
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5591f579-336d-4e78-85b6-b70b7da7b982.roa
File: 5591f579-336d-4e78-85b6-b70b7da7b982.roa (raw, json)
Hash identifier: 5LhmBYgOQDxLS2e13W61mcj6ty9d3U+mC+shk6bvnPA=
Subject key identifier: 4E:6A:72:4D:F8:D2:B3:5B:9F:87:E5:2F:45:B9:8A:E3:6C:B0:C4:C6
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2404648422225F120ECA91DF759EF4B700AB7818
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5591f579-336d-4e78-85b6-b70b7da7b982.roa
Signing time: Thu 30 Oct 2025 23:55:40 +0000
ROA not before: Thu 30 Oct 2025 23:55:40 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3206::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:04:64:84:22:22:5f:12:0e:ca:91:df:75:9e:f4:b7:00:ab:78:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 23:55:40 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=07da0069e82eefc621d4c35ed9ead7d864372cbbcf8b2d2f797e149a7ab71459, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:88:c3:4e:a7:9a:be:b9:e3:4d:43:02:c7:
30:6c:34:52:17:ea:e1:d6:dd:55:8d:ec:c3:2f:f3:
0a:ca:65:79:b8:34:21:a1:d0:2a:5e:48:ff:25:46:
01:46:83:ae:46:87:7e:e9:35:93:f3:3e:b5:03:a1:
87:81:bb:29:60:ba:09:7f:4a:dd:58:c1:ce:cb:73:
90:ba:a3:e2:e9:ed:a3:7b:2b:c9:37:48:95:07:c9:
77:d4:34:12:ac:d4:4d:23:ea:70:85:c6:3f:cb:b8:
79:ca:a4:35:7c:60:ed:aa:e8:8e:40:f9:0e:ce:1d:
2f:c4:dc:68:e6:87:69:e1:62:97:17:ab:40:c3:fd:
da:0d:77:17:0a:8e:be:7c:7a:d0:38:93:74:93:32:
92:15:cc:01:02:d7:70:27:33:2c:bb:9e:bc:b6:53:
99:67:3d:3f:97:8b:fe:0a:90:d2:e4:f2:bf:4a:e2:
5d:e6:c3:f0:38:00:0c:7c:f7:dc:04:4d:f8:3b:bd:
7f:79:24:18:9d:15:a5:7a:9c:75:3f:77:21:b4:1c:
60:81:d8:60:1c:cc:bc:8b:52:da:ff:23:dc:6f:ee:
9e:3e:69:98:32:13:ae:1e:44:09:77:17:89:cf:b0:
a0:1a:73:fa:99:b1:ce:09:0f:4f:62:32:f6:15:ca:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:72:4D:F8:D2:B3:5B:9F:87:E5:2F:45:B9:8A:E3:6C:B0:C4:C6
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5591f579-336d-4e78-85b6-b70b7da7b982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3206::/47
Signature Algorithm: sha256WithRSAEncryption
25:5b:d5:c6:a1:63:19:cb:30:30:13:63:43:3f:bf:2e:ee:37:
36:dc:9d:06:af:7e:e9:94:50:7c:22:4b:3e:32:bc:57:0e:21:
47:7a:10:75:be:4d:38:23:d6:22:fe:a1:cc:57:a4:14:11:85:
23:6e:05:e8:32:0a:94:49:96:26:05:e2:5a:45:a6:6f:a4:12:
83:47:1a:59:e8:6a:8e:9e:e6:a8:82:8e:42:08:27:01:aa:60:
d8:ce:fb:f7:b0:ca:92:65:94:74:71:83:e1:79:19:49:77:78:
18:85:04:44:eb:f0:08:6e:ba:81:c6:8f:50:22:18:dc:7c:27:
9e:01:d4:a7:b7:dc:55:55:3e:f2:c2:ed:09:a7:73:fe:d9:0c:
0a:f5:bc:80:53:c9:0c:a0:9e:54:c2:2e:88:c9:ee:f0:13:f6:
86:42:fc:27:81:0a:0d:dc:4d:34:c8:02:fe:04:a9:cf:59:cb:
b7:80:21:6b:51:c5:32:c5:ef:54:d5:9f:bd:12:3e:1f:fe:a9:
20:ea:46:da:5a:ab:a4:da:ea:8a:eb:88:9b:9b:4d:de:93:be:
01:a8:e1:26:a1:24:c3:a1:01:93:7b:7d:21:32:20:49:29:9a:
b7:02:7a:01:5f:68:d9:b4:06:9c:10:45:38:7f:5d:e1:ea:dd:
70:e2:ea:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:20 2025 by rpki-client