
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e561bf3-8241-4e90-a28f-d7a6ca515492.roa
File: 7e561bf3-8241-4e90-a28f-d7a6ca515492.roa (raw, json)
Hash identifier: KcBjRlMQN8xhHrujYNFr6fbi6BMI5mmuFtixh4F9mQI=
Subject key identifier: 81:A6:AE:10:B6:50:33:CA:C8:75:EB:F4:5D:C3:75:9F:87:A0:FA:9B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 501B9AFAC65E820161A838445BE2E93BB4D1CC95
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e561bf3-8241-4e90-a28f-d7a6ca515492.roa
Signing time: Fri 31 Oct 2025 06:06:51 +0000
ROA not before: Fri 31 Oct 2025 06:06:51 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3660::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1b:9a:fa:c6:5e:82:01:61:a8:38:44:5b:e2:e9:3b:b4:d1:cc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:06:51 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4a83eca86358ad0dffc4f381c56f83dd548859be73558050d0d7632d693551e2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:ce:9c:16:22:a8:51:d0:a3:07:07:57:49:
82:2d:53:ec:b9:eb:b3:f8:12:f4:ab:b2:5f:bf:ac:
13:3c:0f:64:77:94:8e:58:bd:7c:29:6c:c9:df:ba:
92:b8:53:94:72:2d:e7:e8:dd:c4:8c:e0:9b:51:cc:
bb:62:83:32:fd:3e:6b:d4:1a:83:2a:05:2d:02:31:
5b:c5:b7:3a:f4:2f:cc:32:56:79:5b:6f:80:7f:22:
1e:09:ab:56:68:41:e0:31:ff:2a:59:cc:7c:45:8d:
00:13:11:27:f5:ad:4d:01:df:51:b2:3b:1a:3b:30:
b9:84:b9:96:34:78:cb:52:e8:ad:ec:46:7e:98:68:
d8:50:85:ec:dd:f5:f7:1c:28:3c:83:ed:1c:7c:6d:
51:cb:29:40:37:a7:f8:fc:82:00:fb:73:b5:06:0e:
f3:5a:c8:12:a1:e2:aa:e8:43:9a:69:9c:54:38:8f:
bb:10:c1:90:ea:f7:1b:b9:fb:5b:39:f1:78:f8:81:
0f:f0:f2:ec:5d:bf:0f:e9:c7:9e:d1:f5:36:54:37:
10:8b:0f:7b:92:d4:bf:2e:42:29:98:b8:98:ac:ce:
73:b2:0d:91:8d:00:85:d7:88:45:6a:ba:b3:d9:4f:
cc:ef:dd:34:58:51:3c:7a:8e:f4:5c:2d:04:bf:ca:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A6:AE:10:B6:50:33:CA:C8:75:EB:F4:5D:C3:75:9F:87:A0:FA:9B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e561bf3-8241-4e90-a28f-d7a6ca515492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3660::/45
Signature Algorithm: sha256WithRSAEncryption
ba:b5:80:ef:a2:25:84:3f:63:f7:10:14:7e:47:67:d5:5a:56:
2c:5d:6c:33:f9:70:d0:4e:61:90:3d:db:5b:4d:9a:34:d9:68:
e4:8a:62:d0:c2:20:1b:1d:0b:d8:9e:6e:3b:d0:61:ed:3e:2c:
50:76:97:07:55:36:0b:65:39:0f:06:e2:20:f4:c1:3d:69:29:
a9:69:37:1d:41:e6:13:a5:ea:1b:c4:d5:c1:5c:e4:a4:58:92:
46:fe:e6:a3:ef:8d:8f:f0:77:b0:a6:ad:64:5a:c7:bd:0f:6a:
32:30:fd:6d:72:d7:e2:97:c6:1d:3e:0a:70:7d:be:c9:9a:8e:
4b:1c:b1:ff:8d:41:38:41:4c:c2:f5:d9:65:4b:3c:44:8d:69:
30:6a:31:b9:f9:e6:7e:7e:c9:f3:ae:c2:a9:ca:51:dd:61:3b:
23:b5:38:6d:89:b5:aa:b3:e4:07:be:70:f2:f6:93:10:a8:6c:
55:da:44:bc:03:66:28:45:ff:3c:3f:df:81:e4:2e:49:43:f6:
62:10:f9:02:92:ac:1a:f7:cd:a7:f3:23:8b:eb:36:be:a4:86:
c8:31:72:09:86:49:44:fd:ec:6a:68:5a:4d:a8:2c:0c:d0:96:
2f:bb:83:67:66:0a:43:99:48:ee:e4:8a:f7:e1:1f:52:6b:ae:
4c:c4:7d:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:21 2025 by rpki-client