
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/675da917-a801-4941-acea-23750b097310.roa
File: 675da917-a801-4941-acea-23750b097310.roa (raw, json)
Hash identifier: fVYK3zMAXBFuxgqs3YWT409VD+YGRSghJ7ZtibCHh/Y=
Subject key identifier: A4:AB:36:D8:BB:84:5A:6B:DA:BD:A4:A9:6B:EA:C7:BC:DE:F3:7F:FD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 07474F1CF6FD6A473FDA9768671E524504D23C98
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/675da917-a801-4941-acea-23750b097310.roa
Signing time: Fri 31 Oct 2025 03:21:43 +0000
ROA not before: Fri 31 Oct 2025 03:21:43 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1f5c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:47:4f:1c:f6:fd:6a:47:3f:da:97:68:67:1e:52:45:04:d2:3c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:21:43 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=5540f9d30df660c4c1cd889f41171faa2553b5a67f7682494881e3a8b514b207, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:35:b2:c4:37:b4:04:ef:cc:c2:87:f1:3e:
07:35:ab:ed:e3:bd:a3:6b:25:7e:f4:11:9c:2d:e5:
56:89:d1:e0:a1:54:84:7c:a7:2a:12:1a:15:5e:a0:
f8:ee:ae:5f:d6:e4:62:f9:f1:8d:da:61:f0:3e:bb:
df:aa:b2:87:60:55:eb:ef:e8:76:7f:77:14:17:1d:
d7:b2:3a:ec:b2:e8:8d:d1:f2:70:ab:ef:fc:4f:22:
4f:94:40:6f:f0:2f:0c:a2:69:a7:05:e4:2d:aa:de:
55:4e:40:06:74:02:2a:cd:e3:7d:9e:97:c4:fc:96:
f8:d6:04:07:c6:fb:2b:6d:c4:0a:a5:43:91:c4:5f:
be:16:82:51:b3:44:41:66:5a:45:b5:67:04:99:38:
c1:3a:45:1e:ae:fb:d4:bb:bd:73:2e:91:b8:2f:61:
d5:07:25:f6:62:38:2c:68:03:df:ac:c4:71:6e:2c:
4b:6c:a5:26:9e:f2:33:42:72:19:b3:1f:3a:a6:50:
52:2c:18:66:8b:c1:b9:40:e7:73:37:d7:1c:ce:5b:
e2:01:ff:f6:f8:0e:a0:89:66:51:db:c3:6c:81:26:
0a:21:65:09:fa:4f:8f:08:21:d5:9b:7c:56:19:a6:
5f:73:70:e6:70:3e:d5:03:fc:a8:60:fe:d4:67:86:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AB:36:D8:BB:84:5A:6B:DA:BD:A4:A9:6B:EA:C7:BC:DE:F3:7F:FD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/675da917-a801-4941-acea-23750b097310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1f5c::/46
Signature Algorithm: sha256WithRSAEncryption
37:1b:32:45:52:72:4a:40:5b:4e:39:42:b2:de:48:50:84:13:
ff:e1:bd:21:56:c7:54:dd:b8:f0:ed:a4:39:6e:e8:a4:78:0b:
45:11:29:78:96:1c:c0:b0:ea:b0:a3:be:91:a2:83:2c:da:5f:
b0:88:dd:e5:52:f7:93:e7:a2:39:db:6b:a3:e0:46:af:77:db:
7a:ec:61:f7:ae:ad:06:07:10:03:b3:03:69:2d:d2:8c:3a:6c:
f5:c0:7b:d0:89:f1:6c:5f:8c:c5:4c:d9:80:dd:dd:bd:8b:37:
6c:cb:d1:86:61:1e:bb:43:0c:e7:96:0f:db:f0:2a:4e:c7:b5:
84:9c:34:f0:9e:ec:26:91:0c:a9:bd:1d:ee:f9:48:e1:c2:99:
94:09:70:44:47:28:fa:dc:eb:b2:e0:7f:b3:2c:f4:52:13:b6:
e4:e3:7c:c3:b1:6e:b0:26:de:33:7f:2e:08:5f:20:b4:7f:b3:
cc:39:69:2a:f4:60:a2:e3:f6:17:db:31:86:fa:55:3a:fd:13:
c1:6f:17:cc:d8:75:c4:0e:97:f5:4e:c0:71:07:9c:e0:96:00:
7c:57:a8:95:45:af:0a:03:95:2f:71:76:dd:57:e1:e9:fd:31:
d5:a6:27:49:61:bc:bc:e9:98:e9:fd:d1:0a:d5:bc:b1:64:36:
8b:b9:ff:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:34:45 2025 by rpki-client