
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/50b7e33b-5c4f-4ddc-808c-86e128a1188d.roa
File: 50b7e33b-5c4f-4ddc-808c-86e128a1188d.roa (raw, json)
Hash identifier: amKAqw0JhrhrSbp7aLnECDF4vjmDZ807ibt0CKZnX24=
Subject key identifier: 0C:F8:C1:34:6E:BA:EC:CE:0D:71:DD:EE:31:9E:FA:AC:18:3C:6E:9B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 51B828930E210F10418EABE1A05107B81F9A0958
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/50b7e33b-5c4f-4ddc-808c-86e128a1188d.roa
Signing time: Fri 31 Oct 2025 01:24:50 +0000
ROA not before: Fri 31 Oct 2025 01:24:50 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3b6a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b8:28:93:0e:21:0f:10:41:8e:ab:e1:a0:51:07:b8:1f:9a:09:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:24:50 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=69c96afb43e731ce88e66b8cfc421cde35bef41141bf5e4a770c4fc2c6e55183, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:b8:85:5a:a7:85:15:11:bc:a6:53:9e:12:
3d:06:de:bf:b3:00:a1:d0:08:dd:2f:05:8c:75:60:
84:09:3c:53:e6:dd:4d:d3:2f:73:e8:15:ee:00:ed:
e2:34:5f:98:61:52:7a:a6:c6:3f:78:b8:a7:c2:40:
33:e9:64:d2:14:26:46:37:3a:96:dd:9c:ef:c6:6e:
cf:03:54:89:6d:25:a2:bb:9b:ff:03:4a:a5:52:40:
f0:24:3f:dd:da:71:74:5e:c1:82:19:48:79:38:2e:
02:b3:97:2c:2c:43:dc:ac:3b:dc:f7:36:b8:3e:b9:
f8:35:67:4e:2e:7d:2c:0f:6f:11:91:d8:fd:86:05:
dd:10:57:89:3e:9e:04:29:c9:44:b0:8e:7e:74:f3:
41:19:82:b0:4f:bd:37:02:33:b8:dc:9b:f9:d9:9c:
20:44:1d:2e:aa:32:5f:dc:a7:11:42:e6:0b:f5:2e:
cc:87:5c:3e:4f:29:e7:3e:7c:84:fe:40:36:c4:2c:
e7:f8:34:8f:e2:5a:3c:27:7c:ee:a3:07:6c:b6:89:
be:d6:9e:03:8d:56:82:79:a9:21:c2:ff:c0:5f:4b:
3d:46:74:a9:e9:4f:e9:e9:e8:e2:95:6b:c4:41:fa:
11:45:4e:af:5f:3e:0a:1c:90:43:07:b4:ba:f5:ec:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:C1:34:6E:BA:EC:CE:0D:71:DD:EE:31:9E:FA:AC:18:3C:6E:9B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/50b7e33b-5c4f-4ddc-808c-86e128a1188d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3b6a::/47
Signature Algorithm: sha256WithRSAEncryption
8a:6b:0e:79:6c:1e:6f:b4:fe:c0:c8:76:ba:bd:97:be:f6:48:
e5:c5:ad:f4:91:ee:53:df:6a:b9:a9:4c:2e:30:aa:64:58:2c:
9b:e6:9c:29:c8:ca:8e:c7:b8:d2:cd:63:dc:e4:f5:3d:23:1e:
86:85:be:1d:04:3f:85:34:33:86:b9:d5:eb:50:d0:d5:11:9c:
f1:4f:d7:40:de:1f:dc:db:e1:18:a4:54:46:9a:d5:e4:e0:44:
c3:6f:3f:ea:30:62:20:95:89:ef:64:77:fb:f7:77:3b:27:5a:
86:1a:85:70:ee:a6:a5:b1:e4:6a:d8:6c:ef:71:9f:64:af:84:
56:8a:f5:f5:a6:b7:8b:66:e2:71:1e:ae:ad:0e:10:18:f7:99:
7f:bb:3d:3f:91:fc:ac:63:cc:d0:bc:c7:f4:2b:41:7e:21:9f:
aa:9d:a1:5a:08:48:6f:12:e7:f0:d1:b5:57:10:4a:00:25:b5:
43:db:52:5a:e8:c5:cd:c4:9b:65:ee:e1:d1:fd:d9:d0:ea:f5:
cd:74:d5:a7:33:80:24:80:4c:44:c9:4d:85:1b:3f:16:4f:f8:
51:87:a7:77:5a:a1:b1:de:65:9c:fe:a1:37:db:83:e8:0a:63:
0b:20:3f:2c:f6:54:16:e4:7c:29:87:fd:2f:8f:85:15:0a:a2:
ed:23:9d:0e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUbgokw4hDxBBjqvhoFEHuB+aCVgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEyNDUwWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OWM5NmFmYjQzZTczMWNlODhlNjZiOGNmYzQyMWNkZTM1
YmVmNDExNDFiZjVlNGE3NzBjNGZjMmM2ZTU1MTgzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwmbiFWqeFFRG8plOeEj0G3r+zAKHQCN0vBYx1YIQJPFPm
3U3TL3PoFe4A7eI0X5hhUnqmxj94uKfCQDPpZNIUJkY3OpbdnO/Gbs8DVIltJaK7
m/8DSqVSQPAkP93acXRewYIZSHk4LgKzlywsQ9ysO9z3Nrg+ufg1Z04ufSwPbxGR
2P2GBd0QV4k+ngQpyUSwjn5080EZgrBPvTcCM7jcm/nZnCBEHS6qMl/cpxFC5gv1
LsyHXD5PKec+fIT+QDbELOf4NI/iWjwnfO6jB2y2ib7WngONVoJ5qSHC/8BfSz1G
dKnpT+np6OKVa8RB+hFFTq9fPgockEMHtLr17N6rAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUDPjBNG667M4Ncd3uMZ76rBg8bpswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzUwYjdlMzNiLTVjNGYtNGRkYy04MDhjLTg2ZTEyOGExMTg4ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAO2owDQYJKoZIhvcNAQELBQADggEBAIprDnlsHm+0/sDIdrq9l772
SOXFrfSR7lPfarmpTC4wqmRYLJvmnCnIyo7HuNLNY9zk9T0jHoaFvh0EP4U0M4a5
1etQ0NURnPFP10DeH9zb4RikVEaa1eTgRMNvP+owYiCVie9kd/v3dzsnWoYahXDu
pqWx5GrYbO9xn2SvhFaK9fWmt4tm4nEerq0OEBj3mX+7PT+R/KxjzNC8x/QrQX4h
n6qdoVoISG8S5/DRtVcQSgAltUPbUlroxc3Em2Xu4dH92dDq9c101aczgCSATETJ
TYUbPxZP+FGHp3daobHeZZz+oTfbg+gKYwsgPyz2VBbkfCmH/S+PhRUKou0jnQ4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:49 2025 by rpki-client