
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b48b064-7a4b-43f5-99e5-f7a3aef2e1f7.roa
File: 8b48b064-7a4b-43f5-99e5-f7a3aef2e1f7.roa (raw, json)
Hash identifier: OII4jB1uYNnhPxWNkYR/vLi+5bGYACwjMce4neZINlU=
Subject key identifier: 91:2D:9F:38:75:5E:C6:C3:66:6D:45:24:D0:BC:16:B1:77:55:DC:D9
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1B8D9E3E1ECD427A7ECBFD02462B9AF32C413212
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b48b064-7a4b-43f5-99e5-f7a3aef2e1f7.roa
Signing time: Fri 31 Oct 2025 03:56:28 +0000
ROA not before: Fri 31 Oct 2025 03:56:28 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:31fc::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8d:9e:3e:1e:cd:42:7a:7e:cb:fd:02:46:2b:9a:f3:2c:41:32:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:56:28 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=87304266901a359a6d3eb2cbea2acd55c53e481816df90bd109faad2a87693c8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ab:a8:17:4a:9b:3d:25:ec:1b:e6:d6:d0:a8:
89:a8:80:3d:55:cc:6b:9b:91:45:3e:f1:47:7b:0e:
df:d4:29:70:08:ae:a2:9b:30:2a:1c:6b:85:df:48:
a0:4e:30:9f:a1:22:2b:b6:70:6d:6f:5b:cb:7b:28:
28:c1:68:80:84:41:49:72:e1:3c:1e:6d:b4:41:c2:
0a:eb:1f:a7:d6:42:a2:6a:39:7d:95:25:e7:c3:6f:
a9:bc:8b:96:01:0c:e5:f1:72:6f:28:c1:c6:19:c1:
05:a0:6e:eb:17:77:17:ad:3a:6d:aa:49:d8:d5:43:
f4:6e:c0:4a:e0:01:0f:84:70:c9:59:40:7a:d8:dc:
fa:9e:70:fc:08:84:54:2b:71:77:ad:14:89:f4:2d:
ec:2d:24:76:fa:1d:fb:04:67:72:e1:b6:b2:49:8e:
0e:80:96:30:e1:70:28:c6:41:f0:25:23:d6:13:dc:
d3:ce:99:20:a3:49:1e:ba:b6:a6:d1:03:4b:4a:6d:
8a:5e:e8:bd:68:4e:9f:78:e3:19:56:d7:6a:aa:62:
b6:d6:e3:5c:cf:d4:e3:3e:79:01:9c:29:89:34:1e:
2f:93:9b:df:24:d8:99:b8:fa:0f:af:9a:4b:d1:1f:
e1:63:1f:61:20:a9:cc:d7:e0:4a:3c:29:64:67:b4:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:9F:38:75:5E:C6:C3:66:6D:45:24:D0:BC:16:B1:77:55:DC:D9
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b48b064-7a4b-43f5-99e5-f7a3aef2e1f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:31fc::/46
Signature Algorithm: sha256WithRSAEncryption
57:13:82:e1:41:e3:96:84:b3:fc:f9:d8:d4:02:e4:ca:69:c8:
94:d8:be:08:d4:fd:43:ef:9d:35:90:8b:58:c4:ae:3d:fa:8d:
b2:b6:23:27:46:aa:3a:f7:3b:95:5d:64:c1:93:1d:b7:c0:80:
1c:81:c4:14:60:3a:9d:e3:a8:5a:b9:d3:fe:9b:92:45:27:36:
81:0d:67:d4:da:c2:af:aa:19:4f:6d:6c:91:48:29:d2:29:65:
0e:14:f3:9d:a0:a6:6e:de:03:93:10:4f:c1:02:56:dc:f7:a8:
96:a6:94:64:86:95:a8:b5:cd:54:0e:b0:5f:e0:02:bc:2f:a8:
22:9a:99:54:05:9c:19:15:c5:7b:5e:38:e1:9c:ca:b5:4d:73:
65:7d:a5:81:91:4d:44:63:ad:7c:83:dd:08:90:a0:f8:15:c2:
6a:c7:97:f6:5f:cc:fe:eb:a3:95:f9:e5:b9:59:1c:e8:88:0c:
35:46:30:d8:4b:3a:88:a1:46:d7:c1:4f:fd:dc:f1:71:a3:ef:
84:72:9f:70:be:ba:ac:78:9b:3a:02:00:2e:71:3d:2d:7d:19:
f0:fa:e0:42:30:3b:46:da:8f:c9:f5:14:32:3a:77:7c:f3:fe:
6b:27:ff:48:e9:88:96:ed:2a:ec:72:82:fd:0b:10:5d:d9:42:
26:42:6f:c8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUG42ePh7NQnp+y/0CRiua8yxBMhIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDM1NjI4WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NzMwNDI2NjkwMWEzNTlhNmQzZWIyY2JlYTJhY2Q1NWM1
M2U0ODE4MTZkZjkwYmQxMDlmYWFkMmE4NzY5M2M4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDlq6gXSps9Jewb5tbQqImogD1VzGubkUU+8Ud7Dt/UKXAI
rqKbMCoca4XfSKBOMJ+hIiu2cG1vW8t7KCjBaICEQUly4TwebbRBwgrrH6fWQqJq
OX2VJefDb6m8i5YBDOXxcm8owcYZwQWgbusXdxetOm2qSdjVQ/RuwErgAQ+EcMlZ
QHrY3PqecPwIhFQrcXetFIn0LewtJHb6HfsEZ3LhtrJJjg6AljDhcCjGQfAlI9YT
3NPOmSCjSR66tqbRA0tKbYpe6L1oTp944xlW12qqYrbW41zP1OM+eQGcKYk0Hi+T
m98k2Jm4+g+vmkvRH+FjH2EgqczX4Eo8KWRntFTrAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUkS2fOHVexsNmbUUk0LwWsXdV3NkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhiNDhiMDY0LTdhNGItNDNmNS05OWU1LWY3YTNhZWYyZTFmNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAMfwwDQYJKoZIhvcNAQELBQADggEBAFcTguFB45aEs/z52NQC5Mpp
yJTYvgjU/UPvnTWQi1jErj36jbK2IydGqjr3O5VdZMGTHbfAgByBxBRgOp3jqFq5
0/6bkkUnNoENZ9Tawq+qGU9tbJFIKdIpZQ4U852gpm7eA5MQT8ECVtz3qJamlGSG
lai1zVQOsF/gArwvqCKamVQFnBkVxXteOOGcyrVNc2V9pYGRTURjrXyD3QiQoPgV
wmrHl/ZfzP7ro5X55blZHOiIDDVGMNhLOoihRtfBT/3c8XGj74Ryn3C+uqx4mzoC
AC5xPS19GfD64EIwO0baj8n1FDI6d3zz/msn/0jpiJbtKuxygv0LEF3ZQiZCb8g=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:30 2025 by rpki-client