
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/735a5093-9785-40df-bd4d-155fa1a46681.roa
File: 735a5093-9785-40df-bd4d-155fa1a46681.roa (raw, json)
Hash identifier: joX1BgL01PIw4ny32fFUOnH828jknJXWgpo0eObtUSg=
Subject key identifier: 31:F0:8B:00:2E:1F:EA:BB:55:9E:43:57:6E:8D:5A:B0:68:19:03:C5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2913539A8BAF959F05E5D2E4397A2877D9BD1EA0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/735a5093-9785-40df-bd4d-155fa1a46681.roa
Signing time: Thu 30 Oct 2025 23:53:42 +0000
ROA not before: Thu 30 Oct 2025 23:53:42 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2fc4::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:13:53:9a:8b:af:95:9f:05:e5:d2:e4:39:7a:28:77:d9:bd:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 23:53:42 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=6507f98f8e3f981b6554c28be9e05754e0149c085c5f620bef555ff784e99455, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:32:97:c7:a2:83:34:1e:4f:e5:d3:e1:17:
6e:e2:61:9b:67:79:8a:b6:26:6b:22:ed:c9:7d:2b:
79:ef:ea:2e:ca:09:9f:9c:e0:dd:fe:ca:c3:6a:f9:
49:ed:d2:e2:1c:3f:38:be:a6:1b:56:19:fa:5d:9d:
f4:1f:7b:0f:4d:3e:5b:8e:90:bc:4c:c2:37:bc:e7:
03:cd:aa:9f:12:1c:9c:dc:ec:15:87:ba:48:51:a8:
b5:9a:47:33:60:ee:8d:03:bc:be:c7:78:ba:07:69:
0e:58:c2:7c:2f:e2:d5:1c:0d:d7:82:b7:16:7b:6b:
51:27:60:6b:58:f0:e6:1c:97:59:ed:23:d1:72:14:
8c:68:16:bb:f7:5d:e6:87:5e:ac:75:21:94:74:c5:
55:38:56:20:1a:e1:2c:88:f2:4e:a2:3a:1c:75:7c:
80:17:11:84:6a:6c:1c:02:57:78:a8:dc:7e:eb:0a:
e3:f7:e9:7d:3b:57:0a:ee:57:5a:64:54:df:d8:c0:
97:e7:e3:85:45:42:3f:81:b0:78:f7:71:1c:17:39:
3f:61:4d:2d:63:ec:e8:6d:36:7a:4a:bc:e7:70:dd:
e3:2e:30:56:9f:8e:0e:7f:62:f2:1c:5d:16:1e:96:
c1:7f:28:10:ef:91:c7:8b:30:81:e0:49:35:f1:d3:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F0:8B:00:2E:1F:EA:BB:55:9E:43:57:6E:8D:5A:B0:68:19:03:C5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/735a5093-9785-40df-bd4d-155fa1a46681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2fc4::/47
Signature Algorithm: sha256WithRSAEncryption
24:6f:b9:27:6c:63:3a:85:77:d0:da:1c:c0:03:89:2e:d7:59:
fd:bf:2f:c9:e9:c3:2e:2a:31:8e:d0:56:d4:9d:a7:73:da:8f:
47:ea:cd:bd:a3:93:b0:13:93:ab:60:99:92:2f:ca:13:17:2e:
60:4d:9b:87:a4:16:4a:51:a1:99:d1:9e:78:cf:96:65:f9:5c:
0f:70:9e:2f:1c:f0:3d:bc:9c:20:58:2c:13:e5:de:d6:7c:79:
ae:a1:1e:ff:fe:8b:7c:1c:f9:2a:d9:9d:22:5c:f8:29:70:b7:
65:ed:25:7c:f1:3d:8c:ce:91:bd:00:61:8d:84:f9:c7:8d:aa:
93:e3:71:3c:31:82:44:58:9a:fe:87:ae:34:83:98:15:66:d7:
44:96:56:7b:b5:23:75:b8:bc:2d:54:5e:21:c3:a9:75:ee:78:
ef:af:78:ef:10:4a:5b:9b:b6:b9:6a:dd:97:27:8b:22:d3:3c:
fb:d5:0a:6f:f6:48:fa:b1:f4:94:07:51:7a:4d:b7:26:10:8d:
a8:b9:d9:d3:f1:8c:d7:96:88:85:26:c4:29:c3:bf:41:ff:44:
c6:da:3e:0a:00:0b:46:94:91:63:e0:d6:a0:f3:0a:ac:12:ee:
f8:cb:c1:a4:82:10:3a:8d:1a:cf:f0:cb:47:f0:16:5c:4d:86:
c8:00:34:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:49 2025 by rpki-client