
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76b8d7fd-566e-45c5-8db6-a884f18e2578.roa
File: 76b8d7fd-566e-45c5-8db6-a884f18e2578.roa (raw, json)
Hash identifier: ydWa4O4Sv8XulH5Hz7XVWMGsdS+kD62WZ8JLPQ1AfPA=
Subject key identifier: D4:D3:18:A8:C2:79:0B:9F:9F:13:83:92:FB:43:30:12:E4:21:A9:66
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 43CDF71DE0ED7AD1340C223B25039828952CA790
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76b8d7fd-566e-45c5-8db6-a884f18e2578.roa
Signing time: Fri 31 Oct 2025 05:40:29 +0000
ROA not before: Fri 31 Oct 2025 05:40:29 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a38::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cd:f7:1d:e0:ed:7a:d1:34:0c:22:3b:25:03:98:28:95:2c:a7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:40:29 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=3c962a985b28942ed82fad4f3895e10a728d05e3c7d7f8e7b44a821a65398e26, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:69:2a:79:10:5a:6d:41:91:4a:48:76:14:
fe:e4:29:bf:7b:7b:7d:ff:0a:23:f7:b2:2e:33:7f:
e0:43:8d:60:9c:7e:37:49:6d:32:6e:20:fc:b9:9b:
ed:68:5d:7c:64:17:af:fb:29:e4:58:73:29:af:7a:
5c:ea:be:71:f5:07:15:7d:09:aa:d4:33:80:9b:a2:
08:d1:bb:b0:21:73:d2:93:af:b2:16:8e:58:cb:f7:
42:11:a5:6f:e6:90:e1:24:33:62:a4:8c:d9:bb:40:
9c:d9:78:97:4f:6d:06:17:22:ef:22:52:2b:6a:4f:
5c:25:07:79:5e:bf:bc:c7:94:8f:7a:36:42:39:68:
bb:24:ed:49:2b:74:2a:81:e6:57:80:ce:28:53:50:
c4:12:04:25:d0:90:31:12:26:b4:17:e4:57:6e:af:
69:de:f8:67:ab:a3:8c:a2:65:22:ff:cd:02:e0:41:
5b:d3:ba:24:aa:76:20:5f:bd:02:20:55:f3:10:5e:
40:8b:3f:1c:0a:de:f7:c3:1c:90:0d:e1:2b:c4:6a:
e7:ec:f8:ff:70:0c:8a:76:5b:6e:01:dc:da:46:a5:
53:92:20:92:66:19:5a:29:47:20:db:0b:9b:9f:3c:
24:20:4f:7a:03:5a:46:3e:8a:ab:bc:ac:b8:ab:90:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D3:18:A8:C2:79:0B:9F:9F:13:83:92:FB:43:30:12:E4:21:A9:66
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/76b8d7fd-566e-45c5-8db6-a884f18e2578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a38::/45
Signature Algorithm: sha256WithRSAEncryption
0a:fc:a8:a9:00:35:90:17:36:84:78:a8:2d:54:d1:db:10:8f:
9f:18:96:43:d2:03:96:a2:24:28:1c:4c:31:ac:a5:ec:00:08:
ad:60:05:16:66:3a:1d:8f:5a:bf:6c:13:da:cf:12:42:52:ff:
57:ad:ad:fa:f7:81:51:3f:cd:fe:65:66:1f:94:4a:af:af:92:
90:ba:5d:0c:67:72:79:73:c6:58:be:c6:61:da:96:3e:30:a7:
63:60:3e:97:81:62:e0:b7:7e:3b:ad:70:c0:cf:cc:d6:e7:92:
39:c5:ce:85:57:4c:a7:12:49:24:3f:31:c9:19:f1:83:e1:54:
f7:fd:50:46:ec:ed:05:71:1a:56:8c:f7:67:a1:cb:05:96:88:
32:39:f3:cd:8b:db:3c:a3:64:cc:02:b3:d7:3b:e5:a0:87:e9:
85:38:48:cf:1c:5c:96:c5:f6:43:9d:e9:7e:10:4f:95:98:bd:
32:93:75:96:26:4d:f7:15:ce:a9:23:66:45:ea:cc:1b:a9:35:
27:cb:d8:18:4f:30:96:6a:f4:b0:dc:e3:c1:33:8c:27:ea:bb:
ec:67:ff:f7:da:2f:ba:bf:4f:4e:26:9f:59:06:eb:7a:54:fc:
44:91:16:02:fa:86:cc:cb:35:f6:d7:b2:ad:94:89:89:72:54:
8f:ba:dc:06
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQ833HeDtetE0DCI7JQOYKJUsp5AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU0MDI5WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzk2MmE5ODViMjg5NDJlZDgyZmFkNGYzODk1ZTEwYTcy
OGQwNWUzYzdkN2Y4ZTdiNDRhODIxYTY1Mzk4ZTI2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDt2kqeRBabUGRSkh2FP7kKb97e33/CiP3si4zf+BDjWCc
fjdJbTJuIPy5m+1oXXxkF6/7KeRYcymvelzqvnH1BxV9CarUM4CbogjRu7Ahc9KT
r7IWjljL90IRpW/mkOEkM2KkjNm7QJzZeJdPbQYXIu8iUitqT1wlB3lev7zHlI96
NkI5aLsk7UkrdCqB5leAzihTUMQSBCXQkDESJrQX5Fdur2ne+Gero4yiZSL/zQLg
QVvTuiSqdiBfvQIgVfMQXkCLPxwK3vfDHJAN4SvEaufs+P9wDIp2W24B3NpGpVOS
IJJmGVopRyDbC5ufPCQgT3oDWkY+iqu8rLirkL6JAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU1NMYqMJ5C5+fE4OS+0MwEuQhqWYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc2YjhkN2ZkLTU2NmUtNDVjNS04ZGI2LWE4ODRmMThlMjU3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAKjgwDQYJKoZIhvcNAQELBQADggEBAAr8qKkANZAXNoR4qC1U0dsQ
j58YlkPSA5aiJCgcTDGspewACK1gBRZmOh2PWr9sE9rPEkJS/1etrfr3gVE/zf5l
Zh+USq+vkpC6XQxncnlzxli+xmHalj4wp2NgPpeBYuC3fjutcMDPzNbnkjnFzoVX
TKcSSSQ/MckZ8YPhVPf9UEbs7QVxGlaM92ehywWWiDI5882L2zyjZMwCs9c75aCH
6YU4SM8cXJbF9kOd6X4QT5WYvTKTdZYmTfcVzqkjZkXqzBupNSfL2BhPMJZq9LDc
48EzjCfqu+xn//faL7q/T04mn1kG63pU/ESRFgL6hszLNfbXsq2UiYlyVI+63AY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:58 2025 by rpki-client