
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59ff0432-0190-4767-be43-02b63000db5d.roa
File: 59ff0432-0190-4767-be43-02b63000db5d.roa (raw, json)
Hash identifier: FAdYKpWJBtryJd3FVOcsiP0facvX1AN0mqykmEpgjdU=
Subject key identifier: 98:E2:09:47:9E:84:EE:E9:03:D8:6B:D6:D3:88:29:8E:2B:A2:11:27
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 01434740B214875D5B1D20E3006403DBFE961E20
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59ff0432-0190-4767-be43-02b63000db5d.roa
Signing time: Fri 31 Oct 2025 03:37:01 +0000
ROA not before: Fri 31 Oct 2025 03:37:01 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b8c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:43:47:40:b2:14:87:5d:5b:1d:20:e3:00:64:03:db:fe:96:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:37:01 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ffd25ef13b98940cee90dac2a308e7b365978d5dd6a5886629e3f5591e5b6534, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:60:36:39:00:e7:c1:f4:40:3b:e6:97:e5:
4e:68:87:22:59:03:b8:37:bc:23:78:6a:f4:c7:4a:
9f:53:f5:b7:bc:fb:30:c4:53:53:6e:ec:5d:6f:7e:
90:bf:b1:8e:07:92:14:db:35:53:20:96:0c:9b:69:
37:56:87:92:11:8a:3d:4a:19:29:2e:08:24:4e:ee:
08:12:25:19:54:b5:4a:91:9d:38:50:46:34:ef:52:
10:7e:67:1a:04:58:22:1f:12:b2:63:1c:84:05:b2:
b0:d4:8d:60:6a:92:65:d5:24:4f:b0:ea:50:9e:0a:
57:f0:ca:ca:cd:41:1a:e1:10:00:bd:4e:06:cc:e4:
54:91:7c:ca:aa:14:2d:bd:dc:5b:9d:a6:6d:cd:ab:
f6:d5:52:13:a2:71:bb:bf:0e:24:dc:3e:65:a4:e8:
a3:f7:39:7d:f1:6e:04:ab:5f:43:1e:aa:8d:64:d2:
c9:a1:b8:85:5e:5a:1f:07:83:02:c0:35:9a:3a:93:
9b:10:1e:42:e9:4d:68:b7:a2:e9:92:d4:88:f7:c1:
93:fe:17:76:c2:ba:10:f9:7d:91:5a:01:ca:24:cb:
3e:8b:f8:3b:ab:fc:94:a4:cf:44:bd:45:9b:a1:8a:
e2:1e:f3:bd:98:ae:5b:5a:d4:b3:cb:cc:8f:b7:8c:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E2:09:47:9E:84:EE:E9:03:D8:6B:D6:D3:88:29:8E:2B:A2:11:27
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59ff0432-0190-4767-be43-02b63000db5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b8c::/46
Signature Algorithm: sha256WithRSAEncryption
3f:69:4c:e3:9b:a1:c4:74:e7:b1:6a:43:5d:46:a2:68:07:22:
fb:a5:14:64:24:d9:38:5d:65:d1:55:e5:66:dc:31:a8:f9:4f:
ac:b1:f7:6d:0c:b8:f6:b1:d9:13:36:f2:30:be:63:f1:52:7b:
51:c5:a3:ce:4f:93:5f:ec:79:1a:1c:a8:2f:f7:11:1c:a3:c1:
06:2d:92:dd:43:52:f5:81:9b:70:7c:ce:20:4d:57:83:cf:5b:
89:d6:65:75:5a:30:34:ca:65:86:0d:2c:98:f5:aa:5e:77:c4:
ea:67:65:2f:05:74:38:3d:e6:8d:fc:49:dd:09:fe:f4:84:c2:
cb:e9:a7:64:e4:2c:a8:a7:a5:95:14:c9:1a:02:b7:fd:ab:14:
f7:a3:c6:47:17:b5:08:13:0a:80:ec:01:34:8a:e2:50:3b:2a:
83:20:68:34:7e:f0:ad:4c:b6:6a:fd:c5:d6:05:34:6d:ca:e0:
e8:98:46:89:cd:b6:40:fd:c1:e7:e9:67:5a:46:33:67:0f:0b:
6c:2b:50:cf:a4:74:15:d5:4e:69:6c:d0:3c:99:c5:d3:fd:88:
21:bf:e3:fc:20:6f:ce:42:7c:7e:d8:eb:89:dc:bc:53:1f:8e:
20:37:1e:36:ff:99:c6:4e:a2:b7:e2:89:b1:bf:4e:db:dd:81:
3a:a9:9b:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:08 2025 by rpki-client