
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/821f34fa-1f35-47ad-b0ae-919b399ecbd4.roa
File: 821f34fa-1f35-47ad-b0ae-919b399ecbd4.roa (raw, json)
Hash identifier: 4MaHYilFK9ux8atLhv4vfpa+24nbX9CXW3pavZ5C1wk=
Subject key identifier: 98:91:27:2E:DB:36:2F:28:8A:EE:40:F0:8B:4B:6D:D1:3E:3D:89:80
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 755F6FD2356B4BAB214B5D4A18123B26C4607DAF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/821f34fa-1f35-47ad-b0ae-919b399ecbd4.roa
Signing time: Fri 31 Oct 2025 03:26:44 +0000
ROA not before: Fri 31 Oct 2025 03:26:44 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a58::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5f:6f:d2:35:6b:4b:ab:21:4b:5d:4a:18:12:3b:26:c4:60:7d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:26:44 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=01dd21592358f081f9d99166afb702588adce7abdec32da22332c69400833fc0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:2f:18:3f:2e:18:96:78:7e:06:f8:22:5b:
63:be:3c:9a:09:bd:5e:b9:e8:0a:5c:36:6e:b8:15:
46:b0:29:4a:ca:ce:0d:59:90:2a:36:0f:d7:80:a5:
3e:6a:08:17:b5:57:26:65:70:ff:82:6f:83:23:2e:
e9:32:e8:7e:40:b1:d3:f3:86:bb:e6:1d:82:c7:ed:
b8:22:2d:3d:7d:2e:85:64:e7:f6:4f:eb:a3:9c:a9:
41:57:89:a4:b2:e8:7a:f8:d6:da:03:59:fa:03:9d:
31:f6:d5:81:9e:82:d2:79:c0:c6:58:27:06:a6:5e:
dc:cc:b6:00:56:eb:d3:6d:e7:d1:74:b5:3e:50:7e:
35:b8:84:7d:03:58:af:05:35:5a:77:1c:f7:81:d2:
72:cb:38:da:3f:29:de:0a:02:af:b0:30:10:b6:0d:
b5:09:a4:f9:b7:f0:47:0a:69:1d:8f:37:76:29:68:
0c:16:95:d8:55:ee:11:78:55:e7:ef:b1:ef:a3:62:
78:be:c9:00:53:23:5d:c1:f7:a3:b1:7c:0d:22:81:
ab:ad:7c:7b:86:d5:0a:af:fa:48:6a:d2:6c:15:6e:
42:8b:87:ef:16:ac:a5:91:f2:a8:12:75:e0:f8:9d:
22:86:df:a1:21:d5:03:cb:8f:19:4c:98:a0:94:ad:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:91:27:2E:DB:36:2F:28:8A:EE:40:F0:8B:4B:6D:D1:3E:3D:89:80
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/821f34fa-1f35-47ad-b0ae-919b399ecbd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a58::/46
Signature Algorithm: sha256WithRSAEncryption
06:39:c9:14:69:21:14:14:2f:77:8e:99:98:19:69:c8:69:67:
89:84:37:84:86:20:76:4c:ae:52:a8:75:fc:fd:61:63:dc:26:
ca:18:1d:80:4d:8b:58:ab:3c:45:e9:05:92:ee:2a:a3:b3:41:
91:94:dc:3b:d9:13:58:ae:87:1c:53:c2:7d:07:58:2e:d6:68:
71:3d:9c:40:97:f7:e0:53:d8:01:e3:6f:02:07:6f:6e:0a:b6:
0b:32:3e:21:51:90:bb:d6:b9:b9:29:cf:8c:96:c7:2c:ec:98:
74:77:89:cc:5d:15:9f:88:4b:53:4d:b4:85:e5:cd:44:8d:b0:
ae:72:4d:e0:15:28:ad:71:78:35:9b:bf:ad:1f:62:0c:e5:be:
0e:5b:4d:df:82:6b:09:db:7a:c7:05:01:73:bf:9f:fc:02:85:
04:c7:f2:28:65:73:5e:4e:9d:d3:af:ec:ac:55:db:ed:00:98:
b0:62:9b:1a:cb:3f:cd:28:a8:6d:36:2b:07:df:d1:58:19:1a:
19:34:6e:78:75:b1:a0:ff:ed:f4:6c:44:5e:e3:2e:d8:43:a3:
a1:50:22:43:f4:54:0a:86:b4:d9:49:d4:28:ad:64:79:ab:6c:
70:75:00:c6:1c:12:4f:97:31:55:fb:69:cb:9b:0a:4a:27:13:
c5:ab:66:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:11 2025 by rpki-client