
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7beabab8-efa0-4940-a105-3d98ed32672a.roa
File: 7beabab8-efa0-4940-a105-3d98ed32672a.roa (raw, json)
Hash identifier: jO24psWRNoZwXnMlaSgSvuj+uqKZ/x0dqnEp6p7Q9oQ=
Subject key identifier: 9A:DD:19:CD:D3:8A:49:A9:6E:AA:32:B9:7B:5B:B5:5C:58:36:DD:04
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 10E103B30E929CA092FAB0AA6372DBBFE08CA1EC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7beabab8-efa0-4940-a105-3d98ed32672a.roa
Signing time: Thu 30 Oct 2025 23:10:20 +0000
ROA not before: Thu 30 Oct 2025 23:10:20 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b6c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e1:03:b3:0e:92:9c:a0:92:fa:b0:aa:63:72:db:bf:e0:8c:a1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 23:10:20 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=4be3dafb9223bf7b2432cb071cef0aee64b26b09fe1a295707bf1cfde1d39d68, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7c:62:8e:8a:4c:87:fb:d5:26:fa:3f:f5:49:
54:f5:b3:61:1a:7b:54:99:a8:8a:f7:a2:06:7d:43:
8b:f5:66:75:5f:2a:57:17:37:63:54:47:ca:fc:8c:
76:6a:29:23:82:44:58:ca:79:66:9e:db:13:fe:b4:
94:d3:da:31:f5:e3:c3:88:b9:da:64:e0:93:d4:60:
1a:b2:36:c8:75:09:cb:90:24:06:52:ca:63:3f:7c:
c5:e9:b3:13:ef:13:84:71:ed:84:c2:97:69:8a:51:
d1:f2:b9:fc:95:04:32:1e:84:1e:4b:f1:6f:9e:91:
9e:3d:ab:c6:11:05:33:f3:64:45:ac:42:63:8f:58:
e8:12:a9:fb:5c:c8:7c:7b:83:d4:ac:a2:f5:29:bd:
63:40:ba:6d:41:cf:33:a0:70:c4:a2:fa:69:6a:5d:
21:9b:d3:92:51:21:63:7b:ca:fd:7c:c3:d1:75:e1:
4e:92:94:b5:98:b3:79:9b:0c:91:b9:5e:0e:06:c1:
7e:61:fb:f4:a6:23:9a:ec:01:e7:b0:4d:65:0a:e1:
29:94:4c:15:42:8f:25:e1:55:7f:35:71:44:78:35:
af:17:03:d9:c2:86:57:dd:64:c5:e9:a2:e2:8c:b2:
15:76:d2:b4:e6:43:2a:ca:06:3b:35:ca:d5:60:96:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DD:19:CD:D3:8A:49:A9:6E:AA:32:B9:7B:5B:B5:5C:58:36:DD:04
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7beabab8-efa0-4940-a105-3d98ed32672a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b6c::/47
Signature Algorithm: sha256WithRSAEncryption
31:6d:a4:3f:75:0a:16:b2:57:a8:0f:76:eb:a8:3f:d9:71:8d:
5e:8e:59:6a:74:4b:29:d3:60:0c:86:43:4b:5f:f3:01:e4:25:
15:fb:5f:9c:be:dd:d9:70:d8:a7:b7:d2:12:c1:86:b3:ce:89:
0f:fc:1f:01:c4:11:4e:9b:77:91:7d:7b:08:1b:5a:72:b8:36:
78:b8:1c:96:63:f9:aa:3a:6e:99:a9:a9:9d:16:85:fe:76:1c:
bd:55:a8:41:35:1f:a4:c0:55:04:bb:a1:59:26:43:2c:9d:16:
27:a5:88:3f:77:e3:d7:3f:93:5e:f3:09:c7:8b:dc:37:63:a4:
2b:7e:cc:3a:f8:3d:dd:b6:7b:a4:da:35:39:14:62:d3:61:fd:
56:52:57:ba:28:ef:ca:7f:95:8e:f5:10:a2:a3:b4:52:bb:55:
30:7f:e2:c2:89:5b:f0:5d:8c:93:f4:ad:54:bc:38:1b:fb:4b:
47:26:cb:d6:15:13:27:8c:ea:21:d4:9d:3c:f4:60:6b:4a:e7:
50:eb:29:dc:76:9e:56:83:b7:ff:9d:48:60:e2:98:a9:64:b5:
cb:16:52:4a:87:96:42:da:56:20:c9:a9:f6:c2:94:57:7c:6c:
5c:ad:ad:cc:4a:4d:b3:61:ba:7b:b5:68:3c:31:92:70:66:c5:
ca:f6:f2:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:02 2025 by rpki-client