
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56dc3572-c0e0-4c19-aee1-99aa99cc669c.roa
File: 56dc3572-c0e0-4c19-aee1-99aa99cc669c.roa (raw, json)
Hash identifier: ulAB6cJp7Wmjdxip+3EVTwf7fLA0LSZxA4xeZwlR1Ws=
Subject key identifier: 4E:91:3C:59:9B:0B:D5:04:11:41:01:3A:0A:2B:E3:27:2A:F2:41:0B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 08F2E923E98DEA7AC8D7FD2374AD79FB4009E48C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56dc3572-c0e0-4c19-aee1-99aa99cc669c.roa
Signing time: Fri 31 Oct 2025 01:23:28 +0000
ROA not before: Fri 31 Oct 2025 01:23:28 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3b38::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f2:e9:23:e9:8d:ea:7a:c8:d7:fd:23:74:ad:79:fb:40:09:e4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:23:28 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=c29e498ddb4f9322f61c3f6aefe98b229e7a07546a55bf16ec8b59bc07f531c1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:22:6a:87:3e:91:68:80:2f:bf:de:ed:05:
c3:a0:1d:47:03:56:c5:1a:37:e6:b5:45:b6:2c:d2:
cc:28:e0:b8:cf:fd:a8:6b:4a:1f:12:75:78:cb:63:
a0:1c:32:36:91:71:c3:d0:17:8b:f1:2e:63:e7:0b:
4e:85:19:f4:96:b4:24:3c:b5:94:bf:d0:f5:ae:47:
a6:59:b5:39:9b:88:4d:e4:1f:04:a1:19:a5:1e:29:
17:93:db:f2:6c:eb:ff:66:bb:66:c0:0f:54:24:a8:
59:74:c0:67:4a:d5:39:24:28:82:5d:17:5d:87:b3:
2b:3d:28:52:6f:36:d2:00:6e:df:2f:1c:75:71:bf:
3b:ab:15:af:bd:95:e8:52:bf:c8:0c:0a:e1:2f:39:
b6:0f:4e:8a:e3:24:02:2a:88:2e:b5:3d:17:41:53:
9c:6c:09:ca:2e:d6:93:5c:3b:fc:7f:85:55:db:a0:
3c:02:07:f2:46:19:47:13:b9:ed:19:ae:3c:c1:57:
ed:33:3c:18:fa:aa:bf:66:55:5b:61:8c:c4:cb:8c:
96:3f:d1:45:dd:64:55:2e:e1:83:36:25:5d:95:52:
ab:3c:2c:77:d3:a1:c4:33:54:d7:a1:c8:20:26:73:
21:b9:86:fd:a2:e6:94:df:ac:a2:81:df:68:a9:04:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:3C:59:9B:0B:D5:04:11:41:01:3A:0A:2B:E3:27:2A:F2:41:0B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56dc3572-c0e0-4c19-aee1-99aa99cc669c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3b38::/47
Signature Algorithm: sha256WithRSAEncryption
bc:76:d6:e9:a5:0f:55:5a:2a:c7:96:81:51:22:0d:91:f5:ec:
6d:df:2e:28:49:97:bd:fb:48:6e:a9:03:fa:2c:37:42:11:e1:
28:28:10:21:5f:51:b7:be:27:52:6a:15:bb:af:6d:a5:b7:05:
0b:18:93:65:90:e4:48:b0:1c:db:5f:f0:94:0d:75:d7:9d:3e:
d6:ca:68:57:95:85:27:12:76:24:0a:56:d9:2f:cf:91:7e:76:
8f:db:c4:a8:46:64:25:7f:c6:42:01:60:ce:21:a1:7b:3b:bb:
2f:01:b9:dc:4c:9b:2b:a3:b7:12:eb:ab:6e:46:57:54:46:ce:
4b:84:f7:35:38:4b:9d:92:1e:c9:2a:ad:5e:a2:7f:d0:5e:44:
33:2b:11:6a:76:bb:3e:40:62:f1:30:c6:5b:26:cf:64:07:3b:
82:0c:3b:9a:1a:c7:ac:94:e0:74:b9:ab:2f:72:d3:ee:6d:f2:
a4:70:e5:7d:41:41:75:26:6d:ea:b4:6b:6f:56:dc:27:0e:20:
3a:11:66:d4:17:fd:65:7b:4f:2b:7a:84:94:02:37:2e:83:eb:
e3:ab:4e:0b:2e:ba:af:7d:8b:fb:5c:75:45:9f:ff:6c:8e:c8:
7d:90:4a:a1:62:3f:34:ce:29:d6:8a:67:36:57:9b:43:66:ed:
2c:67:12:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:57:34 2025 by rpki-client