
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77407011-ba45-4b05-bd41-52fe5f1efa9c.roa
File: 77407011-ba45-4b05-bd41-52fe5f1efa9c.roa (raw, json)
Hash identifier: 2DbXhnaTz1InbuVMPn5XvBrWkMLxHOk2TtPu99GWA2w=
Subject key identifier: CF:1B:26:AC:BD:E0:8A:22:0F:E4:E2:BC:95:FB:AC:9E:89:B0:3D:31
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7BEE346CC9E09485B9472A5F09D4D7E4B737E1AE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77407011-ba45-4b05-bd41-52fe5f1efa9c.roa
Signing time: Fri 31 Oct 2025 03:41:56 +0000
ROA not before: Fri 31 Oct 2025 03:41:56 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2d50::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ee:34:6c:c9:e0:94:85:b9:47:2a:5f:09:d4:d7:e4:b7:37:e1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:41:56 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=d3a7a0e7fa4bbce3754d184a41daf900d4d3bfb0c8420029703307f620d64e0d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:92:2b:cd:e1:95:57:c1:33:32:58:ac:16:
06:2d:83:46:f2:a3:09:69:03:02:58:09:92:5f:5e:
44:b3:b1:38:7c:cf:7a:26:76:95:6a:1c:a0:a8:50:
d9:3b:32:d9:1f:df:b7:d3:0c:e4:a3:c5:cf:eb:91:
c5:3c:b5:dc:d1:f7:08:8c:b6:10:a6:65:7a:9f:7a:
37:f5:6e:dd:e6:52:f9:80:e9:4a:41:3a:10:9f:96:
93:0c:d8:38:94:74:c5:4d:8e:00:80:59:62:20:fb:
20:3f:af:c4:e1:a1:8e:3f:32:ea:7a:e2:7b:2f:07:
d3:48:97:cb:eb:4c:25:dc:fe:19:f4:4c:03:9e:56:
77:ad:27:0e:a1:6c:16:1e:f6:77:98:19:69:8d:7a:
b9:3f:c4:81:82:6f:a5:c3:03:e2:fc:77:07:ed:96:
91:c1:7d:ef:53:9e:2b:a8:c4:f4:14:43:00:16:71:
2c:23:3c:bd:10:b1:a0:08:68:2f:71:e1:b3:86:18:
99:c4:bc:8f:3d:27:ad:d6:82:38:11:99:5b:6c:58:
88:a9:d8:8c:36:a5:aa:dd:28:cc:12:e5:57:f4:b1:
a9:62:7c:e4:c6:0f:3f:20:73:da:85:62:2b:48:e2:
f9:71:d7:8b:0a:a8:ed:6d:f3:e2:8a:97:f6:7d:fb:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:26:AC:BD:E0:8A:22:0F:E4:E2:BC:95:FB:AC:9E:89:B0:3D:31
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77407011-ba45-4b05-bd41-52fe5f1efa9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2d50::/46
Signature Algorithm: sha256WithRSAEncryption
6d:2a:32:f1:49:9b:8a:7f:8a:93:74:c0:c8:ad:15:e1:46:6f:
b8:3a:9a:e1:61:80:fa:ba:43:11:40:5d:7f:5c:c1:eb:65:76:
c7:75:75:8d:5b:00:64:ea:ea:82:4d:d7:c4:86:ae:40:14:9e:
2d:93:4e:f5:a7:38:fd:d7:f6:7b:12:b8:53:2f:2d:eb:9c:fd:
93:34:91:3f:39:9e:b7:d8:81:2f:47:5a:1b:43:1a:ac:c5:be:
00:50:bb:a7:b5:b6:f1:af:be:91:bb:8d:fe:75:b0:66:7c:09:
70:12:07:6a:86:2d:2c:ce:92:c2:76:89:47:df:65:50:8c:e3:
05:98:01:1b:df:6f:fb:71:e2:6d:4e:51:e3:e2:e4:df:4d:31:
eb:28:f3:31:d0:02:e8:0b:9d:ac:ca:cf:3a:b7:61:64:8e:bd:
ee:97:1c:6e:6e:7f:f5:4d:3f:9c:8c:60:e4:5c:b0:44:03:40:
3c:a8:be:02:6e:70:69:af:7a:43:04:9c:1c:51:2d:92:5d:63:
60:66:9d:c1:e0:85:68:dd:23:26:77:c6:b3:9f:dd:d8:85:10:
1a:4e:6f:0a:a6:1c:81:91:87:5a:02:e5:d0:c3:6c:ad:a6:65:
d2:91:bd:09:0c:f2:10:28:f1:16:f4:ff:31:e8:59:f7:50:28:
97:61:42:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:33 2025 by rpki-client