
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/89084ecc-9c9b-45f9-9352-1d4aab22eac8.roa
File: 89084ecc-9c9b-45f9-9352-1d4aab22eac8.roa (raw, json)
Hash identifier: 93XfGH9z6S+uoa/P18GIJU+JeuqYTJ+DZcqI8x2ld6c=
Subject key identifier: 52:37:7A:DD:9F:0B:D9:45:93:DF:34:89:DA:F0:E7:44:9B:AC:49:CA
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1AB90D40B658FF824544E65B5EB964C5AE073361
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/89084ecc-9c9b-45f9-9352-1d4aab22eac8.roa
Signing time: Fri 31 Oct 2025 05:43:49 +0000
ROA not before: Fri 31 Oct 2025 05:43:49 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2c48::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b9:0d:40:b6:58:ff:82:45:44:e6:5b:5e:b9:64:c5:ae:07:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:43:49 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ae8e10cab6c6d5ea4c06879836ef1c7d021794e404c35247be5c5d828bf02462, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:74:37:65:f0:b8:80:52:95:bc:2c:d4:c2:
bd:ba:30:be:eb:93:ea:a2:d8:d3:73:82:b4:87:1d:
9e:8b:16:ed:94:32:44:ff:63:91:a6:4c:2e:77:37:
96:cc:f1:14:20:61:fe:da:31:95:2e:3f:96:46:86:
47:91:d0:35:e0:ab:3b:7f:68:70:a4:ff:49:f1:10:
cc:4a:06:c3:fd:e6:c0:8c:a2:01:cf:8c:fa:7f:00:
88:6f:bd:b1:fd:66:01:58:26:3d:f8:b2:b0:6c:0e:
40:0c:ca:32:bc:c4:3e:7a:f2:05:a3:79:16:4f:fd:
02:33:67:f9:a4:2b:0d:ff:92:78:ae:5e:05:b6:b5:
3c:44:a0:3d:0e:0a:27:35:b9:be:9b:19:37:a0:5b:
71:57:c0:f6:00:3a:03:ea:3d:8b:a5:a2:8f:ea:aa:
e3:53:0a:da:79:e9:df:d2:84:a4:61:ee:5c:94:38:
87:bf:cc:4e:28:4d:eb:4e:89:b0:7b:6c:2c:53:f2:
09:10:81:0a:c3:8a:c7:2b:8d:58:ed:6c:34:9d:75:
a9:09:eb:27:e7:6b:d3:df:50:c2:77:32:22:a8:a1:
6e:2d:72:a9:c7:83:ec:bd:ba:82:8a:d3:a2:f0:c7:
bd:9a:fd:ea:30:86:5e:1f:ab:33:9c:eb:97:ee:95:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:37:7A:DD:9F:0B:D9:45:93:DF:34:89:DA:F0:E7:44:9B:AC:49:CA
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/89084ecc-9c9b-45f9-9352-1d4aab22eac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2c48::/45
Signature Algorithm: sha256WithRSAEncryption
18:ed:63:5e:76:d3:9d:48:66:11:bb:c0:68:ec:14:4f:de:90:
c9:06:0e:3a:13:b7:c6:56:3e:44:99:a5:a2:60:9d:67:23:19:
46:b4:e2:ef:b8:c3:7c:ff:f8:33:a3:8b:c8:38:01:b2:ba:88:
69:5d:8e:10:24:00:68:e8:75:43:a6:6a:40:44:d2:89:d8:5c:
5c:2d:4c:9e:00:16:d2:ae:f0:9b:64:e4:26:06:12:01:91:f5:
08:55:dd:d3:35:e6:f4:54:6c:e2:51:b8:87:e2:a6:f5:e3:03:
8f:22:4f:5d:e2:f6:77:48:19:87:13:fa:1d:d6:00:fa:d6:e0:
37:b5:bd:8d:7b:e6:e7:30:be:9b:f2:8a:26:88:84:a2:f9:fc:
2a:07:c7:b3:1c:7d:11:2a:1c:c8:10:14:c8:14:5b:47:d6:8c:
32:48:d2:4d:04:7f:3e:eb:e2:7f:64:1c:fe:78:f2:f5:8e:cf:
a0:09:72:a5:62:fd:c8:63:57:b1:bd:57:81:24:74:d9:5d:c8:
f1:2c:2a:ce:a2:95:8b:7b:19:07:2a:c1:b6:7b:f5:b2:7b:b5:
4d:8d:b7:50:9d:8d:dd:0f:e7:60:a3:9d:d6:e0:ce:d6:cc:1a:
b3:f2:e5:95:43:cb:6b:32:1e:9b:fc:5b:1b:47:81:81:01:a4:
25:56:25:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:48 2025 by rpki-client