
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56f39aff-69f7-4a27-bf7c-799de0fff57b.roa
File: 56f39aff-69f7-4a27-bf7c-799de0fff57b.roa (raw, json)
Hash identifier: R5XHPmU7kbLA6BY1xF3fVjwUlOOuexbACArETpr3QP8=
Subject key identifier: 06:B1:CE:DF:B5:D6:3C:7B:7A:34:67:95:A6:0B:14:98:83:DF:6C:75
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 11149CDDF6B7509998DEA1247B3E40A71A7C960C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56f39aff-69f7-4a27-bf7c-799de0fff57b.roa
Signing time: Fri 31 Oct 2025 03:25:03 +0000
ROA not before: Fri 31 Oct 2025 03:25:03 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2994::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:14:9c:dd:f6:b7:50:99:98:de:a1:24:7b:3e:40:a7:1a:7c:96:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:25:03 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=736721965f55ec21f3f48f972196a05f4cd4ec5873dfe04c5c8cce981932d7d3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:6e:95:f6:a9:cd:de:dd:c5:6e:e3:56:1c:
b4:fc:c4:74:ed:26:db:81:4e:94:9e:bc:26:e0:3f:
19:f6:19:20:2f:0f:5f:ec:d0:b9:fe:36:c6:ba:7b:
22:53:ec:28:c9:ef:de:85:64:9d:71:b5:50:d3:cf:
3a:67:a8:5f:b4:13:94:b8:51:3a:dd:5f:ad:13:35:
c0:b4:c7:44:44:4f:b5:32:07:86:2a:67:5b:5e:60:
9c:7c:57:f2:ce:10:0b:b7:d4:16:3c:0b:21:bb:50:
5b:37:06:40:2b:c1:8c:65:26:2f:04:ce:6a:be:1d:
c6:e5:f4:dd:ab:42:37:7e:63:47:d7:a5:9b:1a:0e:
f3:38:5f:7c:98:e2:6b:14:25:73:c9:97:7e:d2:5a:
f2:99:36:7a:69:eb:0e:54:e6:06:1d:9a:43:70:fc:
d5:f4:44:12:1e:3c:be:08:4a:8f:76:52:f2:ea:99:
4e:66:b5:d0:5f:4f:2a:b1:db:2c:11:e3:9f:54:2e:
a1:38:1b:87:d7:14:b2:72:19:ca:b9:52:5d:b9:c9:
f9:0f:f5:1f:92:6f:c9:bb:13:f4:6e:01:80:e2:7f:
a0:51:ec:95:dc:96:b2:6e:12:05:94:f0:64:6f:a0:
1f:1e:c0:13:c9:eb:56:fe:a7:7c:6b:83:3b:a4:ac:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B1:CE:DF:B5:D6:3C:7B:7A:34:67:95:A6:0B:14:98:83:DF:6C:75
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56f39aff-69f7-4a27-bf7c-799de0fff57b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2994::/46
Signature Algorithm: sha256WithRSAEncryption
b6:b1:af:af:bb:2e:fc:7d:a6:a5:4b:ed:77:b1:fe:9a:36:2f:
f5:da:45:68:d1:5f:15:dd:1e:d0:3d:ba:70:a0:fc:99:7e:5f:
79:60:db:51:62:21:c9:01:49:e1:69:1c:6e:19:05:a9:f3:bd:
76:de:cc:40:bc:eb:18:24:f6:c7:50:86:41:e0:5b:ce:c0:06:
94:28:ea:8b:64:bc:43:d4:9e:9a:75:7c:7a:df:7a:f7:3c:44:
61:67:21:47:5e:df:a5:6d:05:cb:69:2e:48:14:82:40:a7:89:
ea:ea:c0:ff:64:5a:56:6e:11:c8:19:ff:fe:73:f9:a7:01:b0:
af:2d:c4:fc:c3:4c:a9:41:ab:67:95:b2:cc:e2:2c:b2:b1:56:
61:50:e7:df:18:10:87:36:11:7e:be:21:56:17:76:2b:40:ce:
4e:91:21:88:59:cc:c1:bb:a4:58:3a:49:f0:ee:20:9c:6d:ac:
30:f3:d2:49:32:7b:6c:e4:52:7e:4f:06:bd:26:99:ef:1e:d8:
e7:fc:21:5e:64:19:29:d6:43:be:78:42:73:59:44:c6:c0:d5:
83:77:ac:28:50:80:19:59:4c:07:03:0a:3a:81:c9:fe:b5:f0:
90:7c:f1:99:4b:7b:2e:43:95:6d:25:96:11:26:67:bc:af:bb:
4c:c3:8f:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:09 2025 by rpki-client