
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7f355be3-5b1f-487c-aeed-cd3ca0255a1f.roa
File: 7f355be3-5b1f-487c-aeed-cd3ca0255a1f.roa (raw, json)
Hash identifier: 0452JU0bctirP58Ktk+FYUBzJuipiS4+K7NPaOA0+dQ=
Subject key identifier: 42:65:60:82:0D:84:AF:1D:29:EC:AA:4B:A8:60:AA:64:CC:19:5A:38
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1757BDC1956DC659F35FEA810885C04FC5E6472D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7f355be3-5b1f-487c-aeed-cd3ca0255a1f.roa
Signing time: Thu 30 Oct 2025 22:57:18 +0000
ROA not before: Thu 30 Oct 2025 22:57:18 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a56::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:57:bd:c1:95:6d:c6:59:f3:5f:ea:81:08:85:c0:4f:c5:e6:47:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:57:18 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=8205f5b1ff3a8f9fe8fcffd75b4fabc710b319d586026c8e996819ae2af5fbe7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:3e:a8:42:64:9a:08:c4:a2:f7:af:91:a7:
3b:02:3b:00:03:66:05:4a:d5:34:2b:a4:8c:79:6c:
2a:b4:3f:87:44:a7:ec:17:1f:20:e7:0b:77:18:70:
e9:6e:59:d4:b2:01:ad:1e:6a:dd:7d:bc:93:d0:a3:
a6:6d:f5:9c:dc:13:90:b3:71:5a:26:91:c5:a0:10:
3e:06:05:7a:70:19:be:e1:ba:b3:3b:50:10:97:4c:
b4:52:19:ba:b2:d0:8a:1c:63:a8:ef:97:47:6b:35:
9a:14:77:70:11:ac:19:34:ad:4e:96:8f:7e:62:73:
34:f6:f6:53:35:54:c5:96:99:1e:30:89:67:94:ad:
d5:ec:c9:b1:ec:08:7d:b0:12:c5:de:85:4d:22:05:
68:aa:a5:e6:bb:f8:6d:ba:30:c7:5b:a0:6b:d6:2c:
58:23:4e:83:b7:e4:19:cd:2d:1c:98:e7:e1:3d:ae:
23:fc:26:a5:9a:b1:53:e0:19:e3:b0:e9:50:af:fa:
e1:f8:54:fd:1b:d1:7f:56:5a:31:4c:84:1b:78:24:
84:01:92:d0:4e:d4:b8:74:42:d5:b6:2d:78:62:30:
fc:a1:e3:5b:9b:4b:9d:83:80:ed:2a:0f:de:5a:0a:
c4:e7:5b:6a:19:58:ac:3d:8f:71:9a:7b:e4:ad:f6:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:60:82:0D:84:AF:1D:29:EC:AA:4B:A8:60:AA:64:CC:19:5A:38
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7f355be3-5b1f-487c-aeed-cd3ca0255a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a56::/47
Signature Algorithm: sha256WithRSAEncryption
59:99:dd:6a:f6:d6:6c:c1:09:41:61:2d:e7:e5:f4:00:09:5e:
27:c4:e9:60:9b:0e:2f:81:db:bf:83:8a:6a:04:ef:38:ff:ad:
a1:ec:75:70:a5:7b:96:31:97:55:46:20:c5:21:2d:99:38:1d:
b7:26:78:41:50:a7:bf:81:df:39:be:c2:14:d7:82:14:6a:49:
b1:33:78:61:8d:1a:44:12:c5:eb:83:09:0a:6e:c8:d1:00:65:
c0:7c:fa:0e:13:87:52:06:f1:6f:ba:5d:dc:3d:bf:2a:18:77:
5e:61:ee:10:37:6b:0a:b5:48:2f:5c:e8:e6:b5:02:0e:ae:16:
16:fd:c8:e1:9b:2b:16:75:22:68:0b:c1:c9:bf:4a:7e:7e:1c:
7f:ff:83:f4:3b:e3:8d:84:f3:c0:92:04:c3:0f:f0:7e:c9:ff:
e9:a6:b4:78:cf:27:81:bf:7f:0b:4b:e3:c6:20:44:62:31:85:
6e:49:0d:0e:a5:2f:8c:ba:e1:97:15:c6:85:b3:e3:a1:c1:88:
0b:a5:c2:80:c2:44:01:f9:d7:86:60:b4:30:88:e4:94:75:5b:
78:c5:12:3f:a1:54:d9:17:2c:79:3d:29:a2:e7:dd:ca:e5:3d:
8e:8a:ae:68:ab:e4:c7:80:b3:d2:43:4b:9f:c3:1d:04:85:a2:
9b:4f:cc:14
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUF1e9wZVtxlnzX+qBCIXAT8XmRy0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI1NzE4WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MjA1ZjViMWZmM2E4ZjlmZThmY2ZmZDc1YjRmYWJjNzEw
YjMxOWQ1ODYwMjZjOGU5OTY4MTlhZTJhZjVmYmU3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYqT6oQmSaCMSi96+RpzsCOwADZgVK1TQrpIx5bCq0P4dE
p+wXHyDnC3cYcOluWdSyAa0eat19vJPQo6Zt9ZzcE5CzcVomkcWgED4GBXpwGb7h
urM7UBCXTLRSGbqy0IocY6jvl0drNZoUd3ARrBk0rU6Wj35iczT29lM1VMWWmR4w
iWeUrdXsybHsCH2wEsXehU0iBWiqpea7+G26MMdboGvWLFgjToO35BnNLRyY5+E9
riP8JqWasVPgGeOw6VCv+uH4VP0b0X9WWjFMhBt4JIQBktBO1Lh0QtW2LXhiMPyh
41ubS52DgO0qD95aCsTnW2oZWKw9j3Gae+St9kdNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUQmVggg2Erx0p7KpLqGCqZMwZWjgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzdmMzU1YmUzLTViMWYtNDg3Yy1hZWVkLWNkM2NhMDI1NWExZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKlYwDQYJKoZIhvcNAQELBQADggEBAFmZ3Wr21mzBCUFhLefl9AAJ
XifE6WCbDi+B27+DimoE7zj/raHsdXCle5Yxl1VGIMUhLZk4HbcmeEFQp7+B3zm+
whTXghRqSbEzeGGNGkQSxeuDCQpuyNEAZcB8+g4Th1IG8W+6Xdw9vyoYd15h7hA3
awq1SC9c6Oa1Ag6uFhb9yOGbKxZ1ImgLwcm/Sn5+HH//g/Q7442E88CSBMMP8H7J
/+mmtHjPJ4G/fwtL48YgRGIxhW5JDQ6lL4y64ZcVxoWz46HBiAulwoDCRAH514Zg
tDCI5JR1W3jFEj+hVNkXLHk9KaLn3crlPY6Krmir5MeAs9JDS5/DHQSFoptPzBQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:30 2025 by rpki-client