
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/510f751f-a04d-42cb-9242-e134cfb7ef6a.roa
File: 510f751f-a04d-42cb-9242-e134cfb7ef6a.roa (raw, json)
Hash identifier: KkzALvFqpf9G1SwyQkzxDSoYzDlvZUMmXDEGI44POqE=
Subject key identifier: 21:DC:55:CC:03:83:EB:C6:3E:12:AD:22:B5:76:B9:F7:A2:9C:E7:C0
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0D627BCBEDAB2AAA30E1F46187D857F6359BF71E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/510f751f-a04d-42cb-9242-e134cfb7ef6a.roa
Signing time: Thu 30 Oct 2025 20:43:08 +0000
ROA not before: Thu 30 Oct 2025 20:43:08 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1324::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:62:7b:cb:ed:ab:2a:aa:30:e1:f4:61:87:d8:57:f6:35:9b:f7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:43:08 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=d7f7237ab04545863bbc58c01aae8e1983ee6e2d151ec08296646aa7fd5b2e33, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:16:b6:60:5a:3e:11:bc:2b:59:e7:71:99:
15:52:f5:62:67:61:d1:86:87:59:76:7c:43:ea:ce:
48:c3:75:23:71:4c:89:32:f3:4e:f0:67:5a:db:26:
51:91:dc:fb:49:60:61:bf:ab:3c:8f:6d:84:f1:16:
17:99:52:ff:c2:01:6e:fd:89:e1:73:89:03:d2:90:
2f:03:fb:13:86:a0:34:f0:de:32:90:f7:8a:96:c6:
18:9a:97:8e:71:87:9b:ae:06:e0:7d:bf:ba:de:fb:
e6:cc:ac:8c:94:25:d8:5b:10:a4:1d:d4:06:bc:7d:
34:3b:d7:a3:1e:e8:56:f3:19:36:b5:44:c6:7e:f1:
3b:5c:6a:68:0a:3f:32:52:f4:e3:a3:71:a0:04:de:
2a:91:dc:aa:10:e9:8c:01:05:00:62:34:48:e4:b3:
f6:c6:1c:2a:b0:64:b0:cb:20:73:50:ed:cc:68:50:
70:1c:51:24:7f:34:57:2a:a0:98:58:91:69:22:a6:
ff:89:72:96:40:c9:7f:e5:4b:5a:bd:23:5f:cd:55:
c4:5f:8f:79:db:5a:30:47:68:09:31:a2:d4:64:b8:
b2:e9:12:37:f7:02:30:eb:78:07:45:21:c1:15:05:
4f:01:49:0b:40:bd:b4:f6:0e:26:60:78:c0:76:d0:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:55:CC:03:83:EB:C6:3E:12:AD:22:B5:76:B9:F7:A2:9C:E7:C0
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/510f751f-a04d-42cb-9242-e134cfb7ef6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1324::/47
Signature Algorithm: sha256WithRSAEncryption
14:cc:33:d1:89:3d:22:fc:f2:38:e5:eb:49:76:e4:96:55:30:
9d:20:9b:da:40:b4:39:a8:f1:d2:ba:82:80:e2:37:92:ab:8b:
0a:78:f8:1c:3d:d2:6f:8a:7c:b9:cb:9b:2a:d1:be:e1:04:3d:
aa:a9:89:18:c7:76:1a:ff:60:89:01:fb:34:26:71:e3:f5:2a:
26:33:b2:83:ed:30:dc:61:e1:7c:d6:a9:1f:e8:2f:3b:24:a6:
eb:04:86:8e:a9:1c:07:07:df:6a:f5:f4:ca:9e:73:78:3e:d9:
a5:6e:99:59:e5:fd:8b:69:91:94:21:6d:a8:35:41:c5:20:b2:
78:ec:88:ec:62:c6:6b:e7:73:41:e0:e4:14:55:53:d9:ba:8e:
9c:80:10:ff:db:8d:cb:5c:93:2f:f9:f4:2e:bc:16:0f:a2:07:
61:40:63:40:0b:dd:c1:09:bc:0b:75:59:bd:8e:21:cf:a8:bb:
84:77:d5:a5:d8:3a:e8:c3:94:c4:26:57:27:64:cb:e8:ec:11:
19:81:23:2b:0b:49:4e:a2:aa:9e:5d:2e:a1:9a:d3:6b:f4:c0:
2b:08:9b:62:be:b1:6a:02:68:64:78:8f:f7:44:79:52:8a:f9:
7a:f0:25:b0:f2:0d:ea:d6:7c:38:cd:c3:5e:0c:6f:7e:c5:41:
71:9c:f1:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:02 2025 by rpki-client