
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5513975d-2b7f-4481-b182-7dd5229340d4.roa
File: 5513975d-2b7f-4481-b182-7dd5229340d4.roa (raw, json)
Hash identifier: U1LeoWXUXJVawLAv100/Vi5LMfIljflUi0Q53HtD9L8=
Subject key identifier: C4:90:1B:16:E7:AC:33:E2:3A:0D:95:8E:BC:E4:FF:CE:9B:09:FC:44
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7EC1AC797D2D4A059899F103BDF294C8660F1C17
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5513975d-2b7f-4481-b182-7dd5229340d4.roa
Signing time: Fri 31 Oct 2025 00:54:59 +0000
ROA not before: Fri 31 Oct 2025 00:54:59 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3844::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c1:ac:79:7d:2d:4a:05:98:99:f1:03:bd:f2:94:c8:66:0f:1c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:54:59 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=a39095091f18249e597aabea91c2794a94d49d80cbcfa2006637e91501294f6a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:56:12:ad:09:03:95:89:6b:02:4d:66:7d:
dd:e4:73:28:6d:74:8c:56:33:1d:d6:62:f9:5c:12:
8c:8b:f6:cd:10:5a:5f:b7:06:cc:a5:b7:78:72:d4:
06:da:6b:f5:2f:89:b1:f0:5a:b2:46:1b:8b:ab:b5:
87:92:87:16:b8:87:79:66:dd:45:98:bf:48:73:5b:
42:b4:01:22:60:6d:f9:85:d9:dd:9f:cb:51:4a:76:
d8:0e:96:77:eb:80:f1:f5:ac:92:60:c0:49:eb:52:
10:d1:61:4d:b3:41:0b:8e:64:35:43:ee:78:bc:19:
29:18:81:0e:af:d5:21:f1:3b:ff:18:f8:4c:5f:78:
32:c0:83:47:9a:e1:9d:de:89:fa:51:75:d0:d0:6d:
29:16:68:57:1e:b6:32:00:fb:b2:24:6b:d8:d8:6f:
6f:3d:82:4c:15:d8:9d:cf:97:66:a4:b6:72:cb:cc:
9e:4f:3b:6c:6b:1d:a8:10:e4:12:ed:c6:1e:df:95:
b5:60:d8:8b:e8:d4:6a:99:e5:24:98:47:9c:58:2f:
a5:ba:74:ca:25:51:c6:b3:21:67:8b:50:28:67:3f:
5a:e3:3b:bc:20:16:34:ed:90:d3:12:f2:76:3e:53:
16:36:7d:0b:a4:3b:4b:6b:d3:fb:7c:df:6e:8e:a0:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:90:1B:16:E7:AC:33:E2:3A:0D:95:8E:BC:E4:FF:CE:9B:09:FC:44
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5513975d-2b7f-4481-b182-7dd5229340d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3844::/47
Signature Algorithm: sha256WithRSAEncryption
91:96:17:79:a5:bc:cf:cc:e2:32:71:90:ae:eb:eb:30:25:0e:
6d:d8:73:fa:1b:a8:d5:a0:22:c6:05:b7:27:d6:a9:1c:1b:8a:
2b:e6:99:f5:1a:4d:c3:e9:5b:93:4e:9e:64:37:3f:e3:6e:1d:
09:5d:f4:b5:b5:6d:a4:d0:ad:cb:14:82:da:a8:43:d5:95:1b:
f4:fa:64:7e:07:be:ed:72:43:4a:d6:c4:35:7f:fb:01:de:29:
0d:74:be:98:d3:73:fa:f4:80:a3:0c:53:7b:d8:cf:99:80:d8:
bf:61:de:d9:f7:74:d4:3d:78:57:95:ae:01:e3:23:70:f4:6a:
0e:ea:65:19:73:92:98:ca:a4:0f:21:61:62:66:d1:9f:4f:9d:
9c:dc:2d:00:3c:0e:8f:8d:e4:35:46:85:51:98:92:e7:e3:52:
f5:13:ff:09:6c:94:e2:0c:8d:d7:bf:97:d5:04:66:3d:8f:6b:
e0:d9:45:29:5f:fb:aa:24:4d:b0:ba:94:81:2d:be:e1:34:5c:
05:db:b1:0d:10:50:18:9e:a8:36:9c:46:9f:51:a0:45:c9:f9:
e8:60:ed:ca:6e:fd:db:e7:39:54:88:79:5a:98:0e:9f:f1:64:
db:5e:2c:0e:24:45:9d:1b:9a:5f:78:9a:16:bd:23:4f:2a:21:
06:27:11:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:35 2025 by rpki-client