
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/65bee615-56a7-44a1-b4cc-4f252d6092ef.roa
File: 65bee615-56a7-44a1-b4cc-4f252d6092ef.roa (raw, json)
Hash identifier: oGbHEkVshgDaPCWNg8uy67/ngU+xdLP6Y7qXzcqhePg=
Subject key identifier: D1:F7:30:E3:E4:45:73:43:C4:AA:F1:74:91:60:01:DC:62:54:F0:69
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 10DAF15D9DC606573FD8519CD6402806253299F4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/65bee615-56a7-44a1-b4cc-4f252d6092ef.roa
Signing time: Fri 31 Oct 2025 02:42:04 +0000
ROA not before: Fri 31 Oct 2025 02:42:04 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1760::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:da:f1:5d:9d:c6:06:57:3f:d8:51:9c:d6:40:28:06:25:32:99:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:42:04 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=88ff0010bf18b2f8dc25baf335b4235762b44606a8848b4dcae3c3c71d2de178, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:0d:8a:e5:9b:8a:a7:55:09:9f:ee:d1:d5:
0d:8d:80:b1:94:3d:ab:0c:5e:13:bf:b1:eb:75:37:
d5:e3:c3:55:a3:8c:86:59:7f:c2:34:ac:20:fa:2d:
c0:e5:8b:5e:18:98:da:d1:d0:36:1f:fc:3b:f3:e8:
30:fb:c1:9f:eb:65:a6:cf:ed:48:f3:5a:8f:da:43:
9c:30:b8:98:9a:5d:b1:17:7a:80:e0:48:3f:8f:7a:
55:28:a3:9f:93:c0:c1:4a:23:e1:31:bd:1a:0a:5e:
d3:c4:46:20:be:32:c6:50:5b:ef:9f:55:97:b3:a3:
04:10:d3:63:10:69:f0:f0:80:7d:25:8c:25:fe:6a:
dc:28:f2:cb:ed:74:ee:ce:f0:7e:cf:6b:58:71:29:
32:be:13:d4:3a:07:94:b2:1f:23:21:dc:26:b3:31:
72:b6:d0:98:59:5d:02:9e:57:ba:e3:53:cd:6b:a6:
d6:dc:d9:1f:9b:ae:b2:af:d6:11:ee:e4:b9:c3:f0:
22:07:77:35:45:c2:59:bc:95:54:d7:6b:c1:2c:9a:
27:5e:1a:4c:2d:3e:1b:df:09:d5:16:cf:15:1a:58:
b6:4d:f9:d5:0f:db:36:d7:5e:3e:a0:b7:15:7f:15:
2e:13:7d:49:a7:fc:a5:d5:60:7f:16:c4:72:09:ab:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F7:30:E3:E4:45:73:43:C4:AA:F1:74:91:60:01:DC:62:54:F0:69
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/65bee615-56a7-44a1-b4cc-4f252d6092ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1760::/46
Signature Algorithm: sha256WithRSAEncryption
7f:5c:09:8d:38:41:d7:98:44:b5:90:e6:9f:1e:d4:d6:91:96:
6f:69:13:3d:b5:8b:93:ae:a1:f6:34:1f:64:19:6a:2b:fe:8c:
5f:88:9f:1e:81:3c:d6:96:a8:8b:0e:ee:84:b7:5a:da:7e:22:
88:fa:62:9a:cf:19:11:4f:db:55:c4:2b:56:ad:78:09:32:16:
92:52:2a:67:16:8c:00:b9:4e:08:89:66:4f:03:2d:97:7e:b6:
a5:81:fb:30:f0:48:d2:24:bb:54:c9:4d:f5:9a:10:d8:4f:2c:
67:c0:ac:55:db:12:56:75:88:b2:55:e3:0e:70:15:02:77:1d:
f7:8a:99:24:01:e9:2f:69:1b:94:60:d2:a7:a8:39:8c:7c:63:
4c:ab:a0:35:ff:c5:5c:f1:b7:81:b1:7f:c4:88:bf:0a:66:3d:
94:de:f2:dd:f5:45:ee:22:93:8b:16:0a:81:64:fc:10:89:f5:
28:1a:58:4a:35:cf:3f:ef:2c:05:fd:77:17:d6:45:c0:74:aa:
17:11:b7:41:05:35:01:c2:07:bc:48:94:3b:4e:0f:66:b0:dd:
92:fc:f2:f5:88:d5:d2:69:c5:19:05:35:07:fd:66:1a:c2:83:
63:35:48:37:f6:30:c9:eb:51:62:4d:b3:42:70:f1:a0:ed:08:
ea:f8:1c:2b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUENrxXZ3GBlc/2FGc1kAoBiUymfQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI0MjA0WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4OGZmMDAxMGJmMThiMmY4ZGMyNWJhZjMzNWI0MjM1NzYy
YjQ0NjA2YTg4NDhiNGRjYWUzYzNjNzFkMmRlMTc4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwYA2K5ZuKp1UJn+7R1Q2NgLGUPasMXhO/set1N9Xjw1Wj
jIZZf8I0rCD6LcDli14YmNrR0DYf/Dvz6DD7wZ/rZabP7UjzWo/aQ5wwuJiaXbEX
eoDgSD+PelUoo5+TwMFKI+ExvRoKXtPERiC+MsZQW++fVZezowQQ02MQafDwgH0l
jCX+atwo8svtdO7O8H7Pa1hxKTK+E9Q6B5SyHyMh3CazMXK20JhZXQKeV7rjU81r
ptbc2R+brrKv1hHu5LnD8CIHdzVFwlm8lVTXa8EsmideGkwtPhvfCdUWzxUaWLZN
+dUP2zbXXj6gtxV/FS4TfUmn/KXVYH8WxHIJq1yjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU0fcw4+RFc0PEqvF0kWAB3GJU8GkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzY1YmVlNjE1LTU2YTctNDRhMS1iNGNjLTRmMjUyZDYwOTJlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAF2AwDQYJKoZIhvcNAQELBQADggEBAH9cCY04QdeYRLWQ5p8e1NaR
lm9pEz21i5OuofY0H2QZaiv+jF+Inx6BPNaWqIsO7oS3Wtp+Ioj6YprPGRFP21XE
K1ateAkyFpJSKmcWjAC5TgiJZk8DLZd+tqWB+zDwSNIku1TJTfWaENhPLGfArFXb
ElZ1iLJV4w5wFQJ3HfeKmSQB6S9pG5Rg0qeoOYx8Y0yroDX/xVzxt4Gxf8SIvwpm
PZTe8t31Re4ik4sWCoFk/BCJ9SgaWEo1zz/vLAX9dxfWRcB0qhcRt0EFNQHCB7xI
lDtOD2aw3ZL88vWI1dJpxRkFNQf9ZhrCg2M1SDf2MMnrUWJNs0Jw8aDtCOr4HCs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:54 2025 by rpki-client