
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/646b881f-c6af-4d6b-b093-211537814c71.roa
File: 646b881f-c6af-4d6b-b093-211537814c71.roa (raw, json)
Hash identifier: o9y2fheRPidr/YSr8D2l+/bR24vBO9cjHWkVNEVWLfo=
Subject key identifier: 7C:2D:D3:CA:3B:A8:8D:28:3A:25:88:CB:D2:D5:90:A3:B7:2B:41:61
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1C3AE4AB1E2305FED63D60A1029AAD74477AA22A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/646b881f-c6af-4d6b-b093-211537814c71.roa
Signing time: Thu 30 Oct 2025 21:10:11 +0000
ROA not before: Thu 30 Oct 2025 21:10:11 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1518::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3a:e4:ab:1e:23:05:fe:d6:3d:60:a1:02:9a:ad:74:47:7a:a2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:10:11 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=439ddde36904950d528cedb4acf118088aca5e27bb5a36aba41dd866787e8b73, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:fa:25:71:c2:12:0f:45:19:53:e4:82:9b:
83:67:86:38:77:46:9e:96:f3:61:45:b8:41:ac:f2:
45:e0:8e:f0:c6:1f:8b:76:74:05:fd:dd:f5:6f:dd:
6a:5e:c9:ee:76:1d:61:34:2c:c0:74:97:9f:fa:24:
0a:7d:d5:74:0f:14:05:f1:97:71:36:a5:f6:f9:cd:
e2:07:84:5a:96:f6:da:6f:ea:89:be:4c:5d:a0:ae:
c4:6d:f9:8f:cc:51:42:bf:48:72:81:2c:72:d4:4a:
fb:7f:8b:f8:47:79:6b:b3:36:2b:09:f7:2a:3f:13:
86:e8:68:25:d2:c8:b7:31:9e:fb:0e:a7:f4:e7:f4:
22:b0:65:b1:f3:32:f8:a9:53:7f:f2:2f:d9:01:49:
b9:97:bb:41:24:ce:de:15:43:92:4d:3d:15:b0:0a:
5f:ec:56:ce:e4:2a:66:44:88:45:f9:fd:79:91:35:
0e:21:8a:14:35:c6:26:b9:92:1a:f8:f3:5b:fe:54:
04:2d:48:07:76:3e:a4:b8:a8:6e:33:57:a4:24:35:
9b:38:a4:e5:98:24:2e:71:35:a6:99:e3:a2:f8:22:
21:78:27:aa:15:68:83:ce:ef:71:f2:c2:5c:f7:e4:
db:65:d0:4d:d8:bc:97:40:a6:c7:7b:43:2e:79:c7:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2D:D3:CA:3B:A8:8D:28:3A:25:88:CB:D2:D5:90:A3:B7:2B:41:61
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/646b881f-c6af-4d6b-b093-211537814c71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1518::/47
Signature Algorithm: sha256WithRSAEncryption
44:0b:b6:6d:87:06:56:c8:ce:87:be:d8:49:30:a1:70:12:77:
ff:1f:68:7a:5b:62:fb:fa:af:97:97:40:d0:5a:37:4c:2f:9b:
4a:33:f8:da:5c:14:6d:36:9d:33:e6:21:4d:91:b5:19:3f:8e:
1c:97:25:04:73:31:ad:94:e8:f7:e2:2d:99:9e:13:97:24:95:
0b:21:30:f7:09:aa:6c:66:41:ee:e4:14:b8:d5:b7:30:3e:9e:
b0:b3:69:48:16:34:a3:26:e1:b9:6a:64:af:3e:05:df:ee:ce:
2a:1b:72:ff:80:ef:37:ab:90:02:24:f4:4c:23:fe:14:0e:0c:
7c:f9:71:d2:58:e9:c6:bb:4a:22:f8:20:ba:8e:59:6e:37:b6:
87:ae:49:df:b0:ed:eb:e5:ef:46:8b:45:72:c4:08:4b:50:7d:
d1:6b:c6:cf:c3:1d:91:9f:60:46:85:d7:2b:90:6d:75:0f:51:
ce:35:4f:3b:b8:e7:50:74:55:a0:58:05:96:d1:e0:60:1f:f2:
4c:38:ab:a8:c9:4b:a8:a3:aa:81:b4:44:2f:57:de:bb:bb:fc:
3f:be:de:5f:8c:b3:64:86:53:8b:95:1d:a4:98:70:7f:db:cb:
c3:b3:a6:22:ce:6a:46:ea:67:90:0f:3d:48:22:f1:6a:0b:fe:
cc:db:65:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:51 2025 by rpki-client