
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d95575e-025d-4d0a-91b2-e3a81dfd894e.roa
File: 4d95575e-025d-4d0a-91b2-e3a81dfd894e.roa (raw, json)
Hash identifier: BKRD6V4vPdZSA39ZUynFUa2SU7Rzllp5LPZnJ9ZCRws=
Subject key identifier: 0F:5A:52:66:C8:E6:C2:E4:68:7F:C3:23:BE:CA:4A:EA:69:78:8A:41
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 730EFC7D5A0C43C6EA262B439E8D9A4BE9D6388F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d95575e-025d-4d0a-91b2-e3a81dfd894e.roa
Signing time: Thu 30 Oct 2025 22:27:20 +0000
ROA not before: Thu 30 Oct 2025 22:27:20 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1d70::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0e:fc:7d:5a:0c:43:c6:ea:26:2b:43:9e:8d:9a:4b:e9:d6:38:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:27:20 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=0040bee8158e0e726fc2c550834800de4a9eca22cfa3d38ed6dee61d8d3a2ca0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c2:2e:2b:b6:ea:e0:87:20:81:60:b0:b4:13:
94:f3:d8:e6:05:55:89:f8:60:42:08:30:01:b9:07:
f1:f7:a1:f6:38:40:28:84:39:9c:27:69:be:87:6f:
7d:b7:66:a6:8c:d2:9c:90:50:76:f5:ba:ac:78:9f:
74:57:31:4a:62:e9:bb:d9:60:25:87:27:b1:77:07:
86:5b:be:7f:a6:e0:18:98:71:e3:1f:8f:9a:05:34:
78:9d:32:38:01:07:2d:bb:6d:42:ee:56:8b:20:c0:
4e:0c:8f:66:e3:03:17:3a:aa:87:b3:8e:eb:1a:a4:
94:4a:9a:c0:aa:93:c8:8b:6a:97:22:35:8c:6e:3a:
fd:51:1a:28:22:79:d3:56:7a:d3:b3:ce:c9:8c:e3:
f6:04:a5:a4:79:83:37:a8:95:a1:da:93:e0:d2:e8:
96:37:5f:54:59:a0:89:eb:60:78:fe:b9:4e:65:a0:
3e:c1:ce:80:eb:54:6f:54:a0:9f:7e:ae:ef:89:22:
bb:68:b8:0f:df:9f:2f:4f:9f:90:76:99:5a:0b:f3:
7e:83:fb:d5:18:3a:d7:c8:c9:49:27:70:80:3a:5d:
5a:cd:ad:05:34:aa:eb:03:d2:39:71:d3:44:07:a1:
f0:ba:07:4f:17:6d:92:6e:77:35:18:85:14:dc:e8:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:52:66:C8:E6:C2:E4:68:7F:C3:23:BE:CA:4A:EA:69:78:8A:41
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d95575e-025d-4d0a-91b2-e3a81dfd894e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1d70::/47
Signature Algorithm: sha256WithRSAEncryption
28:74:c3:1a:1a:c7:17:b9:f6:a4:36:07:23:4c:03:ef:8d:e2:
fb:6a:45:9a:e0:0a:5b:5c:b9:5c:c3:bf:ac:2e:87:e6:c2:16:
3a:98:9a:60:0b:d4:b3:11:a1:f9:ce:85:49:c3:a0:ac:0b:fb:
9b:10:80:e9:48:73:4a:ce:52:c2:6e:cd:00:c6:e9:c3:b4:0c:
cd:87:54:5f:96:d7:14:86:49:6d:0e:ce:e5:73:d9:d3:f2:15:
3e:de:2a:06:52:94:3d:61:c7:40:24:4f:e3:cf:e6:32:ab:87:
bc:0b:1c:f1:f9:ac:47:ec:65:9b:3e:35:22:86:ef:43:06:bb:
c3:a5:37:05:51:7b:7a:c6:f4:f1:9c:3c:86:0f:f7:6b:c9:68:
2f:0f:a9:ca:3c:86:41:01:b1:ec:f6:56:7a:35:06:06:42:3a:
95:36:2b:f1:6e:10:d4:54:ff:23:c9:b5:8c:e2:fe:45:da:ef:
df:70:48:7c:48:ab:ac:7c:7a:e3:ef:87:08:59:1c:35:62:8b:
db:8c:8a:24:9b:a4:2b:96:80:37:d6:87:28:d8:67:5b:05:db:
c8:e8:44:97:fd:a6:90:f9:d4:45:7c:8b:7b:63:68:95:6e:d2:
b7:3e:d8:e8:78:4c:5c:23:5e:50:3a:ff:de:9c:be:18:31:66:
76:80:b1:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:20 2025 by rpki-client