
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46975fb6-d369-4b30-b01f-5112fe652558.roa
File: 46975fb6-d369-4b30-b01f-5112fe652558.roa (raw, json)
Hash identifier: 1TgBFJuHWKWm8Rr37QLegTfaZbYbJM2cMOXDXod5K18=
Subject key identifier: 83:75:D2:AD:14:CA:5A:F6:A3:CF:22:02:12:E6:4F:0B:E7:38:3B:21
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4E289BA3816A2EABDCCA6D00F93EBDE602595BE0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46975fb6-d369-4b30-b01f-5112fe652558.roa
Signing time: Fri 31 Oct 2025 00:51:44 +0000
ROA not before: Fri 31 Oct 2025 00:51:44 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:379a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:28:9b:a3:81:6a:2e:ab:dc:ca:6d:00:f9:3e:bd:e6:02:59:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:51:44 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=89adb9f88b9d08253d550dd536e23123073128b418590f916ab81df749398be4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:22:07:ad:b2:3c:8d:4c:a3:4b:87:7f:41:
75:67:0f:bb:7e:72:8f:ff:a3:77:2c:a3:f7:04:35:
9c:2b:2e:95:75:44:45:37:0d:ee:37:37:55:51:1d:
84:be:ba:d6:33:bf:d2:18:d0:04:28:dc:bc:24:87:
99:3f:9b:d2:da:13:1e:60:9d:10:5a:37:31:d3:e7:
05:35:3d:5a:c9:0f:06:46:d5:ef:a5:aa:fd:82:0f:
76:cd:b7:e9:0c:6f:54:17:fb:69:c2:a8:13:3e:4c:
53:1e:35:47:50:4b:5c:af:94:ea:9c:97:3c:d4:09:
aa:22:6c:ff:e9:43:f3:32:c0:42:05:46:88:fa:31:
4a:8a:94:05:c0:f4:c4:ab:66:af:12:d4:e3:01:10:
92:33:ce:35:60:de:21:e3:d7:95:20:6b:43:fa:d1:
0a:3e:52:a2:2d:bb:65:04:e7:78:ad:41:d2:62:7d:
e9:19:b8:0b:d1:f5:5b:97:11:05:42:77:2d:25:46:
36:9c:f9:87:68:e0:a4:8e:a8:00:8e:d3:8c:ba:54:
27:16:a7:98:50:6c:2a:da:d6:20:57:b4:01:c8:4e:
22:f8:36:cb:c4:c9:af:f8:ec:32:34:cf:8d:34:b5:
20:48:33:33:9f:6a:44:0f:5e:03:ea:8e:ae:b5:40:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:75:D2:AD:14:CA:5A:F6:A3:CF:22:02:12:E6:4F:0B:E7:38:3B:21
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46975fb6-d369-4b30-b01f-5112fe652558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:379a::/47
Signature Algorithm: sha256WithRSAEncryption
ab:bb:a5:93:7c:96:77:36:a5:56:ed:31:2b:1b:e1:04:90:4c:
9d:91:50:9a:4d:e6:29:bf:be:c0:1e:83:3c:d7:39:4b:54:d9:
44:bc:f2:3b:68:8c:25:36:95:ee:24:b9:c6:b2:1a:58:eb:90:
75:70:8b:be:f3:5d:bb:b0:1c:db:88:b1:db:e9:01:d2:f0:60:
4f:85:72:4a:e5:f5:6b:e0:b1:9f:38:23:ff:d3:75:00:85:3b:
66:50:f5:15:c8:ee:28:db:38:70:92:b3:ed:9d:9f:79:8a:47:
b7:7c:9c:96:6c:34:d3:b0:6c:03:ca:09:3e:ae:d5:4a:05:17:
f3:2c:5b:1f:d0:a0:31:47:ed:60:4f:0d:2e:a6:ac:dc:3f:db:
b3:9f:d7:61:26:74:e1:71:ec:e4:ec:6d:06:6b:64:7c:a0:6e:
1b:18:31:ed:e6:4d:f6:88:4c:c3:3a:93:7a:92:a8:17:93:ad:
a6:26:a9:9f:b8:47:d0:df:bc:d6:7e:34:ef:42:00:42:2d:95:
a4:70:50:be:98:b6:36:54:05:d1:d4:ad:60:45:2e:c5:a7:d0:
7d:73:fb:9e:12:d0:9a:67:6b:a4:7f:2e:be:4f:91:95:7a:a4:
34:bd:9f:99:91:53:4c:33:32:d7:5c:49:68:a5:55:5e:4e:3e:
95:15:1f:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:19 2025 by rpki-client