
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42fe9520-d889-4442-880c-548ff61cfff8.roa
File: 42fe9520-d889-4442-880c-548ff61cfff8.roa (raw, json)
Hash identifier: o3zlz7RaPAgDzL/Wc/MqEKmpXZN17eM1aaW2eLdHieE=
Subject key identifier: AE:E2:4F:B1:08:B5:90:D8:B2:C5:89:1E:0F:F1:A9:97:77:81:58:3D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 64B9E60B61F1B5D5D93F9B54EC0950E5CB2292B9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42fe9520-d889-4442-880c-548ff61cfff8.roa
Signing time: Fri 31 Oct 2025 06:37:10 +0000
ROA not before: Fri 31 Oct 2025 06:37:10 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1990::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b9:e6:0b:61:f1:b5:d5:d9:3f:9b:54:ec:09:50:e5:cb:22:92:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:37:10 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ad55c847722bcab507e6d6697222175bbdc29b93339a59eb45add98e9c6a0194, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:02:e6:ed:0e:3e:df:14:1d:fb:f6:b9:5f:
c2:14:1c:98:bb:17:8e:57:96:24:b4:79:f8:f9:1e:
c1:2f:2f:c5:9b:8e:cf:f2:cd:d9:31:22:5a:a7:28:
a7:43:b9:e4:9b:42:07:f4:e3:17:7a:79:b9:dd:f3:
d6:b3:cd:33:f3:d1:8a:eb:ee:59:35:a0:2b:0d:9b:
11:fd:1e:04:a8:2f:92:08:ee:ee:f2:bc:c3:53:a5:
bd:95:de:3e:6d:9c:f1:94:94:b3:1f:6a:27:e8:3c:
5e:a7:ed:12:6a:a9:fe:f6:44:3d:29:e1:79:3d:e0:
52:99:fa:c4:ba:11:a2:7c:96:c3:9a:2f:9f:29:9d:
53:e8:59:0a:a6:23:e9:e6:a1:52:c7:9d:34:d1:c3:
98:18:62:fb:aa:8b:b1:59:84:57:d4:31:0f:0c:ba:
af:d7:46:a3:2c:df:7e:f7:92:30:3e:b0:86:1e:fd:
81:b2:cb:c6:65:9f:97:49:18:41:4b:61:97:36:1a:
bd:7e:a8:7f:85:17:62:54:9b:ea:4b:54:2b:f1:3f:
54:4f:d7:93:7f:9c:f9:d9:d8:b7:92:7f:6b:d4:20:
07:b6:1f:09:c5:cd:f9:65:6f:c5:47:59:d3:df:18:
62:e2:5f:65:8b:6a:94:57:61:a6:f0:0c:16:1a:b5:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E2:4F:B1:08:B5:90:D8:B2:C5:89:1E:0F:F1:A9:97:77:81:58:3D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/42fe9520-d889-4442-880c-548ff61cfff8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1990::/44
Signature Algorithm: sha256WithRSAEncryption
21:25:d3:07:4c:dc:4e:db:eb:44:5f:7f:fc:b0:ef:e4:7b:24:
5e:2c:6a:6c:30:c7:69:45:ca:89:ac:e4:d7:8f:67:d4:b9:f9:
5b:e9:5f:57:2c:4a:04:e1:0c:63:59:aa:0e:d2:57:e4:b5:0c:
6f:67:5d:df:24:9f:0c:68:04:ac:20:66:cd:eb:5f:89:2c:a2:
f5:ed:a7:62:d4:fd:e1:40:32:b0:4a:12:d5:72:e8:c4:ed:e2:
37:c6:3a:e9:07:cd:27:10:5c:26:d3:4c:78:12:38:18:d7:8f:
da:98:e7:98:34:24:54:8c:88:bd:21:4e:e7:bf:2a:af:d1:a0:
58:34:dd:7a:d2:60:4e:cb:f0:0b:fb:22:96:d6:f4:7a:1e:4f:
d8:4b:41:ef:ad:89:fd:26:1f:61:6e:0e:0d:40:72:94:29:30:
50:12:17:31:2f:80:26:d3:e6:66:0c:55:9c:44:81:26:4e:29:
5a:96:dc:2f:9b:a1:af:50:59:00:29:87:48:31:34:22:b7:99:
f3:c0:d2:a3:30:f5:1a:9c:b9:96:cb:51:f5:d2:a4:15:36:d1:
a7:56:1e:dd:07:0f:20:7a:22:a7:25:de:23:e9:2d:9c:a4:a8:
19:a1:74:ee:a5:d7:ce:c1:49:44:3b:92:a7:14:ee:20:6c:65:
bc:5a:90:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:40 2025 by rpki-client