
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6544dc11-b234-4da1-9eb6-2121e14402ad.roa
File: 6544dc11-b234-4da1-9eb6-2121e14402ad.roa (raw, json)
Hash identifier: uZxtLPqDaQUsfLsFph8UTpWSnHxVrf6Gk4B1FbMBlks=
Subject key identifier: EF:D6:81:54:D6:40:52:33:89:D9:71:7A:7C:94:19:2D:F3:88:59:63
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 408C59EF61670869A09E79058460C9174DE27271
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6544dc11-b234-4da1-9eb6-2121e14402ad.roa
Signing time: Fri 31 Oct 2025 01:36:55 +0000
ROA not before: Fri 31 Oct 2025 01:36:55 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c80::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:8c:59:ef:61:67:08:69:a0:9e:79:05:84:60:c9:17:4d:e2:72:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:36:55 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ce9595fa7e66d233e77e41ebc74320a1a0df9eff79211b18b74967250adafa3c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:8c:04:a7:34:d4:04:a9:0c:d9:b5:f1:88:
65:b9:31:6b:8d:3a:67:60:6a:35:82:e6:b4:a9:d0:
d2:f0:81:9d:9c:5b:1e:b8:2f:ea:f5:22:b0:f7:a5:
b7:60:83:03:d9:bc:ea:07:c1:f8:09:96:4a:91:f9:
04:b9:48:52:e5:85:92:14:a9:3b:97:fe:21:40:a8:
58:ab:88:c1:25:86:de:e4:ac:41:06:b2:17:0e:f7:
25:04:19:4e:01:de:ea:bd:9c:c3:3e:38:fa:fd:c3:
f2:67:20:3d:db:54:c5:25:6a:6f:ee:e6:9c:ce:85:
4f:18:77:ec:76:71:95:87:7e:70:9a:88:f0:27:89:
99:e2:fe:cd:11:95:78:d8:15:c5:ae:a8:dd:d3:9f:
1e:09:4a:72:df:45:bf:71:64:9a:4b:28:c4:09:cc:
28:8d:ca:d4:08:90:99:6d:29:80:8a:eb:74:78:4c:
44:96:69:7f:af:b1:3a:6d:70:fa:71:bd:eb:1f:1d:
4d:e1:6e:9b:7a:1e:7f:da:12:cf:b0:b7:95:6f:f4:
79:5a:f2:39:ec:53:ed:f7:76:7f:5c:d4:e5:13:e6:
52:5f:ad:6a:87:11:86:82:51:aa:43:fb:5f:9d:fb:
ae:58:2e:dc:50:0c:ec:c9:b1:bd:ca:6d:17:ee:c7:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:81:54:D6:40:52:33:89:D9:71:7A:7C:94:19:2D:F3:88:59:63
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6544dc11-b234-4da1-9eb6-2121e14402ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c80::/47
Signature Algorithm: sha256WithRSAEncryption
1c:1d:27:92:cd:22:b7:e6:76:6b:88:db:7e:8b:d2:36:99:57:
c6:30:ce:88:d1:40:20:8c:7c:8c:b7:5e:5b:10:ab:67:7d:be:
bb:47:cf:93:b5:72:67:04:53:96:ac:68:61:a9:74:87:05:d2:
4a:6c:3b:b8:14:35:ce:ab:38:8d:80:15:f7:c2:0a:33:2a:69:
53:bd:ae:7c:de:4f:6e:26:d2:12:0c:95:82:ea:e8:9f:80:8e:
45:fc:a7:55:0b:4d:f1:c8:10:d4:3a:5d:41:f3:1e:57:54:63:
92:d0:d6:7f:a2:64:be:24:86:35:32:93:66:4b:67:a3:71:50:
fa:c1:e2:91:e9:ff:be:c9:ae:0d:7c:53:76:47:9a:6e:12:cb:
9a:65:db:9b:6f:42:64:b2:b1:28:49:65:23:9b:bb:2d:49:87:
af:89:bb:f3:b1:60:d1:3f:36:8e:e0:6e:1d:ac:64:51:24:0d:
29:48:fc:6f:f1:1b:d8:34:c7:30:8f:5c:47:a7:1d:31:f3:b5:
7c:b6:10:2e:35:f1:9e:99:9c:ee:c4:d4:1b:37:fa:1a:f1:36:
d3:db:b4:75:70:d2:21:32:a3:66:d6:b2:9c:62:7d:8d:92:c6:
52:08:ea:07:80:0c:c7:d7:54:40:9a:33:1b:8d:f5:5f:61:66:
65:7f:c7:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:01 2025 by rpki-client