
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6c4d8080-1626-47b4-b631-4521a1f69d06.roa
File: 6c4d8080-1626-47b4-b631-4521a1f69d06.roa (raw, json)
Hash identifier: KGbdBMHfPtmJkdkW7YDpLFnUruxDd/U60TJacRDtdzA=
Subject key identifier: E3:24:1B:C6:C8:FE:4D:4B:51:03:47:64:FE:30:B2:F5:79:92:42:27
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4F14BD51ACF5C3A4EE8CC1FB75646C2FFD65D5F6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6c4d8080-1626-47b4-b631-4521a1f69d06.roa
Signing time: Fri 31 Oct 2025 01:58:05 +0000
ROA not before: Fri 31 Oct 2025 01:58:05 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f1c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:14:bd:51:ac:f5:c3:a4:ee:8c:c1:fb:75:64:6c:2f:fd:65:d5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:58:05 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4b34fd6029ebe49e84b8cd0e425f1e5749d09b449f064f0f89a585f400d2fbfd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:ff:83:05:e0:02:fa:4c:c1:64:d5:3c:6d:
77:c6:92:2f:d2:74:75:9f:11:2e:86:dc:eb:9b:54:
8d:32:eb:b7:53:67:ea:68:d6:a1:65:29:4c:c3:03:
1c:03:8b:9b:0c:63:b8:e9:eb:29:4f:ca:85:1a:c4:
8a:f0:b0:6e:1e:db:4f:6d:7c:bd:b9:33:91:23:6f:
ee:84:5e:1b:96:8f:d3:ad:9b:e7:77:8a:b5:20:83:
52:0a:86:c5:3d:f3:da:5a:98:a2:98:d7:0e:34:d9:
69:c5:a4:4b:47:d7:69:f0:0b:27:27:9c:f5:de:f7:
b0:3f:80:02:be:31:ae:8c:f4:9d:32:e0:03:e9:85:
59:d0:8b:b2:2b:b1:49:82:b5:1d:d1:a5:3a:06:be:
38:55:15:00:5a:c7:8e:65:cd:4b:0e:2e:19:fc:da:
44:19:b7:10:8f:7b:d4:a4:b0:21:aa:25:7b:73:15:
de:b9:51:6f:cb:2e:b6:6f:fe:3b:da:59:27:54:6e:
a5:f8:3d:4a:01:a3:50:f1:4f:e7:9a:24:9a:4d:5b:
6c:65:90:12:fa:a9:14:56:5f:4a:08:96:cb:8d:25:
10:c6:d7:2a:ac:ca:b4:ca:c8:c0:fc:67:f9:38:b7:
34:09:55:bd:84:07:0a:d2:ac:6d:f8:5c:b5:dc:1e:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:24:1B:C6:C8:FE:4D:4B:51:03:47:64:FE:30:B2:F5:79:92:42:27
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6c4d8080-1626-47b4-b631-4521a1f69d06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f1c::/47
Signature Algorithm: sha256WithRSAEncryption
42:fb:ca:55:4f:64:af:12:dd:aa:52:49:d8:ad:93:08:62:1f:
ef:66:ac:df:4a:14:9c:d7:7f:08:c0:9d:00:d3:60:38:cb:e1:
5a:fa:6f:83:f5:f6:be:ea:6f:dd:12:0f:78:1a:05:18:eb:b4:
d2:77:f2:7c:20:7a:72:ca:ea:60:4d:52:98:12:35:bb:88:bc:
14:d7:5e:ec:81:cb:e2:64:09:47:31:8c:55:84:7e:af:dd:95:
e0:ea:65:e9:7c:06:e0:74:af:91:e9:dd:1b:0d:53:21:b9:60:
98:2b:cd:51:4d:41:31:ae:bf:b1:93:67:d9:56:27:90:e9:7b:
81:ed:35:80:98:27:18:ce:ab:5b:fb:1d:55:37:63:1f:fc:71:
50:1f:be:0e:dc:f5:b6:26:45:9e:a7:33:b4:b9:d1:18:c3:77:
80:f7:21:80:f9:b2:d3:d8:45:de:d1:3d:c8:eb:73:4c:37:fc:
c0:e4:05:d5:01:88:4c:2b:49:e6:98:af:da:cb:73:f4:f3:fd:
88:cf:56:e7:62:97:3d:42:f3:95:bd:90:07:9a:a9:09:62:10:
74:96:4e:8d:5b:c4:e7:94:77:2f:af:71:d0:d1:48:2a:b7:fa:
e8:8d:b4:da:52:cd:07:7e:04:9e:76:68:d2:41:ee:6f:de:09:
59:79:64:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:55 2025 by rpki-client