
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/745f5ecf-a548-46a0-9680-d9c9d0375e6d.roa
File: 745f5ecf-a548-46a0-9680-d9c9d0375e6d.roa (raw, json)
Hash identifier: tRW4GvhvFINfWkzUM1QkdOnVSlUw+7oAmqVatTPbZ7U=
Subject key identifier: EF:C4:49:6C:8F:14:AC:58:59:47:D9:A7:DD:0D:41:F3:AA:27:95:13
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 565224D809E716EE5017CE37B7BFB51CC901F53F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/745f5ecf-a548-46a0-9680-d9c9d0375e6d.roa
Signing time: Fri 31 Oct 2025 07:11:32 +0000
ROA not before: Fri 31 Oct 2025 07:11:32 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1740::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:52:24:d8:09:e7:16:ee:50:17:ce:37:b7:bf:b5:1c:c9:01:f5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:11:32 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=d149e8db58bb05eb0af57ddbd97d1854cce8ba8f8098c2ee11ed07f5d54b8869, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:98:41:08:7b:16:32:23:8f:72:af:2a:f2:
5b:8a:73:ec:f5:45:ce:68:4d:88:96:be:7a:a6:94:
6c:4a:de:c0:94:42:1d:06:2b:4b:c2:a8:83:b8:12:
9f:fe:51:26:71:a1:f7:da:64:9d:c4:8d:ec:a8:cd:
09:e6:ca:45:9e:7d:a8:bf:b4:90:dc:03:49:08:93:
d9:20:d0:be:a4:15:9e:8d:ac:a3:57:d4:30:35:63:
37:26:a6:a2:d4:22:45:48:16:ea:ba:32:97:2c:be:
24:dc:35:bf:ee:20:8a:29:28:c0:4e:cb:39:75:44:
6b:00:97:06:6b:2b:c2:74:d0:3b:5d:79:7a:12:26:
a6:72:8d:a9:a3:08:34:3c:2e:a0:a9:3f:9e:cb:2f:
cf:15:c6:6f:bc:fa:13:4d:54:a1:08:c0:92:1d:0e:
a1:75:95:cd:46:47:b4:02:e5:d5:6d:48:0a:ff:39:
82:a5:e7:93:aa:9e:53:f1:75:42:23:6c:10:92:61:
2f:9c:33:9e:24:2d:db:51:31:86:bc:c0:65:9c:ee:
49:3b:5d:a8:04:41:ac:4f:b4:3a:e9:2b:9f:bd:88:
b8:20:31:2a:18:db:72:cc:25:41:d4:c7:fe:13:44:
06:2c:de:a2:1c:f5:9b:a2:92:3d:bf:d4:6e:93:6c:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:49:6C:8F:14:AC:58:59:47:D9:A7:DD:0D:41:F3:AA:27:95:13
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/745f5ecf-a548-46a0-9680-d9c9d0375e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1740::/43
Signature Algorithm: sha256WithRSAEncryption
01:51:04:5b:64:e9:ee:74:54:22:12:93:86:85:c3:67:eb:9d:
4f:af:a9:39:ed:47:6e:be:ca:6a:ce:02:ce:70:49:a1:0e:89:
23:81:0e:32:f7:41:0d:58:50:64:f9:bd:ca:ff:7b:14:d5:3e:
9e:b6:67:4b:44:cd:4c:9e:2d:1f:00:c9:a4:da:28:66:7e:f6:
d6:ed:b5:73:69:2e:78:d8:f5:1f:9b:7c:b3:6d:b3:35:4a:8e:
ba:a6:cd:50:74:70:bf:13:f1:a9:f7:20:e7:5c:73:ab:4c:8e:
3b:97:3f:34:86:7b:0e:f7:15:bb:98:f0:eb:bd:99:13:04:d4:
db:4f:a5:5b:78:5a:56:da:d4:31:85:b2:2e:70:64:93:45:47:
af:f9:85:d7:b6:10:d9:50:17:ce:d3:9e:5f:7d:38:a4:70:a7:
25:c2:51:65:d5:70:7d:bc:f0:e2:60:12:43:04:21:06:04:76:
e1:bb:e5:31:66:ca:90:9a:3f:66:b5:58:30:7b:d5:57:89:01:
86:62:c6:c5:73:28:85:07:67:0c:f7:02:a9:dd:5f:e2:20:b5:
d0:36:81:ff:11:cc:c3:fe:a9:49:06:f9:8b:46:7f:fd:aa:60:
83:ab:8f:38:66:8e:56:ea:1a:8e:66:30:1d:00:ca:36:20:2e:
31:c0:80:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:27 2025 by rpki-client