
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f5cf9dd-d40d-4d36-879b-b4f507380fa8.roa
File: 3f5cf9dd-d40d-4d36-879b-b4f507380fa8.roa (raw, json)
Hash identifier: ZzB1U/W5l51y+0Jf+oqVrvC4xM89XRR9t7T2wFK7fRU=
Subject key identifier: 24:D9:DB:6B:34:6F:5B:A0:E0:C4:E6:21:71:B8:31:2C:23:12:0B:E1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 754E602F1BD195331560023A9AE930C70425C3F3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f5cf9dd-d40d-4d36-879b-b4f507380fa8.roa
Signing time: Fri 31 Oct 2025 06:56:40 +0000
ROA not before: Fri 31 Oct 2025 06:56:40 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:36d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4e:60:2f:1b:d1:95:33:15:60:02:3a:9a:e9:30:c7:04:25:c3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:56:40 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=fdbb77e5175427407ef8727fdc61003770beb12f6e0415d303bc46ebef06b106, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:3b:f2:b3:29:30:01:b5:e2:4d:a0:46:96:
42:7b:6e:fe:7b:63:76:1a:6d:5e:1a:70:7c:fa:60:
1a:af:d3:72:91:5f:76:37:1c:86:27:0d:9d:01:2c:
20:c5:82:e2:4c:d7:aa:a5:c0:b0:d1:c5:7f:3c:de:
d8:69:8d:da:37:9f:f6:ce:db:46:9b:8a:c5:fe:06:
a2:e9:53:91:18:bf:00:18:6e:7c:da:52:26:c6:d7:
10:02:0a:55:0b:22:52:84:4e:26:19:80:5a:42:ef:
2f:bc:d0:3d:9e:b5:b8:af:b3:ed:94:ed:03:78:f4:
46:79:54:88:71:97:52:fd:8f:1c:29:be:3d:70:21:
bd:d0:55:36:1d:58:f6:93:d8:cc:36:88:1d:47:c6:
aa:80:ac:07:e5:2c:bc:1b:d7:39:a1:00:5d:d2:b2:
6f:e2:6c:2b:ea:0b:f0:95:4b:e5:a5:5c:59:32:52:
f7:7e:1d:ad:ea:fa:a8:bc:b9:0a:9f:a2:44:78:3f:
ee:7b:b4:41:0a:9a:2d:5a:0e:0f:a3:8a:4a:fa:53:
1a:41:26:da:cd:4e:e1:52:57:15:d0:6a:a7:0e:3b:
4a:6f:c8:df:56:8f:89:92:7d:d2:a9:ba:d5:48:a3:
e7:2e:ad:50:f4:99:a9:3f:a0:f3:d3:fa:00:16:6c:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:DB:6B:34:6F:5B:A0:E0:C4:E6:21:71:B8:31:2C:23:12:0B:E1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f5cf9dd-d40d-4d36-879b-b4f507380fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:36d0::/44
Signature Algorithm: sha256WithRSAEncryption
1d:ad:7a:9a:75:04:15:5a:74:0c:c1:95:45:97:db:eb:09:55:
be:48:2e:fa:60:86:d1:c1:ad:f6:3f:a7:1b:25:18:17:6e:01:
4e:ef:39:f4:ed:c2:bb:ba:29:0a:1a:4e:6a:e7:aa:a5:47:31:
b6:fc:04:88:58:07:68:2e:0d:fb:2e:8b:87:00:83:23:db:7b:
71:32:51:17:37:f1:e4:ac:9a:03:28:0d:51:58:e9:f4:a9:fd:
a2:c9:49:26:19:28:c4:2b:94:ce:b1:ad:78:0b:e1:cc:54:74:
f6:01:6f:1d:3a:9c:74:be:f2:fb:c4:a0:0c:38:c8:a2:0d:21:
61:a1:08:60:79:d2:18:40:99:f5:0b:8e:d9:6a:b1:2a:98:fc:
73:af:2f:0d:ea:71:be:81:4e:e8:93:95:b7:00:4f:7a:cd:2c:
25:bd:d8:ca:76:91:8c:d5:62:57:70:a2:65:60:01:64:ef:a6:
6f:3c:f5:92:7e:6c:b3:5c:14:f7:22:10:60:56:b6:67:14:24:
f7:6c:b0:2d:5f:38:3e:27:2e:ef:e1:9d:09:cd:d2:a8:4f:df:
17:ff:63:e6:91:e4:72:87:fe:4a:85:ca:89:a5:fc:1d:55:48:
55:21:b7:8b:86:9f:28:fc:ed:cb:d7:29:a7:0d:07:b0:f1:31:
03:97:52:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:35 2025 by rpki-client