
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4664d5f8-966e-430d-b5b6-b54bf63c95a7.roa
File: 4664d5f8-966e-430d-b5b6-b54bf63c95a7.roa (raw, json)
Hash identifier: uMtGg8JONV2ZbbDj+Cm4nHZaI4sOHnv+2AZZtjpPHf0=
Subject key identifier: 24:31:DF:03:66:0E:36:EB:AE:3A:07:64:2D:89:3A:0D:49:FF:C4:31
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5A94BBC8C68559DDE620D777AB008BD6F0880125
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4664d5f8-966e-430d-b5b6-b54bf63c95a7.roa
Signing time: Fri 31 Oct 2025 01:58:10 +0000
ROA not before: Fri 31 Oct 2025 01:58:10 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f32::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:94:bb:c8:c6:85:59:dd:e6:20:d7:77:ab:00:8b:d6:f0:88:01:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:58:10 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=c806a72092d0862eb0e5f6ef35a48c8377e90dfe1fcad5cb2b20fbf5699092b9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:8c:be:15:b9:79:3a:d4:fd:fa:fa:25:6e:
7a:0f:d2:86:80:fe:7b:24:63:35:e7:b1:a6:04:d3:
c7:f3:29:59:75:27:5d:f5:3c:e1:fc:e3:ba:bc:e0:
88:8a:f9:69:a9:4c:7f:b4:25:ca:34:73:b4:ea:72:
20:01:e0:64:f1:49:48:f5:12:15:a5:f2:39:51:45:
4f:d9:bf:e7:dd:4d:72:84:a8:5d:41:da:a5:f5:46:
44:f1:dd:f4:81:dd:0b:f7:68:f8:52:ec:c5:20:49:
7f:62:82:2b:42:30:67:d1:9c:cb:a6:b8:23:97:90:
38:e2:1b:fe:e1:1c:5b:3f:cd:1e:39:f5:6e:96:ea:
fa:65:b8:c1:50:85:10:d4:0e:08:22:40:92:96:28:
69:05:90:f6:95:51:36:99:c5:a3:cd:87:6e:fb:4e:
5a:71:a7:c7:26:c4:e1:8a:ea:96:2f:68:91:b8:c8:
31:f3:1f:cc:1c:c9:66:04:84:90:ce:a0:46:29:e8:
2f:5b:60:0e:77:56:31:71:9c:03:b7:44:6e:cb:5b:
b4:d1:3f:c5:2f:ab:7f:c6:e3:5b:c6:25:4d:de:3a:
7d:7d:82:fb:bc:99:f4:24:db:3f:77:18:f3:16:8f:
5b:69:7b:d8:b4:9c:63:43:71:d0:9e:43:0f:14:58:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:DF:03:66:0E:36:EB:AE:3A:07:64:2D:89:3A:0D:49:FF:C4:31
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4664d5f8-966e-430d-b5b6-b54bf63c95a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f32::/47
Signature Algorithm: sha256WithRSAEncryption
ac:fc:de:be:2e:d5:c7:54:e0:ec:1b:1c:4e:31:52:63:60:d5:
c9:70:f3:6d:5c:9d:8e:38:d1:2b:fa:27:7e:58:1c:b0:54:22:
03:d7:7a:f9:b6:4b:0b:b9:e1:b5:56:05:d6:1b:3d:d1:43:ba:
e9:94:ec:d0:b6:6d:2b:f4:38:07:44:e2:47:82:ba:2a:50:f1:
96:71:73:1d:a6:fa:d7:b4:b3:41:fa:61:26:e7:88:65:c5:87:
4d:f2:0b:ca:43:8a:de:7b:58:4a:d4:40:7c:b9:d5:ba:96:8f:
eb:b4:90:63:55:d5:20:14:02:e6:06:8e:b2:e1:46:82:6a:17:
23:da:08:58:ab:45:29:d2:11:51:22:a5:6d:03:b6:f1:ac:b0:
e8:7d:16:c1:90:c0:ce:89:57:41:35:a2:3d:e5:43:48:7d:d9:
f5:a1:68:8a:cb:5f:c3:52:c6:73:54:fb:a6:71:17:16:8d:78:
0e:54:9d:d6:bb:ce:aa:6e:71:da:bb:39:34:80:f7:ea:58:7f:
b8:a1:12:60:97:0c:ed:8c:80:bc:7f:35:d2:07:93:1d:86:38:
69:9d:cd:9e:45:6c:ef:6c:a4:54:77:55:7f:a9:58:a1:9c:7d:
36:f0:b5:84:78:dc:71:8e:8b:e6:4d:b5:24:7f:0c:6c:fd:33:
77:a5:56:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:05 2025 by rpki-client