
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa
File: 8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa (raw, json)
Hash identifier: 4BQ8UcNLO1zm9r2DEfm00giuec8+IjI/BFw7MQ+UG3g=
Subject key identifier: 3A:7C:6C:2B:71:C9:14:7F:08:BE:66:9D:60:5E:A9:F4:22:6F:C0:CA
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 76E42DCEF06B9DE20689E005BF0E36CD5F27BC24
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa
Signing time: Thu 30 Oct 2025 22:55:25 +0000
ROA not before: Thu 30 Oct 2025 22:55:25 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:29d0::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e4:2d:ce:f0:6b:9d:e2:06:89:e0:05:bf:0e:36:cd:5f:27:bc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:55:25 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=6b17c1c1785ba984f88de33d5304a728f24f8c9a625b42b58e633347c23ed11f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:37:70:84:c3:fd:6b:3b:d9:09:1e:1c:5f:
db:51:2d:eb:9f:4d:21:c1:26:62:6b:35:d3:7b:00:
ae:aa:d6:0f:01:58:6b:44:52:2e:aa:cd:67:4f:f4:
3b:8f:0d:32:e2:8b:26:10:d2:43:20:ed:dc:40:54:
2e:c1:04:3a:75:d4:bf:8d:d5:0d:d8:09:b0:fe:d6:
f6:a3:ae:1f:08:d7:6e:f5:23:3f:35:71:8e:70:e0:
57:40:96:f6:0c:4c:bf:ff:d7:3b:a7:6d:f0:7a:59:
57:74:be:3a:3a:89:cd:31:a3:41:65:e1:1b:0a:26:
52:c5:70:50:2e:a8:69:4e:33:88:9e:ce:a4:74:8e:
8b:6f:80:c8:a7:59:b7:d3:71:6d:53:8f:25:73:ca:
f3:6c:48:40:de:85:87:ea:b5:59:0c:5c:1c:15:25:
38:81:ff:b3:1a:8a:b9:16:1f:2b:18:73:9c:ae:10:
55:71:51:18:1e:37:5c:a8:de:68:55:15:af:e7:21:
0b:9c:46:e3:da:e8:a6:9f:ee:20:92:d8:ae:7e:df:
a2:4c:e8:86:81:9a:2b:58:2e:6a:21:14:53:08:44:
80:4c:62:eb:a5:27:b2:70:34:e3:b0:84:7f:8e:61:
28:68:34:2c:6b:23:ea:ee:06:7f:3e:65:a0:b8:04:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7C:6C:2B:71:C9:14:7F:08:BE:66:9D:60:5E:A9:F4:22:6F:C0:CA
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:29d0::/47
Signature Algorithm: sha256WithRSAEncryption
56:20:10:bb:a7:51:bb:a3:f1:9a:db:31:c8:f3:cc:45:5c:8c:
fb:a4:1c:56:af:a0:b4:e0:bd:a3:3d:65:e3:f3:51:29:bb:6c:
8c:1a:68:ad:0b:e5:c9:36:32:05:dc:02:3a:e7:48:cd:71:7d:
35:15:74:cb:69:a4:5b:a7:86:34:3f:12:08:8d:e9:e3:d7:cb:
be:b4:ef:34:cd:f4:28:69:3a:7a:e1:90:73:b4:f6:70:86:4e:
c9:48:fe:b5:a7:11:39:30:5a:4e:9e:4b:1b:26:12:e7:e2:e8:
28:33:a2:cd:d7:7f:2c:d3:c9:7e:da:39:0a:52:a6:d9:af:06:
b4:76:61:d4:c9:f4:e3:85:1e:cf:42:35:10:d8:27:d5:a0:b3:
87:58:c0:6b:e3:09:2d:d0:d4:da:b1:92:c6:f4:f1:1c:cd:de:
1d:47:a2:4f:dc:79:d0:5e:51:96:3b:af:d0:db:46:db:d1:52:
61:41:1f:e1:e7:2f:ea:2c:4e:0a:5b:c9:6f:84:6b:da:b9:86:
a5:20:57:5e:37:bf:54:ba:89:7b:b5:52:b9:24:fd:02:b1:e4:
fb:8a:9e:ee:3b:0d:4a:29:13:e7:9f:06:80:6b:b0:3d:96:c4:
d1:dc:a2:dd:e6:30:5f:10:64:1b:3b:a3:0a:b0:bd:77:d6:1f:
d6:48:0c:e8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUduQtzvBrneIGieAFvw42zV8nvCQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI1NTI1WhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YjE3YzFjMTc4NWJhOTg0Zjg4ZGUzM2Q1MzA0YTcyOGYy
NGY4YzlhNjI1YjQyYjU4ZTYzMzM0N2MyM2VkMTFmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCs3zdwhMP9azvZCR4cX9tRLeufTSHBJmJrNdN7AK6q1g8B
WGtEUi6qzWdP9DuPDTLiiyYQ0kMg7dxAVC7BBDp11L+N1Q3YCbD+1vajrh8I1271
Iz81cY5w4FdAlvYMTL//1zunbfB6WVd0vjo6ic0xo0Fl4RsKJlLFcFAuqGlOM4ie
zqR0jotvgMinWbfTcW1TjyVzyvNsSEDehYfqtVkMXBwVJTiB/7MairkWHysYc5yu
EFVxURgeN1yo3mhVFa/nIQucRuPa6Kaf7iCS2K5+36JM6IaBmitYLmohFFMIRIBM
YuulJ7JwNOOwhH+OYShoNCxrI+ruBn8+ZaC4BGp3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUOnxsK3HJFH8IvmadYF6p9CJvwMowHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzg5MDVjZTAzLWRjZmUtNGYwYi04OGQ1LTMzMzhkNGFlNTZlNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKdAwDQYJKoZIhvcNAQELBQADggEBAFYgELunUbuj8ZrbMcjzzEVc
jPukHFavoLTgvaM9ZePzUSm7bIwaaK0L5ck2MgXcAjrnSM1xfTUVdMtppFunhjQ/
EgiN6ePXy7607zTN9ChpOnrhkHO09nCGTslI/rWnETkwWk6eSxsmEufi6Cgzos3X
fyzTyX7aOQpSptmvBrR2YdTJ9OOFHs9CNRDYJ9Wgs4dYwGvjCS3Q1Nqxksb08RzN
3h1Hok/cedBeUZY7r9DbRtvRUmFBH+HnL+osTgpbyW+Ea9q5hqUgV143v1S6iXu1
Urkk/QKx5PuKnu47DUopE+efBoBrsD2WxNHcot3mMF8QZBs7owqwvXfWH9ZIDOg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:16 2025 by rpki-client