
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58559054-c684-4104-bf53-f75358ed7771.roa
File: 58559054-c684-4104-bf53-f75358ed7771.roa (raw, json)
Hash identifier: 69LlB4JwkAxRbFdHMvV6Bq3Ae+zMGobT0xWTqSElmpA=
Subject key identifier: 3A:09:44:D3:04:6B:D6:60:EF:13:E6:89:9A:14:87:C5:38:00:1D:AC
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4B3993D191CDD14C356F3EA5DCE4465587CE878F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58559054-c684-4104-bf53-f75358ed7771.roa
Signing time: Fri 31 Oct 2025 00:58:05 +0000
ROA not before: Fri 31 Oct 2025 00:58:05 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:38fc::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:39:93:d1:91:cd:d1:4c:35:6f:3e:a5:dc:e4:46:55:87:ce:87:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:58:05 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=39a7cc70d0f3949aae17cf2501c3e3d2b51d6e19a226d5698bcdac24dcf7d048, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:7f:6a:86:5e:d8:7d:72:2d:c6:69:39:5c:
8c:c5:6c:fc:94:1f:a2:91:89:99:c1:53:7e:ab:a2:
99:37:13:7f:41:b1:a8:d1:fe:f6:ee:dd:24:38:1c:
fa:15:74:2a:4a:bc:fd:e1:c5:1c:31:c3:24:bd:0b:
22:1b:c0:5a:64:98:8f:6d:5d:1e:ee:79:b8:4c:29:
8b:c5:e7:50:c4:36:6e:84:28:95:03:31:14:89:7d:
0e:24:4f:db:5c:2a:20:8e:f1:9e:d0:97:cc:ab:fd:
ae:f0:96:79:03:01:86:64:86:b4:6b:be:f7:67:a8:
01:cf:d8:01:16:76:6a:15:cf:9c:4e:9b:b3:2b:fc:
4b:d2:f8:59:0f:b7:fd:af:9b:23:cc:2a:16:b8:7b:
5b:1b:81:44:04:2f:40:69:b6:47:ed:87:0f:91:5b:
6d:03:0b:05:ed:29:c3:f1:d8:51:e4:40:b5:21:41:
96:f7:fb:c3:8b:13:27:5d:44:3d:66:33:09:3c:de:
a7:3a:bb:a0:ee:63:46:37:6d:76:53:3b:aa:a8:ba:
11:32:d1:63:5a:1a:46:a4:68:6a:42:d8:1b:79:30:
da:a4:61:14:05:68:d2:19:60:cb:4f:4a:e7:29:fd:
8e:4d:f0:ce:cb:ac:1e:be:21:64:83:c3:71:4e:9c:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:44:D3:04:6B:D6:60:EF:13:E6:89:9A:14:87:C5:38:00:1D:AC
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58559054-c684-4104-bf53-f75358ed7771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:38fc::/47
Signature Algorithm: sha256WithRSAEncryption
1b:e0:a4:bc:58:a5:5f:59:c4:25:f5:3b:60:f7:4c:15:c7:ab:
e2:86:ad:41:54:fc:e8:b3:1e:87:a8:5e:93:9e:1b:c7:fa:55:
07:d4:ef:42:d6:56:22:33:3f:c4:9b:8a:7d:c3:5c:c5:21:60:
b5:8e:57:73:9f:8e:32:50:79:23:59:ed:ff:f8:11:c0:b8:ec:
d6:92:ce:6c:ce:01:9b:c6:fe:cd:56:fc:71:22:18:a4:c2:13:
c9:fb:ea:e2:6a:6d:c3:44:01:f8:ea:84:26:d4:d2:18:96:8b:
63:2f:18:9f:53:30:4e:cc:b0:f0:b7:ed:f1:b1:ac:f2:73:1b:
6d:ff:61:c6:bf:89:56:83:85:47:b9:c6:f4:81:5a:0a:f5:a4:
97:e7:97:a2:ca:c5:7f:fc:cb:0d:97:ca:5c:cb:a1:6b:88:e6:
de:1e:9e:32:3b:87:2d:e5:f4:15:9f:cb:41:81:e9:a9:b3:96:
81:87:fd:75:f3:45:59:88:ff:fb:38:ec:8a:27:93:e7:bd:b9:
da:7c:d8:88:0b:48:35:27:07:ce:6e:44:3a:a4:cd:b1:f8:19:
35:99:8b:c8:18:a3:dc:11:e5:fa:6f:40:04:04:dd:70:73:9b:
54:64:8a:f1:e0:27:7c:78:43:48:64:6b:59:11:58:17:2a:d0:
9f:60:e2:bb
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSzmT0ZHN0Uw1bz6l3ORGVYfOh48wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1ODA1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzOWE3Y2M3MGQwZjM5NDlhYWUxN2NmMjUwMWMzZTNkMmI1
MWQ2ZTE5YTIyNmQ1Njk4YmNkYWMyNGRjZjdkMDQ4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsHH9qhl7YfXItxmk5XIzFbPyUH6KRiZnBU36ropk3E39B
sajR/vbu3SQ4HPoVdCpKvP3hxRwxwyS9CyIbwFpkmI9tXR7uebhMKYvF51DENm6E
KJUDMRSJfQ4kT9tcKiCO8Z7Ql8yr/a7wlnkDAYZkhrRrvvdnqAHP2AEWdmoVz5xO
m7Mr/EvS+FkPt/2vmyPMKha4e1sbgUQEL0Bptkfthw+RW20DCwXtKcPx2FHkQLUh
QZb3+8OLEyddRD1mMwk83qc6u6DuY0Y3bXZTO6qouhEy0WNaGkakaGpC2Bt5MNqk
YRQFaNIZYMtPSucp/Y5N8M7LrB6+IWSDw3FOnCshAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUOglE0wRr1mDvE+aJmhSHxTgAHawwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU4NTU5MDU0LWM2ODQtNDEwNC1iZjUzLWY3NTM1OGVkNzc3MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOPwwDQYJKoZIhvcNAQELBQADggEBABvgpLxYpV9ZxCX1O2D3TBXH
q+KGrUFU/OizHoeoXpOeG8f6VQfU70LWViIzP8Sbin3DXMUhYLWOV3OfjjJQeSNZ
7f/4EcC47NaSzmzOAZvG/s1W/HEiGKTCE8n76uJqbcNEAfjqhCbU0hiWi2MvGJ9T
ME7MsPC37fGxrPJzG23/Yca/iVaDhUe5xvSBWgr1pJfnl6LKxX/8yw2XylzLoWuI
5t4enjI7hy3l9BWfy0GB6amzloGH/XXzRVmI//s47Ionk+e9udp82IgLSDUnB85u
RDqkzbH4GTWZi8gYo9wR5fpvQAQE3XBzm1RkivHgJ3x4Q0hka1kRWBcq0J9g4rs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:07 2025 by rpki-client