
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55c44eca-c50b-40ef-aa4c-b86ca66ed122.roa
File: 55c44eca-c50b-40ef-aa4c-b86ca66ed122.roa (raw, json)
Hash identifier: k9nd1oJdLx+G2VBREfQiumyr1N2y0Q4SdyoapZHBm5M=
Subject key identifier: 9C:A5:73:5F:3E:9C:54:36:F4:2D:FD:41:E4:D5:1D:D6:50:E9:91:DC
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3CBD0500058198AF8A76516B8C8B4627525791
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55c44eca-c50b-40ef-aa4c-b86ca66ed122.roa
Signing time: Fri 31 Oct 2025 07:29:13 +0000
ROA not before: Fri 31 Oct 2025 07:29:13 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3e80::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bd:05:00:05:81:98:af:8a:76:51:6b:8c:8b:46:27:52:57:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:29:13 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=be5b046b39c2991cf39c5f91e86df1487831bca92e71e924ed98100af18aa0bf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:bb:f2:cd:98:90:f9:4c:c0:c5:c9:ba:20:
d2:ab:85:25:ea:be:17:8e:ff:46:3e:f6:63:a9:54:
e6:b6:d8:40:f3:60:e2:8f:49:bb:09:68:bb:4d:37:
20:dd:c2:73:46:fc:f8:52:4a:2a:66:64:4b:e8:46:
00:f0:c5:c2:16:4e:26:58:bc:e9:d3:ae:ef:47:12:
f1:91:94:c0:1e:79:31:8f:d1:0c:57:ae:08:b0:02:
74:ee:f3:4f:8f:f1:24:df:7c:13:aa:34:b5:0e:49:
9c:90:27:bb:83:03:82:ca:b5:a0:fa:95:a7:80:37:
a5:cd:fa:b1:94:9d:08:44:58:b1:ff:ae:5b:c6:f2:
11:7c:82:64:31:6e:88:da:03:e3:48:1b:35:f7:0d:
b4:a3:ec:50:30:b5:2c:f8:c2:bf:3b:a0:7f:cc:3e:
c9:a6:de:87:7e:4b:ea:42:c8:9c:05:3c:62:4e:4c:
97:74:89:35:6c:3c:3c:ea:9e:a3:25:fb:f2:08:af:
23:7f:eb:1a:6b:7b:8b:eb:6d:fb:60:68:8f:84:f2:
64:0d:70:41:f4:21:f3:9d:2f:48:93:64:25:69:44:
7f:f0:37:09:16:c4:3c:51:77:52:1c:9c:8e:12:88:
26:3d:18:11:a3:7d:7c:da:9b:58:3c:89:7b:bc:91:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A5:73:5F:3E:9C:54:36:F4:2D:FD:41:E4:D5:1D:D6:50:E9:91:DC
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55c44eca-c50b-40ef-aa4c-b86ca66ed122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3e80::/43
Signature Algorithm: sha256WithRSAEncryption
27:98:c1:f4:4b:57:4b:93:4b:e9:56:30:f4:db:05:74:48:af:
25:da:47:41:e7:71:4b:d2:25:cd:4b:6a:d2:a1:f9:d9:07:f8:
76:e6:a4:5e:8e:0f:02:de:b5:d9:85:80:4c:de:0e:f6:b7:96:
90:e8:b8:e7:2d:3b:5e:69:af:7a:46:49:74:25:82:32:d5:fa:
ea:ab:be:b5:a4:67:08:5c:59:fe:fc:d7:ec:a6:79:ec:08:60:
79:a2:74:e5:31:d8:2f:09:14:5f:53:7a:ba:4a:6d:07:b8:7d:
7a:55:65:fa:a5:82:e0:49:3e:a4:84:7e:d9:24:da:bf:d1:27:
bd:1f:6d:f7:0f:0c:a6:0c:a8:cc:5e:9b:1c:71:03:3d:16:cd:
08:c4:fa:3f:f3:f9:b9:6b:80:7d:10:e7:a1:0c:d3:64:2f:07:
8f:94:d0:ca:a3:2f:d5:2f:a2:81:92:7f:65:24:b3:6f:74:be:
de:75:b6:22:a1:89:2b:a4:2c:7a:73:e2:8e:84:3f:a5:cb:e6:
77:f3:51:b5:2d:5b:22:9a:a2:75:e5:ca:15:a5:5a:63:3b:32:
0e:d2:6a:32:73:7d:89:e6:69:2d:55:4d:7a:c8:47:13:dc:e9:
ff:b4:c0:b9:1c:3f:e6:d2:b6:cb:ba:0c:ed:dd:54:dc:03:a4:
a6:bb:d8:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:51 2025 by rpki-client