
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/40548ef6-96d6-43ab-aa05-1e4fec17184e.roa
File: 40548ef6-96d6-43ab-aa05-1e4fec17184e.roa (raw, json)
Hash identifier: KAntY4KWCcmd973P2zf0PB/T80YfBtYlmszFrxleIq0=
Subject key identifier: 66:CF:4B:2E:0A:84:DC:81:6D:90:2E:F3:5F:E2:F3:3B:AC:1E:E5:FB
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 076C98AA9428076B8B478800E4DCD3CF45D8BA06
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/40548ef6-96d6-43ab-aa05-1e4fec17184e.roa
Signing time: Thu 30 Oct 2025 22:27:09 +0000
ROA not before: Thu 30 Oct 2025 22:27:09 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1d4a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6c:98:aa:94:28:07:6b:8b:47:88:00:e4:dc:d3:cf:45:d8:ba:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:27:09 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=50a3d05b337dc18dfe14fb428dd39e86ca88fda259451e83f319ceddc913c00d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:ba:ae:57:40:53:8e:10:97:56:25:30:07:
ac:e5:c6:c1:63:dd:9c:10:85:77:85:71:7b:4b:2c:
82:2e:33:5c:03:54:79:5c:a8:8b:33:28:20:3e:c5:
c6:da:78:6a:d8:92:2f:fd:f6:ee:d3:34:72:53:b8:
ac:da:e9:2a:0e:73:f1:3d:8b:a2:fe:6a:c9:0b:a4:
8e:e2:ef:19:2d:e1:5c:3a:bb:cb:e4:51:69:a1:c9:
fe:6c:58:b3:71:cb:55:b5:ae:56:b2:45:fb:5c:c3:
15:1b:10:8f:dd:4a:45:67:5f:2f:20:57:04:68:1c:
8c:2f:ae:e6:45:e0:02:04:c5:ab:f2:cb:b5:0a:69:
7d:86:db:f3:ff:7a:39:68:a8:c0:dd:f5:46:6e:38:
49:48:d8:7d:80:17:23:52:8e:c7:c8:a6:87:e8:6f:
d1:81:ef:78:9e:15:69:1b:f2:61:45:5e:db:15:4e:
3b:da:69:82:4a:6e:72:46:2b:05:99:4d:27:1f:99:
b1:3e:47:54:a9:43:e9:09:3f:81:18:54:b4:93:51:
2d:d7:79:b2:db:40:23:1b:a7:3c:10:e2:0e:89:24:
75:9a:1f:ba:58:75:73:53:3d:e3:40:0a:af:e4:82:
2f:a7:a1:a8:6a:e7:2d:41:1f:e6:e8:1f:b7:8a:b8:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CF:4B:2E:0A:84:DC:81:6D:90:2E:F3:5F:E2:F3:3B:AC:1E:E5:FB
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/40548ef6-96d6-43ab-aa05-1e4fec17184e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1d4a::/47
Signature Algorithm: sha256WithRSAEncryption
83:e5:a8:26:8d:07:58:cd:bb:88:d4:71:b6:eb:65:02:c0:26:
8a:48:71:2e:6e:23:5d:2b:db:fd:8c:10:6f:d5:2b:2e:44:4e:
a9:b9:b1:bf:52:0e:97:97:e8:e0:ce:ed:71:b5:dc:d8:1d:b5:
ce:5f:0b:ae:06:81:5d:33:8e:1a:73:6c:5e:98:3b:2e:8c:9c:
82:47:af:7e:34:b9:d4:79:07:ca:71:a7:d4:22:b7:ba:99:31:
9c:68:0d:69:65:3d:73:6e:16:3c:65:30:26:9a:76:51:4a:c0:
ef:23:9e:4f:9b:7a:c8:c8:9b:4e:c9:e4:a0:93:c5:62:97:59:
5f:df:51:dd:b4:fa:76:e3:0a:52:c1:a6:79:c8:05:ed:d5:0f:
3d:2a:8e:9d:99:d0:c1:3a:c2:33:2c:9d:4d:77:c5:2f:97:1f:
dc:a5:39:b6:c1:d0:f3:18:58:8e:fc:42:e7:fb:9f:db:3c:70:
aa:88:29:45:a9:12:85:ec:d8:af:ff:7b:06:56:a9:99:e4:8e:
b5:52:6f:57:24:2f:cd:d3:7d:fa:ae:eb:22:16:6c:3c:33:08:
95:44:c8:44:62:ab:2d:e9:38:2f:a3:a5:5d:47:85:b5:a3:a2:
9c:14:5a:d8:d3:d1:81:f6:ce:c4:2b:c0:93:e6:1c:29:87:3b:
f4:9b:7c:a1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUB2yYqpQoB2uLR4gA5NzTz0XYugYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIyNzA5WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MGEzZDA1YjMzN2RjMThkZmUxNGZiNDI4ZGQzOWU4NmNh
ODhmZGEyNTk0NTFlODNmMzE5Y2VkZGM5MTNjMDBkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9/LquV0BTjhCXViUwB6zlxsFj3ZwQhXeFcXtLLIIuM1wD
VHlcqIszKCA+xcbaeGrYki/99u7TNHJTuKza6SoOc/E9i6L+askLpI7i7xkt4Vw6
u8vkUWmhyf5sWLNxy1W1rlayRftcwxUbEI/dSkVnXy8gVwRoHIwvruZF4AIExavy
y7UKaX2G2/P/ejloqMDd9UZuOElI2H2AFyNSjsfIpofob9GB73ieFWkb8mFFXtsV
TjvaaYJKbnJGKwWZTScfmbE+R1SpQ+kJP4EYVLSTUS3XebLbQCMbpzwQ4g6JJHWa
H7pYdXNTPeNACq/kgi+noahq5y1BH+boH7eKuEYnAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZs9LLgqE3IFtkC7zX+LzO6we5fswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQwNTQ4ZWY2LTk2ZDYtNDNhYi1hYTA1LTFlNGZlYzE3MTg0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAHUowDQYJKoZIhvcNAQELBQADggEBAIPlqCaNB1jNu4jUcbbrZQLA
JopIcS5uI10r2/2MEG/VKy5ETqm5sb9SDpeX6ODO7XG13Ngdtc5fC64GgV0zjhpz
bF6YOy6MnIJHr340udR5B8pxp9Qit7qZMZxoDWllPXNuFjxlMCaadlFKwO8jnk+b
esjIm07J5KCTxWKXWV/fUd20+nbjClLBpnnIBe3VDz0qjp2Z0ME6wjMsnU13xS+X
H9ylObbB0PMYWI78Quf7n9s8cKqIKUWpEoXs2K//ewZWqZnkjrVSb1ckL83Tffqu
6yIWbDwzCJVEyERiqy3pOC+jpV1HhbWjopwUWtjT0YH2zsQrwJPmHCmHO/SbfKE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:51 2025 by rpki-client