
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6130f217-dbaa-4676-a830-755e8070dceb.roa
File: 6130f217-dbaa-4676-a830-755e8070dceb.roa (raw, json)
Hash identifier: n7rNNB/UmWNemf7bm2hIEL3HSxwFJOtwQnvNvDTILXg=
Subject key identifier: A6:BF:9C:47:34:04:96:0D:D4:59:7B:CA:C3:63:84:B1:71:64:98:11
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7C4A4967A06BE9AC50503192F922BA55F7272B30
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6130f217-dbaa-4676-a830-755e8070dceb.roa
Signing time: Thu 30 Oct 2025 21:40:35 +0000
ROA not before: Thu 30 Oct 2025 21:40:35 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:185a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4a:49:67:a0:6b:e9:ac:50:50:31:92:f9:22:ba:55:f7:27:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:40:35 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=90324ad936a37a37d60fcd3a80432f7e6da21489211232ec6cae9a74b379918c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:3f:8b:19:d4:0b:42:d0:c0:8f:a1:bc:b3:
05:ce:e6:b3:73:1a:fd:a0:9b:2b:cd:04:8e:dc:dc:
34:95:bd:25:45:0b:60:2f:3c:5b:0d:45:65:89:b4:
71:50:3e:fe:2e:03:ad:85:0e:70:ba:ac:ed:35:58:
4a:ff:b2:d2:d0:7c:83:f7:eb:33:99:0e:7d:a1:d5:
c7:83:ba:ca:09:63:46:ed:e0:35:d4:81:d9:a5:60:
16:99:2a:60:0b:a4:6e:1f:89:c0:44:0e:91:db:bf:
98:a7:9c:6e:24:fe:22:b3:ff:93:71:e5:d8:70:48:
12:a5:6e:0d:d4:cc:17:56:fb:d5:81:1b:6a:e0:95:
49:bc:c1:01:b3:5a:bb:67:18:30:0a:f4:d5:88:e3:
e4:31:e9:0f:9c:e8:16:e2:9a:1f:cb:f9:40:97:96:
0e:b1:65:3c:28:dc:a2:5c:d2:e8:ac:5b:42:f5:d4:
61:b4:13:56:9e:e9:f4:e6:4e:7d:82:96:5d:de:cd:
29:d4:a3:21:1a:b9:65:6f:7c:5d:8f:7d:47:2e:37:
aa:af:42:65:94:3c:6f:2e:9e:53:e6:93:3d:3a:1c:
53:7a:f6:ea:29:be:37:dc:5d:e4:5f:fe:7e:bd:69:
ea:8a:5b:f8:f0:b7:72:39:9f:3c:a9:05:e9:f6:38:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:9C:47:34:04:96:0D:D4:59:7B:CA:C3:63:84:B1:71:64:98:11
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6130f217-dbaa-4676-a830-755e8070dceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:185a::/47
Signature Algorithm: sha256WithRSAEncryption
0b:5c:89:90:35:f8:44:68:07:19:ec:df:bb:20:e1:81:dd:63:
ea:c9:75:19:11:b4:67:4e:03:90:f7:0b:c2:22:b3:11:bb:b3:
76:62:da:e9:11:a6:c6:3e:61:4d:9b:1d:b3:3b:23:41:43:ec:
bd:17:83:2d:97:ba:c7:77:fc:cd:7d:fd:95:81:70:04:22:ec:
74:ac:7a:d9:22:2a:00:40:ee:9e:66:22:69:42:bb:59:ca:17:
6b:8d:1c:dc:bb:66:d8:71:5f:cf:d1:f9:fb:56:fd:6d:43:73:
06:82:a0:cb:a2:e5:18:09:89:ec:72:fd:ca:cf:22:de:8f:fd:
76:ba:85:e5:bc:44:24:2f:25:a6:54:7a:59:ba:60:80:e4:42:
61:1d:44:19:87:f7:60:96:88:67:81:fd:09:8c:ff:04:8f:af:
7b:c4:0d:07:25:ea:0e:a3:ac:50:5d:1d:a3:5c:14:f2:29:a2:
1d:d8:ba:f4:7d:0b:2d:a8:99:7b:9b:e3:e2:51:2a:2f:5b:54:
75:34:08:42:ee:3d:f6:85:d9:50:7f:71:13:86:b5:7b:72:1d:
15:a7:d6:75:49:9d:0f:4b:73:eb:8d:45:c6:49:2f:63:2c:e2:
d8:29:50:a9:57:f0:44:ae:8b:1c:3f:01:45:93:12:37:aa:13:
41:1f:3a:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:49 2025 by rpki-client