
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a3a08a6-f1db-4740-bd00-e2471867ce5a.roa
File: 4a3a08a6-f1db-4740-bd00-e2471867ce5a.roa (raw, json)
Hash identifier: Z687hltnLhKi3w0iOkHbBLWEZk70AeXNIcNsxpcDZ9k=
Subject key identifier: A1:4C:CD:39:74:3F:E2:9A:1A:FF:4D:59:4B:28:B0:7D:4A:13:2A:C3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0171A5D71163E4E7A39F88769264EC09F9309E6F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a3a08a6-f1db-4740-bd00-e2471867ce5a.roa
Signing time: Fri 31 Oct 2025 02:25:33 +0000
ROA not before: Fri 31 Oct 2025 02:25:33 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:13ec::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:71:a5:d7:11:63:e4:e7:a3:9f:88:76:92:64:ec:09:f9:30:9e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:25:33 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=e0b342b678569ba00f0b51180b2eeb4ade6a758c4a39bfe7941e33658904ce20, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:57:01:3b:44:40:54:5a:13:a9:3c:dd:e0:4a:
0b:c6:9c:66:87:87:41:ce:95:a5:ca:60:27:de:43:
91:26:52:cc:fd:65:6e:35:c3:98:3c:c3:38:3d:02:
4d:2c:d0:24:88:b9:41:22:8c:ce:01:9e:93:e6:76:
25:7b:f5:74:61:df:99:22:84:38:fe:08:85:4e:00:
00:31:36:e4:3f:dd:d2:08:54:a6:71:4b:81:b6:6a:
0b:72:c8:4d:33:9a:f1:5a:07:2f:4c:4b:8d:4b:16:
23:22:c3:89:31:78:0e:b5:11:6a:a5:37:d5:4a:21:
c7:a7:a6:dc:c5:b2:ed:c1:38:1c:a2:58:d7:8c:33:
e6:41:b5:7c:f0:14:b3:27:31:29:29:16:cc:7a:2a:
19:91:a1:11:83:d6:f5:2f:83:48:da:e9:28:8e:86:
7a:65:32:79:c7:0c:b1:2a:9b:ea:bf:12:5d:9b:08:
44:57:70:ef:a0:f0:4d:25:4d:18:0c:2b:4b:21:15:
9a:f5:55:df:ef:59:bc:6d:ad:c5:d9:6d:94:f8:02:
e1:ea:58:c6:40:c2:45:45:d2:94:0e:2b:97:7e:39:
f6:81:f5:24:75:5f:54:1b:af:21:2f:14:b1:6f:6a:
32:4c:14:36:00:31:47:12:05:6c:c5:a6:0a:0d:b1:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:CD:39:74:3F:E2:9A:1A:FF:4D:59:4B:28:B0:7D:4A:13:2A:C3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a3a08a6-f1db-4740-bd00-e2471867ce5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:13ec::/46
Signature Algorithm: sha256WithRSAEncryption
a4:16:a9:76:d6:c3:85:f6:de:79:63:21:82:0a:08:d7:2c:cb:
77:7e:18:0f:7c:48:8a:4a:1c:12:50:6d:84:3c:31:f8:34:29:
da:4a:e9:16:b6:6d:ab:99:6d:d0:c3:54:12:aa:c4:e4:d3:8e:
6c:24:46:9b:ff:04:f8:3b:73:20:96:93:9e:84:96:97:fa:1e:
17:24:1e:03:10:96:79:b4:80:fb:8b:5d:10:b7:19:0b:16:bb:
42:b7:06:a7:66:2a:c2:8f:65:67:9b:6f:e1:47:3a:21:9a:dc:
45:21:ba:2e:c9:54:c8:67:07:35:fa:3f:78:ee:0f:e8:53:6c:
93:dd:4b:a0:a6:72:a6:ce:a4:ce:a0:55:e2:39:10:cc:3d:32:
c6:ec:1b:13:41:9a:4b:33:b5:11:ea:45:84:5f:54:ef:2f:e3:
25:28:0d:0b:fc:cd:e1:a7:26:b9:b0:da:d6:f3:39:e4:22:48:
6a:47:0c:54:e1:30:08:0f:55:0f:bf:db:12:b9:fb:7c:1c:fe:
ed:57:ba:89:e1:a8:38:32:d9:a6:ba:f1:d8:3e:58:47:27:d5:
ae:cd:57:10:53:9b:62:a6:25:96:bf:11:b8:01:7e:6c:ab:73:
32:51:28:53:2b:68:12:c5:7c:69:d7:d6:a0:2d:f8:3f:14:18:
e5:15:4e:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:10 2025 by rpki-client