
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56e575e9-4d94-457d-957e-885f40a4c74a.roa
File: 56e575e9-4d94-457d-957e-885f40a4c74a.roa (raw, json)
Hash identifier: toG1ljnHBtMF1NGIKnJ7AcwwxA7NO9Ey4v1pY/9DcQg=
Subject key identifier: 4E:21:6F:FE:55:F9:38:97:1F:1C:2B:80:A6:43:26:D1:42:5B:BF:AE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4F5BA072824D259591BFFBF5DDA50A75ED9F11F8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56e575e9-4d94-457d-957e-885f40a4c74a.roa
Signing time: Fri 31 Oct 2025 05:06:56 +0000
ROA not before: Fri 31 Oct 2025 05:06:56 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:11b8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:5b:a0:72:82:4d:25:95:91:bf:fb:f5:dd:a5:0a:75:ed:9f:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:06:56 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4fef335b89890a0199620ac2c1b9ea081c670aa9a36d25061e14b14db3de2ae1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:da:19:ae:c9:47:e2:22:25:4d:fd:d2:31:
e7:10:25:82:1d:59:6f:2a:e3:e5:30:c6:51:7d:75:
6e:b8:33:e3:66:d2:42:ab:0c:87:3c:e7:b8:27:12:
0e:a6:68:de:3d:08:07:8e:35:58:87:00:2c:19:68:
04:91:2d:2a:18:37:f1:74:db:be:00:bc:1b:1b:95:
01:ba:9d:82:68:f8:6a:b5:dd:45:58:9b:18:59:c5:
ac:ee:69:1c:e1:ea:c3:06:45:24:67:47:9e:79:18:
1b:a5:34:f4:64:1c:2a:93:8b:71:e5:57:cf:b9:67:
5b:a3:43:67:25:89:f5:67:31:19:52:6e:87:05:80:
fe:a3:f7:a4:c4:6c:06:f0:52:1f:fe:bf:70:7d:fa:
0e:98:b5:d1:50:e7:ac:4d:da:47:d6:05:bb:e5:04:
ba:88:16:5e:cf:aa:e4:fd:a0:a8:32:84:f2:4a:08:
25:e3:44:9d:68:f8:a4:89:04:c6:76:a0:76:f0:44:
eb:15:58:ff:59:5a:57:26:10:06:70:e8:f5:f5:a6:
b7:03:90:97:57:d7:c3:5e:94:9b:f5:96:13:b2:df:
9d:80:fe:2b:0b:c2:dc:37:c4:c4:90:8f:3e:ec:65:
6d:97:f2:f1:be:d3:ea:ee:19:a0:c7:cc:5e:a0:2c:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:21:6F:FE:55:F9:38:97:1F:1C:2B:80:A6:43:26:D1:42:5B:BF:AE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56e575e9-4d94-457d-957e-885f40a4c74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:11b8::/45
Signature Algorithm: sha256WithRSAEncryption
9a:d3:18:57:87:f6:10:69:83:5c:e2:e7:15:35:32:16:c8:94:
96:83:4f:7b:54:b3:e6:d3:30:d0:32:49:fb:cf:e1:2a:a7:91:
8d:6f:e1:a7:be:bf:6d:69:3b:35:10:64:c2:72:ab:95:45:a6:
e2:df:95:6f:c4:7e:36:63:2f:62:88:32:07:ec:5a:ed:ff:21:
8a:c5:12:66:4d:14:1f:23:0f:7e:33:0d:95:26:e4:ed:6d:c5:
0e:1b:f1:43:a7:26:a2:50:37:d8:cf:ff:3c:d0:71:7b:8b:32:
44:bb:5a:c7:4b:63:a0:36:8b:e7:f1:20:59:4d:06:3d:de:67:
57:88:11:64:bc:b1:6c:41:f2:6e:9e:67:f1:c8:13:a5:01:b6:
bc:e9:ae:ab:98:a1:0d:fa:8f:80:59:34:90:ab:cf:65:6e:b2:
36:5c:53:0c:19:f3:fd:2a:61:bf:56:52:30:aa:bb:69:02:3e:
16:51:ca:37:4b:73:aa:b3:a6:37:dd:0e:0d:dc:ab:e7:57:cc:
ee:77:5c:e3:e0:1d:0a:01:05:42:e7:9d:3f:d4:29:20:27:3c:
42:9b:90:95:bc:e7:fa:45:2f:44:12:4b:40:6f:ef:74:f4:8e:
d7:ee:0f:1f:b7:21:1d:06:0d:d3:ba:92:77:0a:76:48:52:00:
6a:a4:63:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:12 2025 by rpki-client