
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ede8005-bb4e-4b1f-846f-797fec5a1f89.roa
File: 3ede8005-bb4e-4b1f-846f-797fec5a1f89.roa (raw, json)
Hash identifier: 0euwUPV7K8Ur4T0K7+1WG3igvZ0W579qW2Wocnb6s4g=
Subject key identifier: 78:6F:80:16:DC:75:4B:32:E8:73:2B:4D:D8:26:3B:20:EB:20:2F:85
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 627A958C4587DDAB3426D972F8C7AA25C4BFD4A1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ede8005-bb4e-4b1f-846f-797fec5a1f89.roa
Signing time: Fri 31 Oct 2025 02:41:55 +0000
ROA not before: Fri 31 Oct 2025 02:41:55 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:171c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:7a:95:8c:45:87:dd:ab:34:26:d9:72:f8:c7:aa:25:c4:bf:d4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:41:55 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=acba24b796535484b18aa6c47f254c4aa12a5d88d9c30546f492455bed285f05, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:c4:bd:6f:56:b8:df:bc:2d:00:03:ca:29:
8b:26:27:c0:ee:eb:17:ed:dc:ad:e1:25:d4:21:80:
2f:f1:c0:ba:9f:97:a0:b1:99:56:4f:5b:00:d6:86:
0b:db:f0:03:ec:23:c6:90:ef:38:95:c2:aa:0d:ec:
9e:7e:ff:cb:1e:65:22:d8:35:19:42:72:db:b6:57:
4b:d1:48:17:81:4b:a1:e8:31:a1:fe:ee:1d:93:f2:
51:ad:55:3a:34:34:59:bd:b3:32:55:db:49:0f:dc:
22:98:70:be:90:8c:e0:0d:d3:2c:da:fb:92:2d:4c:
a4:0a:e7:bc:7b:c9:53:80:68:0e:12:e4:f7:cb:e8:
a9:31:74:a5:ea:a7:1a:9e:4a:39:3c:d8:c0:b9:04:
53:f5:5f:a3:7c:82:46:07:ce:aa:69:f4:a9:bc:25:
0d:b3:18:a7:f0:68:ff:36:e5:2c:a4:69:14:fe:02:
b2:d8:5b:82:b2:8e:a2:d9:c7:67:24:9a:f2:ad:58:
da:6e:ae:21:34:e2:bc:ab:8b:2a:70:2e:42:5c:b6:
0a:94:20:8d:49:11:26:84:52:89:db:fc:12:8e:2f:
86:02:e6:27:ef:79:2e:55:ce:c0:59:f3:39:7d:4e:
78:37:66:fd:4c:8c:0c:be:69:58:2e:04:00:9e:dc:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:80:16:DC:75:4B:32:E8:73:2B:4D:D8:26:3B:20:EB:20:2F:85
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ede8005-bb4e-4b1f-846f-797fec5a1f89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:171c::/46
Signature Algorithm: sha256WithRSAEncryption
4f:69:91:28:b8:71:e4:34:33:ed:9b:5d:24:ed:40:a6:66:ba:
e3:32:14:a1:14:a5:01:48:34:7f:d6:ee:ff:84:12:ea:78:dd:
09:ba:36:39:a7:29:4f:53:7f:a3:40:b3:b7:23:8b:05:ad:63:
91:da:ec:cc:2b:68:95:51:da:ec:8a:ba:d6:00:72:10:d0:00:
44:1b:15:ed:f9:37:71:54:e0:1d:10:cb:2b:d5:25:56:c4:09:
15:22:58:f8:94:11:26:94:1b:3b:50:20:44:be:99:04:86:74:
a3:98:57:92:89:ea:54:14:1e:96:99:ac:c3:49:aa:27:7e:a1:
08:69:cd:4e:d7:9e:77:09:10:9b:fe:fc:af:04:bd:e4:92:50:
3b:e1:17:a2:4a:ae:73:f1:b1:da:26:74:58:06:6f:9d:5e:6a:
b2:e1:44:26:e8:f0:37:68:e8:aa:02:76:be:b6:50:6e:c6:ee:
fd:58:f6:1b:f8:0a:13:17:5f:76:8a:4a:12:24:cd:ca:c9:dc:
a7:98:52:8c:9a:df:1d:42:6a:b4:ad:b1:75:e6:2c:88:62:18:
6e:f0:cc:eb:94:d6:d4:f1:3d:91:7d:81:24:3f:96:6c:51:41:
66:5b:99:5c:38:14:23:60:31:b7:84:f0:e7:35:62:44:5c:88:
97:2c:bc:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:28 2025 by rpki-client