
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/839babb5-fa39-42c8-aa23-e72fc65f2672.roa
File: 839babb5-fa39-42c8-aa23-e72fc65f2672.roa (raw, json)
Hash identifier: urJTrZjvbyFZco8uqJzAiBX+76qIsUzHxyX1e4lA4UQ=
Subject key identifier: 7B:29:15:ED:C3:0F:E8:B2:DF:D1:C1:AE:17:1C:BF:AD:98:60:2A:52
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3E8AF7A3694DF40016CCE2697DAB56BD0B2581BA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/839babb5-fa39-42c8-aa23-e72fc65f2672.roa
Signing time: Fri 31 Oct 2025 05:28:59 +0000
ROA not before: Fri 31 Oct 2025 05:28:59 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1de0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8a:f7:a3:69:4d:f4:00:16:cc:e2:69:7d:ab:56:bd:0b:25:81:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:28:59 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=6645f05529ed81ef156438f92d2224b6daa7f8d1f93d8b0992678481c5359465, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:ad:86:7f:ad:02:63:e7:e4:6e:ad:be:07:
77:a9:bc:78:00:84:3f:d9:91:94:97:1d:d4:be:75:
79:3c:3a:ac:ec:73:39:8d:a8:89:bc:cf:59:60:30:
0a:4a:7b:ca:c9:74:34:7e:93:cf:ad:1b:85:0a:90:
cb:8c:2b:57:5d:9d:6a:72:b7:5c:41:df:21:89:29:
b8:27:86:ec:77:f5:01:19:4c:30:65:2a:36:6b:e1:
af:2c:c0:3d:31:ad:3e:05:a9:9b:b1:5f:1a:39:a7:
f6:5c:c2:66:1c:88:a8:dd:67:2e:f1:1e:73:0e:3d:
06:8f:81:37:80:5e:46:e8:cf:8f:f1:e6:e0:aa:cf:
dc:2f:a0:51:7e:97:a2:21:6e:e1:ef:1a:50:bf:d2:
49:e4:b8:0e:21:4b:c7:40:e5:45:54:9e:2b:77:77:
96:09:44:1f:63:e0:ec:db:27:31:73:95:ef:37:c5:
48:b5:55:ac:ea:5b:b8:4e:b1:e6:15:8d:56:f3:ef:
f0:37:e2:6c:c3:67:05:ab:08:33:4d:78:fb:83:82:
b1:2a:e0:7c:d4:09:36:91:e4:0e:f2:3b:1a:6a:16:
6e:24:ce:7d:50:b5:32:02:6c:db:c6:c1:71:37:46:
cd:fb:a8:73:3c:7f:a9:5a:8c:fc:17:95:ba:3a:23:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:15:ED:C3:0F:E8:B2:DF:D1:C1:AE:17:1C:BF:AD:98:60:2A:52
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/839babb5-fa39-42c8-aa23-e72fc65f2672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1de0::/45
Signature Algorithm: sha256WithRSAEncryption
7e:8a:63:2a:2e:1f:72:87:60:d0:58:2f:df:6b:74:68:06:cd:
94:be:b7:66:34:f3:28:af:d8:73:ea:0f:b8:3f:9e:5d:ef:02:
b7:a1:00:05:3b:69:25:91:6b:fe:ea:9c:62:f6:14:d6:4d:11:
55:02:90:7a:a2:b8:01:da:5f:b4:da:6d:ce:ff:53:c7:97:1f:
73:96:c5:22:18:c7:45:4b:0a:45:bc:8e:0a:0e:38:b5:59:d8:
06:07:e9:f2:7f:c6:e6:bf:67:5b:84:0c:fa:24:25:ea:bd:6e:
f6:fd:8e:ae:4d:ca:e7:78:44:61:04:4c:84:d3:6d:ed:e2:cb:
05:3b:0a:5b:4e:b7:a0:b4:38:c7:6a:dd:52:ab:87:8e:b8:79:
9b:0b:5a:fc:a1:ba:28:3c:ab:20:ab:41:dc:d4:18:5e:0a:a2:
9c:57:1a:4b:a5:b6:18:1f:a0:19:83:69:59:c1:6d:4f:41:0c:
e4:52:97:91:64:93:4f:37:66:62:a1:4c:c2:eb:a5:fa:d2:27:
66:b0:ae:30:39:81:84:25:4b:87:b5:e6:f7:89:8a:20:eb:50:
42:d1:07:a3:d5:3b:68:eb:4a:d0:aa:76:10:5e:0c:42:de:07:
2e:83:70:5e:82:a1:77:41:79:53:f2:e7:72:f4:bd:0b:a9:30:
62:bf:90:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:10 2025 by rpki-client