
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60234c04-9f39-4916-94f5-7ab5ffa01c5c.roa
File: 60234c04-9f39-4916-94f5-7ab5ffa01c5c.roa (raw, json)
Hash identifier: jpAbgRns13gB26wfu9ik9cS1aXdSgkHt+L1iC4GUr34=
Subject key identifier: 84:C9:95:4B:77:D9:BB:76:28:57:BC:D7:4F:08:C3:D9:6A:6C:61:AD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 71BA94AF4D5A18731352D72B99B9F724F1C5BEE7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60234c04-9f39-4916-94f5-7ab5ffa01c5c.roa
Signing time: Thu 30 Oct 2025 22:58:52 +0000
ROA not before: Thu 30 Oct 2025 22:58:52 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a8a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ba:94:af:4d:5a:18:73:13:52:d7:2b:99:b9:f7:24:f1:c5:be:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:58:52 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=30825d4a93bbbf87ad55da8e0e655eab254bfae74a6b33011c4751d59524982c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:bb:f8:0a:3d:a6:fa:0a:29:33:08:80:08:
1d:ea:7f:83:b5:aa:dd:db:48:d7:26:54:c4:59:14:
54:f3:cf:07:82:c9:49:15:c6:9e:cf:a9:62:43:c2:
26:0d:08:b5:bc:f4:5f:6d:e8:31:9d:30:e0:e3:0a:
09:93:aa:e1:55:29:6d:73:94:65:89:08:12:9e:a3:
0e:93:3d:a7:20:05:41:c3:5d:28:d9:fd:e1:48:b8:
dc:7a:6b:71:9f:b8:1a:e8:53:65:33:f2:6c:83:36:
2b:34:ce:e2:2c:43:e0:f1:67:5f:d9:ca:e8:79:0d:
8d:ca:7a:24:5c:10:52:a0:bd:26:df:10:c6:7b:8d:
2c:58:cf:1a:36:fd:df:69:16:31:06:b9:76:0a:2f:
a9:da:92:05:f2:84:1c:1e:df:de:bc:75:e6:b3:bd:
d5:d2:3f:8f:36:75:c2:8d:59:1a:81:73:de:5e:44:
68:24:5e:60:df:b2:3d:64:33:1b:44:89:5f:19:19:
f4:e4:25:c2:4b:37:bb:7a:06:64:29:25:35:9e:5d:
2b:2a:1d:17:a1:42:aa:3c:66:f5:e3:a5:a4:10:ae:
1e:35:57:1e:5c:74:5f:4e:d0:74:e0:a6:ae:d9:b7:
15:9c:8c:39:a0:47:59:08:2f:70:4d:05:8a:23:ad:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:95:4B:77:D9:BB:76:28:57:BC:D7:4F:08:C3:D9:6A:6C:61:AD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60234c04-9f39-4916-94f5-7ab5ffa01c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a8a::/47
Signature Algorithm: sha256WithRSAEncryption
44:a7:08:f9:83:e4:d4:52:2d:3a:20:91:58:19:b9:b6:c9:39:
94:fb:84:9c:f0:fc:da:d5:35:58:c3:e1:70:2f:32:d9:70:ec:
c6:36:96:a8:3d:c2:88:7f:e1:30:86:e5:30:79:37:d1:52:3e:
52:53:34:fc:9c:9d:6e:91:44:94:7f:a0:bb:b5:f2:47:32:57:
ef:86:fe:e8:1e:53:9a:40:31:24:94:02:1b:ed:b6:4b:d4:f8:
96:d8:3c:9e:ef:ec:11:2f:f8:c2:b8:ee:9a:fa:df:63:30:8f:
53:94:27:d9:e4:60:61:48:f2:0d:6d:e0:8d:ba:9d:2a:18:74:
77:ed:10:95:cd:83:21:23:f1:2f:e6:76:2b:37:c9:22:4e:55:
65:dc:75:b0:e9:b9:c1:2a:c9:68:9d:4b:9b:91:1f:80:6f:8d:
89:21:24:ec:3b:8a:88:ac:21:8a:b5:d4:0e:80:7f:24:9d:1b:
a6:e9:a2:07:c3:15:e7:29:bd:7d:77:27:25:4c:c7:c0:ea:5e:
b0:3f:8f:02:42:ee:fc:b1:e9:30:9b:81:33:e6:7f:d4:fb:e6:
4f:1b:4a:bc:84:c5:dc:e2:66:12:e8:3b:d4:dc:c6:c1:f0:83:
67:09:b6:ba:da:9e:8e:db:5e:9b:ed:dd:f0:45:9f:47:1d:90:
7c:dd:27:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:56:03 2025 by rpki-client