
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/421ae56c-0c1e-4b2d-8e42-7ed787064a4e.roa
File: 421ae56c-0c1e-4b2d-8e42-7ed787064a4e.roa (raw, json)
Hash identifier: /mBYrtqy3qZFfUTDLJqI4E0olkncjPZjpMCfWLoiq0E=
Subject key identifier: 18:89:49:EE:C7:FE:67:F8:D9:D6:E4:59:31:28:E5:13:26:3D:7C:B4
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 31347B992E4F2309A9AB737E5B5B1DBA73268006
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/421ae56c-0c1e-4b2d-8e42-7ed787064a4e.roa
Signing time: Fri 31 Oct 2025 03:42:01 +0000
ROA not before: Fri 31 Oct 2025 03:42:01 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2d74::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:34:7b:99:2e:4f:23:09:a9:ab:73:7e:5b:5b:1d:ba:73:26:80:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:42:01 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=c19c5d38efd715cbad2765ab73f4ec63fdf7a240cf044ca37115b32750e5539f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:24:35:f3:8b:4c:b2:b3:72:d6:0f:b8:46:dc:
1d:fd:e4:45:fc:1e:39:1f:70:3a:4f:00:21:e5:bc:
86:50:20:11:05:22:93:37:b8:5d:bc:4a:24:f7:70:
ea:0c:0d:8e:da:4b:d2:78:2f:13:a1:e5:c1:45:9f:
76:0f:4f:99:5f:7c:e5:49:50:4c:f1:a9:5d:cb:5c:
a7:4e:a6:7b:5d:2d:4f:35:86:92:fc:8e:db:9f:d1:
0d:f9:45:01:84:ae:70:8b:d6:32:58:03:0d:bf:71:
09:c6:b9:c2:08:ce:d9:bb:f2:37:83:8c:49:2e:c7:
d1:f5:21:1d:b9:d4:38:fd:42:69:84:b4:8d:c4:51:
80:22:79:73:78:e2:cc:d0:45:cc:f2:34:b1:15:bb:
21:3a:be:0c:b2:59:4c:47:7c:77:a5:b8:e6:a2:78:
89:1a:f1:90:3d:ab:32:90:64:ad:39:6d:a5:e8:1a:
c1:79:89:ee:f6:5d:4b:42:f0:fa:b8:36:e6:1f:b9:
fc:3e:38:6b:f2:8a:00:bd:0e:04:64:05:49:1b:76:
73:9e:e1:9d:c8:de:1b:eb:4c:75:f8:a5:07:38:16:
82:14:f1:f1:1a:d1:ec:12:85:74:3a:f0:d7:aa:c8:
4d:ab:67:45:af:4a:91:df:05:4a:ad:65:14:5f:ff:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:89:49:EE:C7:FE:67:F8:D9:D6:E4:59:31:28:E5:13:26:3D:7C:B4
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/421ae56c-0c1e-4b2d-8e42-7ed787064a4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2d74::/46
Signature Algorithm: sha256WithRSAEncryption
33:c4:b2:52:20:d6:a6:e4:93:c6:27:ae:ad:c4:a3:78:68:b0:
e1:d1:de:fc:a3:3c:ff:a0:c0:70:7c:0a:cd:ce:7f:bb:31:d1:
08:47:04:42:f6:93:9a:71:39:dc:7b:ff:91:65:61:b7:d7:12:
24:52:ac:22:f7:74:ee:3e:e2:b5:88:cb:66:2d:06:16:25:84:
33:6e:ec:4e:1c:65:10:5b:54:69:d7:c0:d5:3c:f9:2d:03:99:
e0:32:0f:6b:0a:3e:ae:54:6b:a2:78:07:5d:2b:7c:1a:fc:81:
87:9c:ce:8a:30:cf:1e:29:1d:57:ee:5c:8f:a9:d2:3f:52:ef:
ae:cf:16:66:39:9b:54:46:41:b8:10:85:60:f4:00:a0:8c:c1:
a3:44:c5:2b:ca:68:aa:53:06:a8:f5:02:8a:54:87:eb:18:35:
a5:b7:e3:77:1e:0a:47:85:44:a9:9b:90:70:1e:6c:7d:2f:b8:
f4:71:40:b2:4f:49:a6:a0:e9:f1:39:8f:6e:70:e9:0b:da:ec:
65:99:ee:d2:a1:20:27:f7:45:17:24:ef:27:d5:2b:1c:86:da:
37:63:61:2c:79:e2:c4:f6:e3:a4:cd:25:05:27:3e:0c:47:05:
3d:98:e5:0c:b4:2b:e6:74:d0:0b:77:e2:63:55:31:34:4a:f5:
6a:43:82:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:04 2025 by rpki-client