
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7360a55f-018c-4cd3-986d-2e40c5d0a441.roa
File: 7360a55f-018c-4cd3-986d-2e40c5d0a441.roa (raw, json)
Hash identifier: JmSUMbyjL1Kvz0V8kWx9G0Z+ZD4N/fNg0uRZsYDI0MM=
Subject key identifier: 5C:E9:4A:37:51:8F:E2:64:ED:58:1C:54:48:0A:B2:59:29:48:77:D8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6E6EEC722BFBC07585954EDE804FE362186D5D45
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7360a55f-018c-4cd3-986d-2e40c5d0a441.roa
Signing time: Fri 31 Oct 2025 06:56:31 +0000
ROA not before: Fri 31 Oct 2025 06:56:31 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3560::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6e:ec:72:2b:fb:c0:75:85:95:4e:de:80:4f:e3:62:18:6d:5d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:56:31 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=a4c2c97a5e63b0244562962949722435e7caf277a0929c847e2887d99d95faf8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:8d:fd:88:82:ec:12:d0:ef:46:dc:57:41:
df:02:f2:c8:2e:dc:92:20:8d:2a:7f:18:01:88:ad:
c7:8a:55:79:f4:7f:3a:69:76:81:85:ff:db:e8:ed:
9f:dd:3b:c0:ab:88:ef:ef:4a:28:ba:6c:48:5a:de:
fa:74:59:5b:d5:b2:7c:bb:c9:af:02:77:70:54:c4:
9e:dd:2a:31:85:14:84:c0:e8:9b:c5:6f:c3:23:27:
a8:10:20:24:90:4a:dc:b4:ef:2c:55:c7:00:c0:db:
4e:fc:13:35:0c:ae:24:6d:28:35:52:c7:5b:f0:1d:
fa:83:a1:08:e0:2c:e5:74:ca:26:fb:0e:90:ac:7a:
ae:53:6c:67:c9:e6:29:3e:79:9c:ef:f6:c4:6a:ca:
41:fd:be:d6:c6:a4:79:7a:9e:bf:2d:6b:37:1f:38:
72:47:8c:a1:a8:04:f1:f3:72:81:52:5f:73:c0:a4:
e8:38:55:b6:ba:ab:c2:7e:2e:d4:32:7f:1b:be:00:
42:72:88:6e:31:bb:6a:fc:3e:51:04:a2:44:aa:a5:
a1:87:87:34:15:51:5d:39:a3:61:b7:bf:b7:55:b2:
82:ca:68:d4:38:f1:37:4b:98:91:b9:3f:40:e5:7c:
85:61:01:28:c5:4b:78:85:ae:74:15:c0:39:39:be:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E9:4A:37:51:8F:E2:64:ED:58:1C:54:48:0A:B2:59:29:48:77:D8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7360a55f-018c-4cd3-986d-2e40c5d0a441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3560::/44
Signature Algorithm: sha256WithRSAEncryption
0e:9e:28:ed:97:c8:a0:f7:7c:67:b5:c7:96:1f:de:c0:92:98:
6f:da:39:05:22:97:51:e5:67:5b:ec:7b:36:1b:8b:d4:48:c4:
04:22:df:01:ae:16:28:e9:41:8b:ae:88:6e:df:2d:d6:c2:2f:
31:63:9e:bb:92:16:59:7a:97:07:a7:c3:93:d2:b6:9e:76:7d:
cb:c3:30:1b:be:06:f3:32:77:e9:71:8c:fb:9d:0d:c2:fc:f0:
40:01:48:5f:26:21:bf:1f:56:0c:c1:92:fa:4f:50:35:58:9b:
a2:ec:cd:88:3e:41:88:f2:7a:46:68:0f:45:da:65:64:29:33:
e8:42:7b:92:78:67:d2:7f:a9:e4:63:f3:28:8e:ec:8a:7a:b4:
8d:1f:b4:2b:5e:7d:11:3b:df:85:21:d9:56:3f:a8:b3:4e:14:
db:ba:b4:cd:ae:23:9f:7a:e5:7d:5f:8a:76:05:e0:26:78:d3:
b8:c8:b3:8b:85:0a:38:67:1e:52:45:24:ae:1e:56:64:b5:0a:
23:df:d8:86:9a:e3:d0:42:f7:1c:7e:8d:db:86:df:6d:7e:0e:
b0:4d:64:14:a8:d5:e0:ff:3a:5a:bc:5a:bf:87:51:b8:d8:af:
37:fe:62:a6:be:d1:d9:48:8c:36:99:66:b8:43:5a:e2:68:61:
ca:e7:c3:81
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbm7sciv7wHWFlU7egE/jYhhtXUUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1NjMxWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNGMyYzk3YTVlNjNiMDI0NDU2Mjk2Mjk0OTcyMjQzNWU3
Y2FmMjc3YTA5MjljODQ3ZTI4ODdkOTlkOTVmYWY4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtqI39iILsEtDvRtxXQd8C8sgu3JIgjSp/GAGIrceKVXn0
fzppdoGF/9vo7Z/dO8CriO/vSii6bEha3vp0WVvVsny7ya8Cd3BUxJ7dKjGFFITA
6JvFb8MjJ6gQICSQSty07yxVxwDA2078EzUMriRtKDVSx1vwHfqDoQjgLOV0yib7
DpCseq5TbGfJ5ik+eZzv9sRqykH9vtbGpHl6nr8tazcfOHJHjKGoBPHzcoFSX3PA
pOg4Vba6q8J+LtQyfxu+AEJyiG4xu2r8PlEEokSqpaGHhzQVUV05o2G3v7dVsoLK
aNQ48TdLmJG5P0DlfIVhASjFS3iFrnQVwDk5viifAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUXOlKN1GP4mTtWBxUSAqyWSlId9gwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzczNjBhNTVmLTAxOGMtNGNkMy05ODZkLTJlNDBjNWQwYTQ0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAANWAwDQYJKoZIhvcNAQELBQADggEBAA6eKO2XyKD3fGe1x5Yf3sCS
mG/aOQUil1HlZ1vsezYbi9RIxAQi3wGuFijpQYuuiG7fLdbCLzFjnruSFll6lwen
w5PStp52fcvDMBu+BvMyd+lxjPudDcL88EABSF8mIb8fVgzBkvpPUDVYm6LszYg+
QYjyekZoD0XaZWQpM+hCe5J4Z9J/qeRj8yiO7Ip6tI0ftCtefRE734Uh2VY/qLNO
FNu6tM2uI5965X1finYF4CZ407jIs4uFCjhnHlJFJK4eVmS1CiPf2Iaa49BC9xx+
jduG321+DrBNZBSo1eD/Olq8Wr+HUbjYrzf+Yqa+0dlIjDaZZrhDWuJoYcrnw4E=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:24 2025 by rpki-client