
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e5f0748-05eb-469e-abff-2a46a4dd9cf8.roa
File: 6e5f0748-05eb-469e-abff-2a46a4dd9cf8.roa (raw, json)
Hash identifier: xVJj9n+F3U3e1QIDETbBszwuUcpAS/sZIlNoSE0rBm0=
Subject key identifier: 65:39:11:C7:01:55:3A:80:62:CE:B2:57:46:98:63:98:CF:1D:7A:D9
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 40ACDBF16BA08B1A74A14FF3D253CC3E70A8D850
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e5f0748-05eb-469e-abff-2a46a4dd9cf8.roa
Signing time: Fri 31 Oct 2025 04:41:16 +0000
ROA not before: Fri 31 Oct 2025 04:41:16 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3bcc::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ac:db:f1:6b:a0:8b:1a:74:a1:4f:f3:d2:53:cc:3e:70:a8:d8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:41:16 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=abb90b8147df6d84e6e2c5cb5791245b8aa815ec920e337768af25b8e93e86af, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:a7:39:4a:43:5c:02:00:15:02:20:1c:52:
d3:0e:19:33:b7:cb:78:3b:90:d2:eb:6d:d3:dc:0d:
04:c4:7b:3b:57:7a:fb:1e:62:45:bc:1c:15:f7:32:
1d:b4:8c:79:1c:1a:68:a0:e0:2f:30:12:a2:f8:be:
3f:22:77:a7:2d:42:5f:12:90:bf:dd:e9:c4:0a:65:
dd:4d:d1:b1:19:e8:ea:91:0c:ce:81:5a:ab:4b:af:
5b:08:ee:14:a8:1b:a2:6f:9c:6c:b8:f9:f5:b7:25:
19:0f:e3:9a:04:5d:f9:4e:5c:3d:2f:06:dd:58:c3:
77:55:29:2d:35:78:31:20:4a:f1:7a:4a:fe:ec:59:
8a:b2:c5:28:3c:60:43:0e:c8:8d:31:cf:bf:b1:d4:
17:ca:4d:8d:f3:f7:33:bf:be:99:eb:a9:58:21:8e:
27:13:a5:c2:c9:d9:c6:78:50:d8:79:4b:9b:c0:b1:
ee:46:d6:94:a7:03:d5:34:59:d0:82:42:86:56:f8:
3b:b9:75:c1:69:0d:af:b8:c5:9f:75:e4:9b:c3:65:
2d:3e:4c:f0:f0:7a:3a:ff:fc:cf:bd:7e:04:5e:2f:
80:e6:18:11:d7:a1:35:f3:64:7c:d7:9d:3c:9e:65:
a0:46:54:be:9a:81:82:12:19:d1:8a:7d:e0:43:73:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:11:C7:01:55:3A:80:62:CE:B2:57:46:98:63:98:CF:1D:7A:D9
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e5f0748-05eb-469e-abff-2a46a4dd9cf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3bcc::/46
Signature Algorithm: sha256WithRSAEncryption
38:be:d5:d8:e0:b3:8c:59:44:7c:22:52:58:35:ce:54:21:17:
04:79:1a:12:49:19:6c:c7:9a:00:64:07:49:f7:7e:1b:9b:cd:
85:1b:22:6d:4b:f2:22:40:b3:87:ab:8d:94:5d:bc:15:bf:43:
e2:39:37:57:fe:37:2a:43:50:80:12:f3:6a:eb:93:cf:aa:bc:
40:df:5c:9e:26:e9:43:3b:2d:03:20:23:52:7c:66:39:f3:aa:
4d:51:d1:4f:67:7d:c5:e3:da:73:17:1f:55:50:bd:14:39:4f:
6d:01:fd:10:50:65:f0:c3:96:61:4f:c7:69:7c:d8:60:bd:2c:
35:f7:da:5c:f5:e5:c7:c0:2d:a9:96:59:dd:46:3c:fb:60:fa:
ff:16:23:1b:23:74:34:25:51:fa:cf:bf:b5:82:3a:98:c3:8d:
a7:e6:8a:58:00:6f:11:1b:ad:c6:7b:8e:70:db:17:dc:47:7a:
b4:37:2a:c8:98:35:22:e6:5f:38:2a:64:1f:aa:9c:51:17:31:
4f:df:95:93:8b:cd:d9:39:19:61:75:f7:3a:7c:5c:87:85:86:
f1:e2:5a:77:7d:bc:6d:a0:56:12:64:84:28:4e:96:95:a2:d5:
78:de:fa:76:c6:a2:a1:ac:a4:6e:ee:ea:28:14:6c:c5:46:44:
2a:48:5a:62
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQKzb8Wugixp0oU/z0lPMPnCo2FAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ0MTE2WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYmI5MGI4MTQ3ZGY2ZDg0ZTZlMmM1Y2I1NzkxMjQ1Yjhh
YTgxNWVjOTIwZTMzNzc2OGFmMjViOGU5M2U4NmFmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrvqc5SkNcAgAVAiAcUtMOGTO3y3g7kNLrbdPcDQTEeztX
evseYkW8HBX3Mh20jHkcGmig4C8wEqL4vj8id6ctQl8SkL/d6cQKZd1N0bEZ6OqR
DM6BWqtLr1sI7hSoG6JvnGy4+fW3JRkP45oEXflOXD0vBt1Yw3dVKS01eDEgSvF6
Sv7sWYqyxSg8YEMOyI0xz7+x1BfKTY3z9zO/vpnrqVghjicTpcLJ2cZ4UNh5S5vA
se5G1pSnA9U0WdCCQoZW+Du5dcFpDa+4xZ915JvDZS0+TPDwejr//M+9fgReL4Dm
GBHXoTXzZHzXnTyeZaBGVL6agYISGdGKfeBDcy2HAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZTkRxwFVOoBizrJXRphjmM8detkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzZlNWYwNzQ4LTA1ZWItNDY5ZS1hYmZmLTJhNDZhNGRkOWNmOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAO8wwDQYJKoZIhvcNAQELBQADggEBADi+1djgs4xZRHwiUlg1zlQh
FwR5GhJJGWzHmgBkB0n3fhubzYUbIm1L8iJAs4erjZRdvBW/Q+I5N1f+NypDUIAS
82rrk8+qvEDfXJ4m6UM7LQMgI1J8Zjnzqk1R0U9nfcXj2nMXH1VQvRQ5T20B/RBQ
ZfDDlmFPx2l82GC9LDX32lz15cfALamWWd1GPPtg+v8WIxsjdDQlUfrPv7WCOpjD
jafmilgAbxEbrcZ7jnDbF9xHerQ3KsiYNSLmXzgqZB+qnFEXMU/flZOLzdk5GWF1
9zp8XIeFhvHiWnd9vG2gVhJkhChOlpWi1Xje+nbGoqGspG7u6igUbMVGRCpIWmI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:10 2025 by rpki-client