
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78672516-3e5b-4ddc-b2d7-c54e53094c62.roa
File: 78672516-3e5b-4ddc-b2d7-c54e53094c62.roa (raw, json)
Hash identifier: ji8jv0GkT8+LqBUOgh3kfbgCW2m8WHAN9ceYZbRri48=
Subject key identifier: 44:80:CE:55:0D:B5:E5:4C:E9:A0:25:CE:D2:9D:64:E5:70:FF:06:2B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6F1BE72FEB8ADF2123D43F9D1F78A160AA74FB4C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78672516-3e5b-4ddc-b2d7-c54e53094c62.roa
Signing time: Fri 31 Oct 2025 05:14:15 +0000
ROA not before: Fri 31 Oct 2025 05:14:15 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1820::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1b:e7:2f:eb:8a:df:21:23:d4:3f:9d:1f:78:a1:60:aa:74:fb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:14:15 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=f34133f33b49b26297e635d77d854411dceeb8571cc3fdf6d1f969b5b254028f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:b2:92:15:79:c2:09:c5:c0:d8:c9:68:95:
a8:7c:cf:d0:6b:a2:95:94:44:ce:9c:00:f0:21:91:
3e:19:f3:cc:8a:81:e3:85:23:c4:ae:5e:3a:21:c2:
96:af:35:c7:61:be:29:50:ca:84:be:2d:31:d7:32:
d9:52:2a:c5:fd:9b:bd:fb:fe:d3:8d:eb:91:bf:e1:
a8:0b:4d:0d:d7:24:88:f6:cb:ff:26:43:01:bc:99:
55:55:f5:7b:2e:a5:2a:1d:78:03:01:3c:24:cc:c3:
b5:f7:71:a7:68:b4:7a:fd:14:f3:f9:48:e6:fb:f7:
d4:eb:92:26:59:d0:7f:e6:f3:71:b9:04:e0:b5:f7:
24:ae:77:b5:d8:f2:bc:fd:71:f2:79:3d:9e:c7:bc:
0d:90:5c:82:79:f7:c4:5a:25:8e:63:2e:3a:fb:0e:
62:33:4b:2a:c1:00:c4:5d:20:c7:7d:e6:fd:48:c0:
ba:e1:65:7a:59:cf:a4:a4:55:80:69:32:27:13:ed:
36:7a:3d:29:c3:51:5b:f7:50:54:b2:24:63:89:46:
16:4d:2b:a4:d1:25:27:38:5f:ae:36:ab:8c:78:e4:
5c:3e:f9:b4:44:57:47:77:5b:27:e5:da:e5:60:2c:
c3:fc:b5:46:1d:2b:7d:a6:38:25:c2:af:56:ff:78:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:80:CE:55:0D:B5:E5:4C:E9:A0:25:CE:D2:9D:64:E5:70:FF:06:2B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78672516-3e5b-4ddc-b2d7-c54e53094c62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1820::/45
Signature Algorithm: sha256WithRSAEncryption
8a:c0:69:68:25:81:cb:fd:c6:ef:a1:19:ec:ab:fd:50:69:ec:
ab:27:a5:36:e5:b2:89:54:e3:1b:bb:5b:78:47:bf:bd:1e:be:
6d:93:0b:26:ef:fe:e6:6e:d6:7e:e9:a7:b0:65:05:18:83:1e:
81:ec:7d:d0:52:ad:4b:91:f8:d8:f2:15:93:bd:69:04:c0:ac:
24:aa:68:ba:32:d3:ec:70:e5:ad:e0:dc:73:02:6e:8c:ae:d2:
d2:70:96:e5:b1:a6:4e:44:d5:df:d2:b2:0a:57:b6:d2:17:a4:
93:16:69:f1:aa:bd:cc:d8:4e:1c:bf:e9:bb:b1:8a:4d:d1:b1:
38:81:e7:6b:14:55:db:22:1e:17:96:3d:0e:d8:4c:39:3d:36:
5c:54:25:b3:0f:fc:1e:aa:29:a1:28:a2:ac:54:bd:62:88:1b:
31:13:20:cf:48:57:88:a6:eb:b7:29:e6:64:61:dc:60:97:ee:
50:e8:b7:e2:f3:12:e5:c5:62:d3:35:60:5f:ba:24:41:33:d5:
94:69:a4:00:68:db:4b:45:93:df:b0:33:f1:bf:e3:83:d5:de:
24:e4:8f:f8:96:03:b8:2e:42:b7:4c:e8:cb:cd:c8:df:4a:0d:
58:cf:29:b1:40:89:28:9f:86:60:74:ba:72:02:58:cf:96:77:
a6:c3:03:e6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbxvnL+uK3yEj1D+dH3ihYKp0+0wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUxNDE1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMzQxMzNmMzNiNDliMjYyOTdlNjM1ZDc3ZDg1NDQxMWRj
ZWViODU3MWNjM2ZkZjZkMWY5NjliNWIyNTQwMjhmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCy6bKSFXnCCcXA2Mlolah8z9BropWURM6cAPAhkT4Z88yK
geOFI8SuXjohwpavNcdhvilQyoS+LTHXMtlSKsX9m737/tON65G/4agLTQ3XJIj2
y/8mQwG8mVVV9XsupSodeAMBPCTMw7X3cadotHr9FPP5SOb799TrkiZZ0H/m83G5
BOC19ySud7XY8rz9cfJ5PZ7HvA2QXIJ598RaJY5jLjr7DmIzSyrBAMRdIMd95v1I
wLrhZXpZz6SkVYBpMicT7TZ6PSnDUVv3UFSyJGOJRhZNK6TRJSc4X642q4x45Fw+
+bREV0d3Wyfl2uVgLMP8tUYdK32mOCXCr1b/eGYFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQURIDOVQ215UzpoCXO0p1k5XD/BiswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzc4NjcyNTE2LTNlNWItNGRkYy1iMmQ3LWM1NGU1MzA5NGM2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAGCAwDQYJKoZIhvcNAQELBQADggEBAIrAaWglgcv9xu+hGeyr/VBp
7KsnpTblsolU4xu7W3hHv70evm2TCybv/uZu1n7pp7BlBRiDHoHsfdBSrUuR+Njy
FZO9aQTArCSqaLoy0+xw5a3g3HMCboyu0tJwluWxpk5E1d/SsgpXttIXpJMWafGq
vczYThy/6buxik3RsTiB52sUVdsiHheWPQ7YTDk9NlxUJbMP/B6qKaEooqxUvWKI
GzETIM9IV4im67cp5mRh3GCX7lDot+LzEuXFYtM1YF+6JEEz1ZRppABo20tFk9+w
M/G/44PV3iTkj/iWA7guQrdM6MvNyN9KDVjPKbFAiSifhmB0unICWM+Wd6bDA+Y=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:18 2025 by rpki-client