
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83e0376c-8bb7-4a0a-95c8-aab26a283441.roa
File: 83e0376c-8bb7-4a0a-95c8-aab26a283441.roa (raw, json)
Hash identifier: fbtRhy+DnB7ceJ/scwhAeD1eHZI6taKWk5tCW80DPI8=
Subject key identifier: 7F:C9:57:0E:5B:63:13:0D:75:31:C2:18:C3:C1:A0:CC:E3:31:12:5C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 59F93124EACACFE787F1580FDFBEC2E14C5A10A6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83e0376c-8bb7-4a0a-95c8-aab26a283441.roa
Signing time: Thu 30 Oct 2025 21:12:11 +0000
ROA not before: Thu 30 Oct 2025 21:12:11 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:15a2::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f9:31:24:ea:ca:cf:e7:87:f1:58:0f:df:be:c2:e1:4c:5a:10:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:12:11 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=71b034ec0d28b5f197575a09bd5fdc304581f7bdec520c0d0c7f630eb506d705, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:f8:d8:a2:94:9b:0c:e8:3e:cf:0a:61:80:
7a:41:cb:39:f2:6f:91:01:3a:a9:4f:51:0c:e1:29:
3a:73:eb:47:5f:04:a7:f7:a5:54:e8:94:37:89:c8:
ab:44:46:00:a8:a0:f8:32:67:80:0e:f9:54:df:1e:
0f:9f:be:66:d9:2b:c0:13:a5:9b:f8:66:3c:d6:8d:
aa:99:70:c9:97:48:63:7f:27:21:44:d3:91:80:b1:
fc:86:5c:1b:23:96:b4:b5:28:55:7d:ca:ee:a7:9e:
a1:4e:b5:d5:a4:71:e6:be:d7:b4:b7:44:9c:4b:d9:
4e:ac:aa:8a:46:61:2f:9c:bd:a7:35:86:4a:cd:b8:
5c:70:31:99:3b:94:44:43:69:88:5f:05:62:63:18:
63:fe:0f:60:a0:31:91:f2:4b:1a:67:ae:80:cb:df:
fb:ba:b4:82:93:08:4f:f9:8f:5e:eb:54:b6:0b:7c:
92:6e:2e:7f:89:08:ef:1f:d3:09:cd:3c:ee:d5:90:
28:6a:d0:fe:4f:aa:90:96:53:63:9d:29:b8:e8:f0:
de:a1:6f:0a:54:c6:d3:f5:91:0c:39:40:87:bf:9a:
fb:83:fa:31:f7:a1:b0:47:37:98:8c:d5:23:a0:73:
27:ba:a4:f5:d9:59:7d:f3:2c:43:a8:f5:d8:ba:e9:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:57:0E:5B:63:13:0D:75:31:C2:18:C3:C1:A0:CC:E3:31:12:5C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83e0376c-8bb7-4a0a-95c8-aab26a283441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:15a2::/47
Signature Algorithm: sha256WithRSAEncryption
77:6e:27:66:8f:e2:e3:64:49:08:c1:45:c6:49:a4:a0:da:10:
f5:7c:59:84:34:95:89:81:48:4d:28:75:19:43:d5:82:9e:5b:
e6:6b:4b:4b:c7:57:55:12:45:a1:10:c3:48:6d:15:ef:94:8a:
fb:0c:2d:3d:65:6c:a9:6d:bc:aa:f8:05:ef:f3:1f:78:35:ba:
a1:d3:5c:cb:d8:b9:e5:81:4a:5f:9a:cf:ef:5f:6e:fa:b6:2f:
b3:44:31:e8:7c:4a:33:35:1a:b5:8b:ec:08:af:59:94:8c:5d:
07:74:f8:39:25:49:d6:d7:d2:62:2d:a3:f4:8a:36:64:00:0d:
cf:14:48:82:05:16:c5:04:ce:5c:d7:76:73:16:27:96:5b:3f:
d9:c0:80:25:73:ce:58:b0:e5:64:74:f5:4c:08:1c:fe:35:ce:
0e:3b:84:4e:5f:4c:5d:eb:4c:3a:14:41:0d:a5:51:36:13:5b:
ec:f8:47:74:93:a8:9f:a7:c7:97:7a:b6:6e:0e:7a:ed:33:f7:
51:63:cd:07:08:2d:7a:d3:01:cb:c8:08:3f:23:40:0c:04:ab:
80:c9:1f:20:77:54:ef:c4:c5:83:cf:4b:ad:b0:ed:3a:7e:e8:
5a:b6:1c:c7:99:68:49:ef:27:85:95:48:f2:97:b9:e9:03:45:
c3:9b:02:5a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWfkxJOrKz+eH8VgP377C4UxaEKYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjExMjExWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MWIwMzRlYzBkMjhiNWYxOTc1NzVhMDliZDVmZGMzMDQ1
ODFmN2JkZWM1MjBjMGQwYzdmNjMwZWI1MDZkNzA1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkkPjYopSbDOg+zwphgHpByznyb5EBOqlPUQzhKTpz60df
BKf3pVTolDeJyKtERgCooPgyZ4AO+VTfHg+fvmbZK8ATpZv4ZjzWjaqZcMmXSGN/
JyFE05GAsfyGXBsjlrS1KFV9yu6nnqFOtdWkcea+17S3RJxL2U6sqopGYS+cvac1
hkrNuFxwMZk7lERDaYhfBWJjGGP+D2CgMZHySxpnroDL3/u6tIKTCE/5j17rVLYL
fJJuLn+JCO8f0wnNPO7VkChq0P5PqpCWU2OdKbjo8N6hbwpUxtP1kQw5QIe/mvuD
+jH3obBHN5iM1SOgcye6pPXZWX3zLEOo9di66QXDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUf8lXDltjEw11McIYw8GgzOMxElwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzgzZTAzNzZjLThiYjctNGEwYS05NWM4LWFhYjI2YTI4MzQ0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAFaIwDQYJKoZIhvcNAQELBQADggEBAHduJ2aP4uNkSQjBRcZJpKDa
EPV8WYQ0lYmBSE0odRlD1YKeW+ZrS0vHV1USRaEQw0htFe+UivsMLT1lbKltvKr4
Be/zH3g1uqHTXMvYueWBSl+az+9fbvq2L7NEMeh8SjM1GrWL7AivWZSMXQd0+Dkl
SdbX0mIto/SKNmQADc8USIIFFsUEzlzXdnMWJ5ZbP9nAgCVzzliw5WR09UwIHP41
zg47hE5fTF3rTDoUQQ2lUTYTW+z4R3STqJ+nx5d6tm4Oeu0z91FjzQcILXrTAcvI
CD8jQAwEq4DJHyB3VO/ExYPPS62w7Tp+6Fq2HMeZaEnvJ4WVSPKXuekDRcObAlo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:34 2025 by rpki-client