
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77ddb9ab-8897-42c1-bb5d-4ff901c3f275.roa
File: 77ddb9ab-8897-42c1-bb5d-4ff901c3f275.roa (raw, json)
Hash identifier: lnX0yCfw0nbRZ9rYOrbYhaPcYFnla+FJB3sPYG2A7u0=
Subject key identifier: C4:33:97:B0:B3:7A:B5:07:7C:6A:25:C7:20:74:68:41:06:1E:02:79
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 35D8114D64A60CB12ABD147E2E618113FEFD4748
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77ddb9ab-8897-42c1-bb5d-4ff901c3f275.roa
Signing time: Thu 30 Oct 2025 23:10:21 +0000
ROA not before: Thu 30 Oct 2025 23:10:21 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b72::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d8:11:4d:64:a6:0c:b1:2a:bd:14:7e:2e:61:81:13:fe:fd:47:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 23:10:21 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=23e8d3944f3a8f2380a5e3e24271fd40fba7457c64d337e01dd0b4aba6297fbc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:9c:1a:9a:a0:37:29:cb:59:18:13:51:07:
e5:bd:68:4c:03:c9:a8:94:19:09:39:bd:90:90:d2:
fc:d6:75:74:a4:ea:f3:e4:d6:c1:65:64:eb:0e:5c:
1e:85:ea:cf:15:44:4a:df:0d:8e:9d:57:bc:e2:d8:
36:89:57:61:dc:87:58:23:09:49:88:e0:15:6a:8a:
3b:af:8e:57:03:73:e8:0e:79:59:78:11:18:3f:a2:
a3:61:8f:5f:09:41:a1:d9:22:25:09:05:2c:9b:1b:
6b:11:ee:24:c6:0d:b0:8a:84:bc:4e:5b:d2:71:3b:
3b:9a:c2:98:8f:3e:40:fe:90:07:ac:06:5f:20:45:
9b:38:35:5b:49:94:98:9a:8f:86:b8:ca:fc:fb:13:
ea:7b:c2:40:eb:b7:58:e9:9d:d6:84:7b:1c:57:ff:
c2:7b:b2:20:0e:4f:05:9e:e1:1c:70:65:6c:7f:16:
8e:26:a9:dd:3e:8c:22:24:72:57:55:f4:b7:1b:74:
6a:f3:91:c6:0b:0f:07:6b:1c:48:88:48:1b:ed:df:
2f:34:08:74:f6:fc:0c:f4:60:6c:a0:8c:5e:93:ca:
57:be:08:9c:47:ce:f1:03:a0:7d:31:85:dd:e7:a2:
16:a2:17:7a:66:a8:e6:e5:3d:bb:69:2d:eb:73:4b:
38:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:97:B0:B3:7A:B5:07:7C:6A:25:C7:20:74:68:41:06:1E:02:79
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/77ddb9ab-8897-42c1-bb5d-4ff901c3f275.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b72::/47
Signature Algorithm: sha256WithRSAEncryption
93:61:20:ac:f2:90:b1:d8:aa:9c:e0:85:45:05:51:58:3f:f7:
45:d0:a5:81:fa:aa:b6:a5:8c:4e:6b:d1:bf:f3:f4:72:89:14:
c6:ea:ed:f8:a7:5b:e0:ab:7a:84:05:59:33:ed:9d:a8:8d:28:
70:a6:6c:f6:8b:e1:90:2d:2b:9e:bd:3b:39:b2:61:49:ec:1d:
97:69:40:55:1f:29:27:f0:33:cd:b3:58:d6:f4:4e:36:31:79:
95:f2:3c:13:6e:80:86:9b:93:e1:46:dc:cc:50:66:91:8c:00:
cd:da:56:61:36:c3:4e:29:83:d0:7a:c5:f5:35:a2:22:fe:dc:
d5:8a:6a:6f:d6:52:e3:75:4b:af:0d:27:fa:bf:5d:47:7f:3c:
8b:97:22:ab:cd:4f:d7:76:54:78:c5:7c:4a:82:a8:43:71:4c:
be:af:cb:61:1e:0a:44:f5:bd:bc:51:0e:37:8b:a5:e0:de:d9:
12:96:56:ca:83:8c:3c:ac:d3:78:2f:5f:f5:37:5e:4b:56:fb:
66:5e:e7:87:cb:6a:1b:9f:53:de:f6:97:07:28:96:9d:b5:7d:
9c:b5:c4:0f:92:db:97:22:2c:43:e5:db:57:ac:2e:e0:e9:36:
a1:b2:3f:4f:de:68:bf:6a:0c:ad:3e:78:c0:61:fe:df:4a:f3:
60:c5:17:60
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNdgRTWSmDLEqvRR+LmGBE/79R0gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMxMDIxWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyM2U4ZDM5NDRmM2E4ZjIzODBhNWUzZTI0MjcxZmQ0MGZi
YTc0NTdjNjRkMzM3ZTAxZGQwYjRhYmE2Mjk3ZmJjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuBpwamqA3KctZGBNRB+W9aEwDyaiUGQk5vZCQ0vzWdXSk
6vPk1sFlZOsOXB6F6s8VRErfDY6dV7zi2DaJV2Hch1gjCUmI4BVqijuvjlcDc+gO
eVl4ERg/oqNhj18JQaHZIiUJBSybG2sR7iTGDbCKhLxOW9JxOzuawpiPPkD+kAes
Bl8gRZs4NVtJlJiaj4a4yvz7E+p7wkDrt1jpndaEexxX/8J7siAOTwWe4RxwZWx/
Fo4mqd0+jCIkcldV9LcbdGrzkcYLDwdrHEiISBvt3y80CHT2/Az0YGygjF6Tyle+
CJxHzvEDoH0xhd3nohaiF3pmqOblPbtpLetzSziBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxDOXsLN6tQd8aiXHIHRoQQYeAnkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc3ZGRiOWFiLTg4OTctNDJjMS1iYjVkLTRmZjkwMWMzZjI3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAK3IwDQYJKoZIhvcNAQELBQADggEBAJNhIKzykLHYqpzghUUFUVg/
90XQpYH6qraljE5r0b/z9HKJFMbq7finW+CreoQFWTPtnaiNKHCmbPaL4ZAtK569
OzmyYUnsHZdpQFUfKSfwM82zWNb0TjYxeZXyPBNugIabk+FG3MxQZpGMAM3aVmE2
w04pg9B6xfU1oiL+3NWKam/WUuN1S68NJ/q/XUd/PIuXIqvNT9d2VHjFfEqCqENx
TL6vy2EeCkT1vbxRDjeLpeDe2RKWVsqDjDys03gvX/U3XktW+2Ze54fLahufU972
lwcolp21fZy1xA+S25ciLEPl21esLuDpNqGyP0/eaL9qDK0+eMBh/t9K82DFF2A=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:27 2025 by rpki-client