
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46fa4592-63e4-4454-8c56-4dbf52ce6b72.roa
File: 46fa4592-63e4-4454-8c56-4dbf52ce6b72.roa (raw, json)
Hash identifier: CZ6MwY8+TKRm93EQawo949heLV3Ixdtn5eqMUhDh8vM=
Subject key identifier: 27:3C:F2:28:AB:50:2E:5D:B7:F7:6A:BB:F5:AE:B6:3A:FD:28:04:9E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 36009E3ADF1F0BAB4EA9A8E52F3C3F26FDC5B1EA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46fa4592-63e4-4454-8c56-4dbf52ce6b72.roa
Signing time: Fri 31 Oct 2025 07:21:56 +0000
ROA not before: Fri 31 Oct 2025 07:21:56 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2720::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:00:9e:3a:df:1f:0b:ab:4e:a9:a8:e5:2f:3c:3f:26:fd:c5:b1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:21:56 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=d51b7a16c4943e9f152340bd970f54112110302f26c63ef2e2a2e4af55777429, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:7d:05:61:17:39:b7:d5:20:bd:14:ea:bb:
cb:f1:3d:86:ce:c9:9d:56:0d:81:2f:8f:69:1c:f3:
fb:01:fa:db:1e:ba:e0:97:e9:62:c7:a2:da:5f:0e:
11:28:e6:9b:c3:f2:7e:43:22:86:0c:f3:7f:3f:3b:
a0:64:fe:f9:93:46:ed:a9:76:20:92:84:12:76:7f:
e3:67:66:99:e3:b8:bb:37:99:1b:ef:16:d3:2a:69:
a3:d9:ec:40:0a:cb:84:f8:65:2b:2b:a7:5c:76:09:
88:d6:cd:5b:37:5d:35:93:e5:70:5c:5a:28:47:5e:
88:30:8c:ab:dc:7a:5c:8e:af:db:9e:63:b7:42:91:
e6:b3:70:f0:41:32:21:bb:c5:f2:f1:ab:be:8a:4b:
3f:b6:82:6c:cc:11:29:7e:0f:ba:dd:50:0a:6e:1e:
53:12:62:cd:f8:72:e7:c3:97:88:85:81:42:4f:72:
a5:4d:b7:b0:30:b2:20:8c:b7:90:55:ed:a6:d3:95:
05:a4:2d:1f:f5:d2:0e:a8:c2:5c:62:74:8b:ec:e3:
40:55:bd:20:b5:fe:73:2a:c9:79:ec:df:49:09:14:
9c:95:17:1a:f1:81:4b:83:77:b5:34:bd:0d:d7:94:
6d:a1:8b:38:da:e8:72:13:9b:59:e8:fe:48:db:03:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:F2:28:AB:50:2E:5D:B7:F7:6A:BB:F5:AE:B6:3A:FD:28:04:9E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46fa4592-63e4-4454-8c56-4dbf52ce6b72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2720::/43
Signature Algorithm: sha256WithRSAEncryption
97:25:b2:ab:db:ce:30:a7:53:fc:72:8a:b2:0c:5f:2c:a0:41:
8a:7b:14:a0:cd:f0:c8:26:96:39:ac:d9:79:1c:63:5b:5e:a1:
ed:50:37:e1:a7:a8:f0:ca:70:ab:36:ab:33:63:bf:4b:70:8d:
a5:05:c3:02:1a:b4:24:4e:8d:cb:cc:7a:06:40:67:ea:20:ba:
d9:47:33:28:dd:0f:01:86:ce:be:68:5a:d9:f6:17:59:09:21:
a0:e7:96:60:f2:af:55:9c:92:a7:30:66:6e:2b:14:b7:79:d5:
3b:41:f1:aa:38:9d:91:43:71:b8:2d:25:af:8a:b2:5a:7f:91:
ea:e8:a9:a9:b3:2f:f3:48:c5:a8:5b:cf:14:67:9b:d7:38:04:
81:dc:26:59:5c:ec:79:93:38:10:57:0b:f1:07:83:25:7b:21:
31:57:4f:e1:f2:c6:33:4f:87:af:db:22:2c:f7:78:32:9d:0f:
8a:13:af:50:bf:07:2a:8a:4a:eb:14:c6:ca:21:4a:ca:b1:04:
72:58:d5:78:35:b5:d0:b6:5d:56:13:e2:cf:dd:07:76:6c:34:
23:72:bd:08:10:a4:39:b2:02:33:eb:df:03:c7:f1:71:62:2d:
e9:65:91:03:d3:85:37:5c:60:5d:4c:39:64:55:df:52:21:9b:
ab:e3:52:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:46 2025 by rpki-client