f:df:
be:92:f6:5a:b9:d1:62:d5:86:04:0e:f7:cd:84:a4:49:f3:fb:
b0:e7:d0:7d:b3:ed:d2:f0:ac:a3:41:5d:68:29:fe:b4:52:9e:
ec:33:6e:e3:59:c9:b3:d7:6e:82:ec:80:3c:bf:74:df:84:15:
59:5c:28:17:ba:92:d2:6f:05:98:fb:32:ff:67:33:1e:35:aa:
14:65:6c:d2:28:d4:0d:8d:c0:69:ea:aa:1d:7d:b1:4b:0f:f0:
d1:02:94:17:cc:57:e5:a3:fd:88:59:b4:af:11:e4:ab:64:9e:
d7:b5:c3:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:17 2025 by rpki-client