
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70d79f44-5af2-482e-b7e4-fc0a744624b2.roa
File: 70d79f44-5af2-482e-b7e4-fc0a744624b2.roa (raw, json)
Hash identifier: k00F/ighbrtr+KpckiKTlVAAq3i2msYt5C/KbgrPa+c=
Subject key identifier: 89:97:47:06:B8:32:5A:7B:83:BA:9F:82:6D:6F:BC:B3:D4:0A:C7:AF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6C8A3C3D320A72A3A87DD84C412C9940851ED889
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70d79f44-5af2-482e-b7e4-fc0a744624b2.roa
Signing time: Fri 31 Oct 2025 05:37:07 +0000
ROA not before: Fri 31 Oct 2025 05:37:07 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2130::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8a:3c:3d:32:0a:72:a3:a8:7d:d8:4c:41:2c:99:40:85:1e:d8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:37:07 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=057268364089a5c845457525984d1aab99b5e64ac394e8c263dc71ebbdc1257b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:c8:be:1b:39:1d:76:b3:10:75:94:e0:72:
87:2b:c8:f4:a3:27:de:2b:88:19:b7:45:46:b4:02:
b2:c1:e1:ac:66:e8:ef:64:9d:41:d7:d7:08:6a:6a:
be:81:e3:51:ca:92:85:63:79:4b:0e:9b:50:3e:39:
91:5e:54:9d:55:fe:38:e3:da:33:01:ce:ea:81:2c:
6c:35:a8:45:ba:72:b3:30:cd:56:a7:d5:c8:1b:81:
f3:ce:55:a6:46:bf:33:42:e8:33:e7:e7:6e:e7:db:
61:da:05:f3:e8:1c:99:5b:20:a3:a5:e5:81:c3:9d:
60:a7:7c:2b:91:77:e1:43:7b:e7:c4:11:c4:cd:2c:
1b:a2:f9:94:2f:94:b8:99:37:a2:63:b3:68:99:6c:
48:cf:73:cf:b6:9b:ae:1c:ff:40:1f:b3:fe:4b:3a:
99:df:73:7f:74:9d:7e:5c:e4:c4:45:3d:20:cd:11:
75:e7:15:00:28:56:c5:64:87:d0:5d:00:20:09:a8:
08:f8:8d:ba:2d:b6:f6:47:c5:1a:59:7f:54:0d:8a:
45:68:d9:b1:44:dd:06:3f:68:73:80:c5:51:c5:67:
f1:c6:dc:0a:e8:9f:ac:fe:6e:75:a4:e3:1d:39:cf:
43:ba:35:08:5f:3a:81:16:b9:e9:6d:24:21:70:48:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:97:47:06:B8:32:5A:7B:83:BA:9F:82:6D:6F:BC:B3:D4:0A:C7:AF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70d79f44-5af2-482e-b7e4-fc0a744624b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2130::/45
Signature Algorithm: sha256WithRSAEncryption
ae:68:32:c0:cb:cc:7c:99:3a:65:01:b1:f5:8c:e8:91:78:a9:
8f:23:6d:83:b4:f0:e8:73:f7:ef:04:18:4c:f8:49:1e:5e:76:
17:fd:e5:41:ce:1a:90:f8:ca:50:a0:7c:21:7f:5a:3c:c9:25:
7b:14:65:9f:b6:e6:ae:8b:fe:cb:f2:fc:b2:34:ce:dd:e1:d0:
93:5f:98:09:14:0d:66:12:53:22:db:7f:20:1f:90:04:23:da:
5a:85:3a:b2:0d:d2:4d:7b:4b:6e:33:d9:0a:91:41:f3:be:da:
de:a0:e9:29:19:42:22:88:4a:ad:48:7a:be:f8:f2:11:a9:29:
5d:c3:96:c5:e7:47:c3:29:19:cf:4e:fe:7a:26:e3:01:88:be:
21:e9:fe:89:38:76:cf:f0:42:fe:b7:e9:37:22:b4:c5:9e:22:
70:60:8b:73:ed:85:52:ae:5e:e3:dc:db:1e:05:21:7c:76:d6:
54:33:fc:de:94:a0:37:2d:01:00:5e:bf:1d:8e:e4:d0:f2:65:
60:ff:a0:f4:64:a1:6c:23:12:0c:0e:01:59:72:41:d9:94:e3:
b2:83:3c:4d:79:25:c2:a3:a2:0b:3a:73:36:c9:53:e0:8a:df:
7e:4a:0e:85:75:8f:fb:14:dd:2e:a6:88:6d:ee:10:97:2d:1b:
12:d7:5b:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:59:54 2025 by rpki-client