
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d653ef7-d989-4ea8-8d6d-c1a30d0120a5.roa
File: 6d653ef7-d989-4ea8-8d6d-c1a30d0120a5.roa (raw, json)
Hash identifier: p4loZLrq8ESQv++6ybfUKh90vezJodxSoEtQNWx29ro=
Subject key identifier: 34:D7:EB:65:25:38:50:50:49:BB:02:76:15:7A:74:09:76:40:D5:D4
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2EE4617520C34BDB8EBF442E3D3994A2786AE2AE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d653ef7-d989-4ea8-8d6d-c1a30d0120a5.roa
Signing time: Thu 30 Oct 2025 20:38:53 +0000
ROA not before: Thu 30 Oct 2025 20:38:53 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1270::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e4:61:75:20:c3:4b:db:8e:bf:44:2e:3d:39:94:a2:78:6a:e2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:38:53 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=684fde6400c5541a2a071e6bd6c122376d43ac403b76b51a306fe48eb8136c36, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:de:74:00:79:04:1d:5d:94:38:0d:d6:e7:
43:82:8d:0d:b4:f3:88:94:a2:46:5a:f8:af:28:db:
91:d8:36:d2:c1:36:23:ac:29:bd:14:48:6a:cd:e9:
a1:e7:35:51:cd:10:1d:53:d4:f6:17:83:7d:30:c1:
fc:fc:50:37:60:71:05:8d:88:fd:21:32:bd:a2:30:
f0:9c:a1:7c:6c:c0:1f:8b:6a:74:71:88:4a:47:dc:
60:72:65:31:a7:1b:da:66:30:e3:af:8e:ff:5a:de:
30:31:23:b7:78:58:74:ac:93:88:61:38:bd:bb:ee:
26:53:70:ea:bd:bf:58:09:12:41:9d:bf:62:dd:2c:
de:14:1d:d1:e3:9b:7d:94:9e:58:b6:e8:96:76:e5:
db:8d:aa:9d:f7:2f:b1:08:b8:3c:d4:39:08:02:ed:
ad:d5:21:7b:7c:1a:7b:56:2a:68:d2:35:5d:e7:0e:
00:60:fc:2e:97:25:5c:f4:42:09:64:ba:07:75:9e:
a0:8a:fe:66:ab:d9:8f:d3:17:aa:cd:ed:b3:91:f0:
2b:ee:c9:f8:9a:11:db:17:44:ba:52:a2:41:65:dd:
82:eb:35:ec:59:d2:d1:8a:98:63:3a:4b:b7:98:e7:
e1:e6:36:b8:c9:5b:9c:78:a9:e2:95:a0:68:19:4a:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:EB:65:25:38:50:50:49:BB:02:76:15:7A:74:09:76:40:D5:D4
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d653ef7-d989-4ea8-8d6d-c1a30d0120a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1270::/47
Signature Algorithm: sha256WithRSAEncryption
00:fc:7a:f1:23:fb:39:f4:45:73:24:3d:13:d9:ee:85:76:0b:
cc:05:47:6b:2b:82:f3:11:ad:7c:f9:52:b9:f3:9c:d4:2c:28:
9d:4f:e0:e5:c9:97:d2:6e:02:0b:a9:11:37:de:c3:a4:60:af:
f6:7b:93:68:74:69:7e:1e:8d:9e:a9:b7:6c:1d:32:ce:45:bc:
b4:51:4a:c1:23:90:4c:a9:e9:5f:52:33:e9:9b:df:09:9e:b4:
ea:d6:78:54:6a:25:74:f5:c9:ff:5b:d0:a3:62:8a:44:7a:7b:
a4:4a:53:39:50:4d:30:6e:eb:2e:a3:16:67:32:fc:46:bb:45:
f7:ef:63:4e:3a:e1:0a:e3:37:fa:49:1b:0d:0e:da:ce:ba:1b:
6e:87:90:96:e0:18:8a:92:4f:e2:1b:b8:b3:86:67:ba:a0:a6:
1f:ae:97:aa:d3:f2:9c:f2:dd:a1:30:ac:cc:39:23:7b:fd:be:
d5:70:c9:06:b4:50:58:66:27:b5:1e:15:53:a9:1b:93:89:7f:
04:3d:49:97:04:6a:a2:d9:1f:94:27:82:aa:ae:98:17:b7:95:
47:d1:a2:8e:ed:75:e5:bf:22:f6:ba:43:0b:d7:0d:9d:62:0c:
f6:40:3f:b3:f1:b7:a2:69:68:68:47:e0:9a:af:79:f2:ef:4a:
f3:46:3d:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:23 2025 by rpki-client