
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72b43ee7-8585-4415-97e6-c71a26807d24.roa
File: 72b43ee7-8585-4415-97e6-c71a26807d24.roa (raw, json)
Hash identifier: cqdZd1Dq3WyBRhnKsdyfzzrGXVXuc/ZERuRnICebe+k=
Subject key identifier: 5D:2F:5E:C4:EF:FB:D4:C8:B3:28:0B:FD:F1:A3:CF:A4:A4:80:4E:19
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 67345D4557AE64D95B1207444078496ABD4BBF12
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72b43ee7-8585-4415-97e6-c71a26807d24.roa
Signing time: Fri 31 Oct 2025 05:23:47 +0000
ROA not before: Fri 31 Oct 2025 05:23:47 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1a38::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:34:5d:45:57:ae:64:d9:5b:12:07:44:40:78:49:6a:bd:4b:bf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:23:47 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=6aef7187694961ae4b0e470f7fdd093c95fb4805a60b9a3034d472b5d40ec24b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:88:be:d3:cd:7b:9d:87:a9:39:16:49:06:2e:
aa:e9:83:ee:74:f7:f1:5f:5a:bf:e2:ef:9b:a9:fe:
df:ad:94:5d:94:83:01:26:02:6f:81:8d:2a:3b:c4:
44:b3:7c:17:81:41:de:05:d6:f5:7d:26:8d:6d:a9:
10:83:2e:9e:4e:68:29:65:54:12:cc:4f:a6:f2:04:
65:e0:b1:8f:04:23:28:55:41:1e:54:3f:36:8d:c5:
3c:a1:39:e7:5c:29:9e:57:c1:f5:e5:c0:6e:bb:4b:
0e:4e:bb:72:86:ad:50:f9:85:c5:74:88:fe:90:41:
5e:ca:df:4b:c4:4f:8c:11:4c:43:2b:0e:47:5c:8e:
b1:c2:b5:6d:da:12:d8:b6:2a:1a:5a:e6:6c:81:f9:
ba:0e:81:3b:c4:8e:a7:98:4f:e0:09:d7:e9:ac:4a:
90:1d:b3:05:fe:6a:19:44:b2:97:e8:35:58:30:6c:
7c:61:24:ab:1c:da:10:d8:e0:56:86:b7:5c:9f:ba:
9e:b3:20:e4:6e:e6:75:a2:e4:09:38:8d:b9:6b:6c:
f6:31:3c:62:10:c1:bd:af:c3:1a:34:f1:57:67:aa:
fa:a2:72:5f:93:c8:65:cc:56:1b:99:fb:64:b1:3b:
a3:ba:bd:44:70:8a:cd:93:f7:91:eb:93:54:7e:b5:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:5E:C4:EF:FB:D4:C8:B3:28:0B:FD:F1:A3:CF:A4:A4:80:4E:19
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72b43ee7-8585-4415-97e6-c71a26807d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1a38::/45
Signature Algorithm: sha256WithRSAEncryption
56:24:28:b1:aa:39:b0:0d:f1:3f:e5:cd:b0:33:e6:f8:f3:a0:
b1:42:c2:96:53:0e:d3:c7:7c:5b:ee:fb:1d:12:75:0f:d1:d4:
5c:dd:fb:de:61:98:1a:a8:5c:0b:9c:93:fe:7d:14:3a:8c:e3:
43:39:8f:b4:f3:24:de:46:0f:1c:9f:60:77:22:a0:b2:b4:5a:
fc:ce:62:1c:48:61:61:1f:ec:4a:55:b7:57:78:12:16:67:af:
7f:7d:9e:96:cc:c0:88:be:f5:5e:c0:48:b0:0a:9f:fa:86:c9:
1b:49:39:8e:76:f9:90:c1:7c:f2:91:6e:70:f5:06:e3:73:d4:
c3:87:cd:3a:a3:cd:d1:ec:a8:51:74:06:47:2b:a9:5e:de:d9:
0f:94:ac:f9:43:72:08:cf:e2:7f:84:d9:8d:9a:c6:86:62:71:
bf:c1:ae:65:83:5c:43:0c:8d:12:70:10:26:ce:e6:e1:79:31:
e9:a0:6d:63:ba:a1:81:63:50:b5:0c:b4:3b:16:02:16:8e:d6:
f3:6b:df:0a:6f:27:e3:36:f6:ff:f6:7b:ec:4d:a0:1c:c8:4f:
b2:b2:46:74:cd:6f:91:cf:68:5d:de:a1:c1:cf:e5:8b:7e:c6:
7f:01:82:14:8d:62:3f:a3:b6:1f:6b:46:38:34:3a:ad:c2:91:
2e:66:09:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:10 2025 by rpki-client