
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/478b99fd-b7d6-4587-98ec-8069b664aa1c.roa
File: 478b99fd-b7d6-4587-98ec-8069b664aa1c.roa (raw, json)
Hash identifier: L4piJwu0t3OyXkOJOaDbzNmOQ9onttl3ztx97SxeuM4=
Subject key identifier: 25:E9:E4:EC:59:06:AF:29:12:16:DB:43:D1:5C:9D:A5:81:C0:B8:A3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 38186AA6E5EE80E9F41E6E8D104E548C6BC98CAD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/478b99fd-b7d6-4587-98ec-8069b664aa1c.roa
Signing time: Fri 31 Oct 2025 06:36:58 +0000
ROA not before: Fri 31 Oct 2025 06:36:58 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:17e0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:18:6a:a6:e5:ee:80:e9:f4:1e:6e:8d:10:4e:54:8c:6b:c9:8c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:36:58 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=d5921c1d536c0f599b1d8cb2256ae8c0fb2d6c01ea4382e119e7fff57f459555, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:c6:f0:22:b6:3e:46:ab:fa:f5:c6:17:53:
e2:e8:33:b6:ba:17:c5:84:a2:a5:70:38:be:a6:6a:
14:ad:50:b4:48:96:04:ee:14:37:00:49:d0:db:ee:
82:49:47:bd:c9:c6:65:e3:db:a8:6f:c4:76:0b:fb:
78:b6:ac:1c:6e:73:6b:43:71:9b:29:70:6d:58:61:
c6:bd:e7:0d:a8:48:96:e5:d2:94:96:c9:e3:b0:0f:
98:0a:00:7b:db:35:10:75:06:1c:79:2c:25:39:93:
a4:c6:d1:cd:b6:8a:73:8a:5a:e6:26:de:1e:d6:f3:
12:e5:85:aa:59:38:bf:12:49:e1:cd:b0:98:09:1a:
2c:ac:30:70:0f:0f:c4:85:e5:52:45:e5:06:2a:76:
1a:87:3f:e0:ee:c5:6a:44:bc:e9:9a:5d:0b:36:5b:
e2:03:45:3d:7f:97:35:59:e1:79:39:18:dd:48:15:
ed:e1:58:2c:e6:84:f0:4c:aa:a8:aa:03:24:29:82:
50:3f:fd:34:9a:a0:ed:ae:b7:2e:11:54:c6:67:a8:
a4:a8:7c:36:fa:65:69:18:72:a1:f4:d7:15:19:6b:
34:79:d2:5e:93:8e:61:ad:ba:f3:26:ea:28:dc:88:
2e:e9:ca:11:a3:1d:6d:a4:a1:7f:9c:db:fc:fe:10:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:E4:EC:59:06:AF:29:12:16:DB:43:D1:5C:9D:A5:81:C0:B8:A3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/478b99fd-b7d6-4587-98ec-8069b664aa1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:17e0::/44
Signature Algorithm: sha256WithRSAEncryption
6a:fa:14:ad:fb:16:ee:14:d0:d7:d9:4c:a0:fb:2c:03:4b:e2:
a5:da:51:e6:98:ba:c1:ea:f4:eb:5c:a8:dc:04:ed:9e:88:4f:
28:1d:7d:7b:82:aa:61:1e:5b:1e:fb:04:5c:60:53:4d:fc:3d:
36:41:ea:da:de:83:c4:5f:ab:17:82:8f:03:3b:72:db:e6:ce:
36:e0:93:81:36:b4:43:bb:24:dc:30:80:26:04:4c:74:ce:8f:
a8:d2:60:67:91:0e:3c:3a:0a:75:94:ee:0b:f4:18:0e:ac:be:
e2:e6:3c:9c:57:5e:96:8d:f6:2b:01:53:81:70:e0:e8:46:ed:
d6:f3:a7:eb:01:13:e7:26:9b:15:d9:0c:55:c8:f3:7e:f9:6f:
33:71:8a:bf:e1:60:3c:a8:4e:49:e6:69:9e:84:eb:47:0b:8a:
c6:f8:16:47:36:de:c6:52:c4:7e:c7:e0:9d:74:a5:85:6b:0a:
30:29:59:55:5a:80:83:f5:12:7f:9f:5b:b6:a6:5f:1c:13:9f:
d9:a2:55:2e:03:00:6a:39:f1:37:65:46:38:93:91:57:27:a3:
08:6f:df:15:a7:61:59:c6:75:32:41:5b:c1:00:09:93:f9:b9:
eb:b3:8f:c6:85:e4:d1:8c:09:bb:b2:af:59:57:5d:ef:a9:66:
ea:c1:49:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:38 2025 by rpki-client