
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57a2220e-b2bc-4ce9-b187-9464472e6d13.roa
File: 57a2220e-b2bc-4ce9-b187-9464472e6d13.roa (raw, json)
Hash identifier: gG7tcVRdmQP9gK/JklMr5UklHpSbJdOk16X9U2gXqK8=
Subject key identifier: CB:CE:23:A5:13:9B:73:10:A2:34:E7:7E:30:82:85:3B:52:D4:DD:50
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7B1A8D9F867C85D691DF2434AD9B88C514D8001B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57a2220e-b2bc-4ce9-b187-9464472e6d13.roa
Signing time: Fri 31 Oct 2025 03:26:45 +0000
ROA not before: Fri 31 Oct 2025 03:26:45 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a64::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1a:8d:9f:86:7c:85:d6:91:df:24:34:ad:9b:88:c5:14:d8:00:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:26:45 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=12b4535a5a98465bf7d3733b3dc07b8558775717d3f36006bc93593a9db2b95c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:bb:ba:64:4c:6e:e0:60:e0:77:cb:56:9c:
0a:6b:0c:75:73:2c:fb:cd:9f:83:bb:78:54:dd:82:
97:d7:1d:eb:77:8e:1e:f6:d6:0f:0a:17:f2:80:17:
fa:59:03:f6:df:82:d8:f3:b8:df:13:f7:48:a5:c8:
21:54:0e:ec:9c:bf:54:60:3b:09:86:76:8f:58:53:
d0:1e:28:b9:28:be:fc:e0:8a:bf:b5:17:23:56:49:
7f:c7:7a:01:31:9a:75:17:a2:5c:9e:1d:73:ae:42:
26:d5:92:6f:77:64:76:64:ea:00:c5:e0:d8:ab:65:
6b:23:a8:c7:e0:11:96:c1:0f:cd:7b:ff:fa:32:95:
04:8e:3e:af:fd:74:69:b9:10:40:d3:08:88:d7:c3:
0c:5d:bc:ca:e8:65:11:50:4f:44:fe:ca:85:68:f6:
99:7b:53:bc:49:5b:e7:ba:c6:7d:a4:1a:b3:52:09:
30:b0:cd:f2:da:f3:4e:e2:47:e3:b9:b6:95:07:2f:
32:24:40:22:56:38:31:92:dc:86:b2:75:90:91:dc:
23:76:21:ea:90:15:ab:83:57:17:5d:e4:dc:0b:86:
32:bf:aa:33:ea:f1:5f:d4:9a:f4:f1:6a:29:da:e0:
8f:45:48:44:31:79:99:f6:19:00:1d:07:f7:05:ea:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:23:A5:13:9B:73:10:A2:34:E7:7E:30:82:85:3B:52:D4:DD:50
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57a2220e-b2bc-4ce9-b187-9464472e6d13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a64::/46
Signature Algorithm: sha256WithRSAEncryption
1c:cd:a6:ac:38:e1:8b:b9:d5:fd:d2:c8:9d:27:c0:03:7b:4f:
ac:ff:32:2e:d8:7e:1d:4c:33:45:11:0e:2e:70:c5:ce:68:0a:
0f:8a:ff:67:73:95:a0:d8:6e:3a:5d:05:4c:44:b2:48:5f:10:
37:64:27:df:3a:c2:4e:d5:82:3e:c4:94:9c:ef:5e:31:5e:49:
67:98:9f:32:81:bd:53:32:12:e8:07:23:f3:24:9a:a9:49:d6:
38:97:0d:7d:ea:34:82:00:0d:5b:3f:4b:09:bf:9a:a9:e7:6a:
f7:f5:f1:85:f2:74:c7:42:2a:38:96:1e:13:ea:1f:2c:9f:5e:
95:3f:44:cc:75:37:82:97:a4:ba:16:51:f4:d6:b0:91:45:0e:
2a:c3:73:bc:e6:b9:05:c1:7a:16:69:ce:8f:93:eb:68:00:86:
fb:26:d0:3c:03:84:59:d3:cd:a8:66:25:3a:11:27:45:86:3a:
a2:2f:33:89:0d:0a:37:4c:ef:03:35:f7:06:ec:a7:51:5b:c1:
0a:7e:cd:50:b3:27:7c:8d:e3:14:ee:6c:9d:94:35:d1:93:e4:
b2:e7:a6:82:b6:aa:18:71:3f:95:89:60:d2:73:3f:8f:b8:f6:
9e:39:b0:ab:4f:93:b1:c3:7c:8c:1e:b3:29:bf:04:b2:b8:33:
ea:5e:70:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:35 2025 by rpki-client