
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66638f93-cb72-460e-be9b-682a4fc71811.roa
File: 66638f93-cb72-460e-be9b-682a4fc71811.roa (raw, json)
Hash identifier: Gurk/VMa+4syRXeW9RtzG7OrL8TTU4vKIYSL7s5RFho=
Subject key identifier: B5:AF:E0:9C:A8:5A:FD:27:3A:F4:AA:3E:52:5A:A0:F9:D5:D2:81:B6
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 245D5EBFB35EFBC2CFB7470AD333A99126AA7186
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66638f93-cb72-460e-be9b-682a4fc71811.roa
Signing time: Fri 31 Oct 2025 02:40:20 +0000
ROA not before: Fri 31 Oct 2025 02:40:20 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:16a8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5d:5e:bf:b3:5e:fb:c2:cf:b7:47:0a:d3:33:a9:91:26:aa:71:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:40:20 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=60b8cfc74b9c2a80b00705696a6da55805ac4796686e6d3c852c76800060fe63, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:c5:44:d5:7e:61:fc:c9:e0:a0:2a:43:4e:
3e:75:3c:29:3f:a6:4a:f9:9f:7d:69:cd:9f:27:60:
8a:c3:49:a4:86:b0:98:b1:01:80:4a:f8:3f:35:85:
37:e1:6d:35:28:41:a1:6c:d9:63:3a:eb:a5:89:bc:
c3:41:d3:6c:22:2f:a2:6d:d9:c9:55:7c:eb:dc:f5:
23:e0:82:45:9f:0c:03:af:f0:2f:f0:07:46:9e:c8:
11:b0:bc:31:74:47:da:23:c6:ef:f3:1c:e5:8e:25:
be:19:69:bd:08:49:41:90:a8:87:ec:ae:e8:d2:c2:
e4:d2:74:03:79:ee:b7:fa:ba:3e:e5:a0:50:10:37:
6e:8c:c1:77:f4:19:26:d6:17:4c:ce:f5:81:4d:0e:
ab:9a:e9:a8:50:79:0a:50:ec:cd:2f:70:e8:ac:43:
e6:36:2e:2f:b3:2c:5a:37:56:3d:d5:92:7b:35:1b:
45:1d:5c:f5:04:4b:bc:99:e1:47:58:60:5f:e6:20:
c3:32:ed:b7:84:5d:89:9a:63:4e:c5:05:e5:0f:b2:
ae:f2:21:e2:ba:78:05:fd:e0:3c:79:9a:62:78:5c:
d9:1b:20:89:8d:8b:7f:33:66:ef:60:b8:8c:f1:88:
58:4a:4e:75:ab:95:85:1a:ae:99:8d:b4:75:6e:4c:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AF:E0:9C:A8:5A:FD:27:3A:F4:AA:3E:52:5A:A0:F9:D5:D2:81:B6
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66638f93-cb72-460e-be9b-682a4fc71811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:16a8::/46
Signature Algorithm: sha256WithRSAEncryption
39:15:c7:5f:9f:3c:cb:e6:4d:bd:f4:86:d0:a9:59:12:0a:87:
86:19:b0:a8:e0:c0:4d:9a:bf:a6:ca:4e:99:ff:6e:6e:96:2c:
36:05:a2:34:c4:f0:88:ed:b8:a4:c2:83:b0:97:76:5f:b7:a1:
51:20:fc:78:09:76:f6:57:d2:72:dc:cd:40:c6:3a:f7:74:3d:
2c:90:23:70:6d:7a:b8:d2:6d:d1:37:c5:2e:44:82:c1:17:df:
55:a6:bb:3b:99:e8:aa:cb:b1:5c:93:95:21:dd:f4:ef:4f:cf:
f2:ac:3a:46:e7:c2:43:17:47:86:18:5d:f7:ef:e5:d8:87:58:
a5:d4:61:89:f8:81:c2:58:22:8a:01:a8:58:54:4f:6b:fb:09:
49:d0:6b:1b:1d:06:3a:5e:90:a0:84:80:e2:de:d9:b7:1b:02:
df:3f:4d:c3:12:de:fa:80:78:04:e3:68:d3:82:ee:75:0b:91:
8c:4b:e0:e6:df:e2:41:cb:4e:fa:8f:e9:a4:ee:1d:0c:83:b0:
53:dc:d7:c4:64:5a:31:09:b9:c8:f3:12:aa:8c:74:fe:78:64:
45:77:4e:fd:8e:8a:90:c9:9e:d8:57:4f:d6:c8:74:98:f8:7c:
b8:d2:4f:3b:a0:b3:00:d1:85:78:37:e1:e2:de:8a:43:06:e6:
28:fd:1e:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:40 2025 by rpki-client