
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a1c627f-d79d-4b9d-bd88-a721067860bd.roa
File: 5a1c627f-d79d-4b9d-bd88-a721067860bd.roa (raw, json)
Hash identifier: WJJVAPpzoj3M5dehFkQhgmoVf99G9f/CB1s/H57AX+g=
Subject key identifier: 66:3E:BB:0C:A8:4A:98:52:41:C4:92:C3:B5:BA:B2:37:D0:EE:90:BE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 28E56AB0E0A48DCADF9C5FE0D5EE3F4721972412
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a1c627f-d79d-4b9d-bd88-a721067860bd.roa
Signing time: Fri 31 Oct 2025 01:13:22 +0000
ROA not before: Fri 31 Oct 2025 01:13:22 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3a9e::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e5:6a:b0:e0:a4:8d:ca:df:9c:5f:e0:d5:ee:3f:47:21:97:24:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:13:22 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=2c26f2b21ddadf781e574a31973a05703c537537de2648b00f54eacdaabfcff2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:38:8b:d3:e6:0d:92:7e:75:90:8e:7a:d9:
03:e2:8b:33:31:13:2c:a2:09:26:72:19:e7:76:68:
e2:46:88:1b:49:b2:26:73:f8:18:5d:5a:4a:42:eb:
68:fc:bb:84:07:cf:61:06:bc:74:0e:c9:9b:22:d1:
aa:fa:ed:87:7a:c2:38:74:ff:03:78:53:c5:32:bf:
42:84:71:9b:a7:e3:87:13:b7:2d:00:e7:71:24:3c:
3d:52:12:5f:65:e1:58:73:db:eb:e5:eb:ff:3a:6b:
52:41:10:f6:32:cf:58:56:86:24:c3:a1:b2:8d:61:
03:7f:c6:4c:b8:0f:74:14:32:4f:ea:5d:43:1a:1a:
33:44:49:dc:67:97:65:38:9c:9b:ee:63:9a:35:e2:
a9:9a:46:67:84:52:53:06:ad:16:22:22:d4:cc:da:
4c:62:13:25:76:e0:c3:3f:54:6b:83:56:e4:e3:45:
cf:25:66:e1:73:f6:a9:3d:b6:19:24:d9:3f:88:55:
34:35:4e:25:f0:1a:6b:86:46:07:cd:f5:9c:bd:ac:
ab:2a:fe:78:a0:e1:eb:00:03:75:5c:75:e2:99:ba:
17:06:f1:61:36:a2:a3:4e:39:7d:3f:f0:b9:78:4f:
fe:17:54:1a:37:ab:7a:e5:86:10:a9:43:fb:94:df:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3E:BB:0C:A8:4A:98:52:41:C4:92:C3:B5:BA:B2:37:D0:EE:90:BE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a1c627f-d79d-4b9d-bd88-a721067860bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3a9e::/47
Signature Algorithm: sha256WithRSAEncryption
28:b0:f7:55:36:d8:9e:30:f9:c9:1d:76:4a:0d:42:73:10:5c:
3f:2d:46:52:e2:b6:b1:69:1c:d7:83:46:36:a7:ee:f8:5d:53:
9e:21:af:2f:ea:d9:9c:cf:60:8d:de:c2:02:96:bb:84:32:43:
89:89:7b:d1:00:b4:7f:0e:6d:78:f0:3b:1a:bf:f0:5a:b5:be:
b7:80:e7:d7:db:82:ed:2e:90:4a:b5:95:7f:35:6f:b0:ea:c1:
71:ad:20:1d:75:38:a3:3e:bd:df:fb:74:cc:e0:7f:f0:f2:ec:
15:40:06:a0:2f:ea:ae:47:bb:50:cb:36:a8:c5:0b:cb:3e:6d:
0a:98:af:bb:08:96:88:19:44:38:f8:04:60:74:be:8d:ed:ee:
d8:3f:82:9e:22:a8:4a:19:7b:3c:c3:e9:a4:a3:4f:60:d4:9f:
f5:a0:0a:6f:d0:f8:e2:b2:bd:74:c2:2f:60:89:d7:ec:2a:97:
4f:29:60:c3:24:4e:2e:dd:24:2f:53:77:ce:40:31:3b:ae:d4:
56:ce:39:93:c7:25:9a:44:b0:d6:56:cf:ab:25:15:b9:60:ec:
c4:6d:31:6a:61:16:eb:de:ee:62:af:fb:51:35:33:1a:2f:16:
b5:a0:4d:3b:40:f7:bd:de:85:7a:69:81:fc:9a:f4:d0:b8:0e:
3d:aa:81:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:19 2025 by rpki-client