
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4aa44f83-aaad-4bba-91b7-5efa20e60e86.roa
File: 4aa44f83-aaad-4bba-91b7-5efa20e60e86.roa (raw, json)
Hash identifier: K9BMH/ith/QHzQ6kx+Y545FUC0Dy3BVN3DGp66dr7do=
Subject key identifier: 09:4B:D1:7D:6C:BB:D9:B2:E2:71:BE:85:D6:44:B0:57:7E:0A:87:14
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1010E3D3757829F7ACCF9D4420DC7B105736F8A7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4aa44f83-aaad-4bba-91b7-5efa20e60e86.roa
Signing time: Fri 31 Oct 2025 04:41:24 +0000
ROA not before: Fri 31 Oct 2025 04:41:24 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c04::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:10:e3:d3:75:78:29:f7:ac:cf:9d:44:20:dc:7b:10:57:36:f8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:41:24 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=b9416f300528789bc5e5ec9f685e6ab8a2c30a38f23d4a218e4d7c2854290270, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:ac:a3:c9:08:3c:95:c0:b4:69:75:e7:41:
ef:cb:d7:c4:60:67:e2:28:66:3f:cb:96:8d:3e:a0:
42:8c:e8:07:23:24:15:fd:aa:b7:1a:59:61:13:5c:
17:99:7d:33:18:42:9e:02:83:fa:e4:b0:93:25:7a:
fc:a0:05:eb:d9:dc:e3:4f:41:d2:cc:0f:e6:30:d7:
f9:c9:a2:b0:13:95:a3:67:69:ef:85:89:10:52:0c:
f9:1e:fc:fc:fd:2c:ca:08:97:0f:8c:25:e2:ba:c9:
b6:53:4f:0e:ea:c6:96:2d:78:75:1b:b4:02:9c:f6:
20:e7:3c:a1:29:68:66:07:09:1a:31:0b:84:02:47:
7f:05:0f:9d:d5:14:3e:1a:63:10:99:47:a5:dc:fb:
f4:ba:ae:08:90:b3:a7:15:61:fd:ff:be:fa:8f:b5:
3b:99:07:7b:a3:3d:b6:12:26:e4:82:aa:e8:54:2b:
f0:22:07:72:1b:44:18:7f:27:0b:53:ef:89:2c:2f:
bd:94:4d:42:ea:a7:54:62:a6:a0:e0:50:22:53:82:
d5:f7:7a:cc:dc:c5:2f:a5:09:6a:ed:13:67:23:2e:
24:00:dc:6f:04:bf:99:56:99:76:48:a5:02:44:01:
4e:86:98:72:00:2a:e0:a8:9b:6e:3c:e6:b3:ba:25:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:D1:7D:6C:BB:D9:B2:E2:71:BE:85:D6:44:B0:57:7E:0A:87:14
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4aa44f83-aaad-4bba-91b7-5efa20e60e86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c04::/46
Signature Algorithm: sha256WithRSAEncryption
42:a1:db:34:ba:91:17:cb:cd:b6:c6:70:89:19:1d:cd:b8:e3:
ec:e0:cd:ec:a2:bb:30:2a:01:19:16:4c:72:7f:9c:4c:f2:3e:
99:ff:eb:7a:15:bf:01:02:51:4f:b4:4c:e4:b9:5c:c1:f1:7b:
49:e8:74:31:80:c6:c5:6c:28:d7:3c:58:bc:90:61:92:67:cd:
44:6c:20:f6:ec:48:a9:e9:65:b3:d6:59:60:a6:63:15:cf:3b:
a6:b8:82:81:7c:ee:f5:b8:d9:46:17:07:6f:c3:5d:96:94:c3:
ae:6a:b5:01:95:33:1c:f8:f8:b0:fa:f3:09:b7:08:e7:76:55:
6c:14:75:90:d0:ac:0e:e5:35:67:42:79:d3:3f:c4:79:ba:72:
0a:74:2c:9a:69:4c:de:c3:c8:2b:61:d6:7e:d0:9e:52:e3:4e:
bb:d7:08:a3:5a:89:6e:d0:c6:b9:52:19:a7:3c:d5:7e:d6:ba:
4a:be:76:5e:5f:a8:8d:b6:7f:0c:98:86:d7:27:58:87:db:ff:
9c:29:01:10:6f:4a:aa:f3:52:55:52:07:ea:a0:95:62:f1:7d:
e8:fc:07:84:b7:c9:fe:6e:e4:8f:e3:fc:98:6a:7a:e2:23:31:
7d:f7:a9:8a:f9:4e:60:3d:03:4c:92:50:0d:89:a7:8f:5a:4b:
ee:82:b0:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:31 2025 by rpki-client