
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/769a94c8-6e59-49fa-8aff-49e4406b7578.roa
File: 769a94c8-6e59-49fa-8aff-49e4406b7578.roa (raw, json)
Hash identifier: U8yPM7HKmzotoEgQ57r7EIeR+4jbdR1+t1jxEOxUQUo=
Subject key identifier: DC:0B:20:D3:D7:7E:05:EB:9B:6B:80:9D:E6:BC:47:D2:49:10:E8:6F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7E7D3254B8000CDDD8C1C784FD199ABF1DE52D80
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/769a94c8-6e59-49fa-8aff-49e4406b7578.roa
Signing time: Fri 31 Oct 2025 03:24:56 +0000
ROA not before: Fri 31 Oct 2025 03:24:56 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:291c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7d:32:54:b8:00:0c:dd:d8:c1:c7:84:fd:19:9a:bf:1d:e5:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:24:56 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ae72e572def9c7fde0f044ffa6a0f631c20b6f638627a93265db97d1a51f29ee, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:02:61:2c:be:12:40:06:9b:2d:04:6f:9f:
35:1b:43:42:54:0e:8c:15:8d:67:a8:2c:26:36:ff:
4f:91:12:77:4a:e1:d7:70:d5:30:04:6e:55:c3:53:
79:ab:7d:0d:88:52:5e:f7:5a:03:83:73:d5:06:93:
c2:cf:c8:9c:9b:b1:f3:ca:5a:f5:e3:7e:59:a1:d1:
e5:20:a8:e4:f5:25:3e:bb:5a:36:dd:b1:78:bb:9f:
64:49:3d:e8:e8:b1:7c:78:9a:01:02:84:71:d4:7d:
25:55:8d:b2:16:47:45:1f:55:79:cc:5e:da:14:c6:
f8:43:1d:a4:7d:17:7b:3c:19:a4:39:65:42:c7:7c:
6e:da:61:ae:97:66:ec:71:d6:56:73:e0:d3:41:91:
76:c1:ea:bf:1f:e5:c1:69:57:ca:d8:23:5d:d4:a9:
4f:15:78:ef:ed:f6:cb:c1:a6:60:22:ab:1b:eb:9d:
e9:0d:a2:1f:47:f8:01:0c:ba:e2:ff:be:60:76:0f:
f8:0e:ae:b0:54:1f:e2:40:2b:98:98:71:38:09:a7:
74:c1:37:51:72:89:71:ec:d0:04:89:a5:00:6d:a5:
97:b9:01:70:bc:35:18:0d:5b:ee:0c:46:a0:49:14:
a3:97:2c:8a:23:36:c3:2c:69:43:e5:58:6c:35:62:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0B:20:D3:D7:7E:05:EB:9B:6B:80:9D:E6:BC:47:D2:49:10:E8:6F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/769a94c8-6e59-49fa-8aff-49e4406b7578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:291c::/46
Signature Algorithm: sha256WithRSAEncryption
0f:91:6c:cb:a2:bb:db:20:c3:35:ed:ea:dc:1b:c9:a3:a9:d2:
55:88:6a:3f:08:a7:ba:f2:f5:1d:31:ad:c4:e4:52:22:d5:97:
f3:2f:57:5e:24:62:9a:92:10:ea:8f:21:32:b2:18:74:f2:a6:
28:57:3a:77:ab:a6:b6:bc:e0:7f:5e:4e:0d:84:cb:ea:d5:26:
e3:2b:b9:43:42:45:9e:2a:a4:4a:26:0a:9b:d4:73:89:32:72:
b5:4f:a2:00:79:f5:b3:75:fd:bb:c8:bf:b8:b5:98:1a:45:f0:
4e:2f:9e:ec:f3:f7:82:c9:13:81:c9:1a:f9:e8:34:de:ff:40:
55:8a:93:a7:91:9c:9a:7b:7c:ee:43:e9:31:37:72:c3:96:cd:
03:1d:68:0a:13:ec:51:92:1b:eb:06:e0:ca:80:e4:27:05:3b:
96:a7:5d:7e:ce:2e:ee:21:fd:39:c4:4a:b3:18:e0:20:ff:e4:
c1:1a:04:c3:41:d8:f2:8c:1f:8c:67:f7:c7:0a:2c:b2:b3:36:
8c:59:a5:48:c3:9a:a5:e7:5a:58:59:29:e2:20:ab:f2:cd:7c:
f5:93:ee:4e:dc:57:6d:12:65:3e:a7:34:80:56:33:50:ba:4b:
58:59:cf:c8:86:e1:e6:10:ad:42:43:71:7d:d0:51:e4:36:a8:
4c:22:d3:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:09 2025 by rpki-client