
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8cbdc924-48e0-443f-be7a-9a77902eb5c1.roa
File: 8cbdc924-48e0-443f-be7a-9a77902eb5c1.roa (raw, json)
Hash identifier: LB5RkZOkGjOnHeeqMDDUTcEXq15LkC8VCprKoNJ6Dck=
Subject key identifier: BA:B0:AC:4D:B0:74:3E:06:5A:EB:B3:D3:2F:91:D3:EE:B1:90:C4:06
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 63466CB224166DD401E630E18638205173375139
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8cbdc924-48e0-443f-be7a-9a77902eb5c1.roa
Signing time: Fri 31 Oct 2025 04:51:55 +0000
ROA not before: Fri 31 Oct 2025 04:51:55 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d2c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:46:6c:b2:24:16:6d:d4:01:e6:30:e1:86:38:20:51:73:37:51:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:51:55 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=09515f1b1e443b926b26ab90bd8665cf4282071b087cf70cc5ea0d41cab4b5da, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:80:47:43:f1:a3:51:cf:2f:ad:00:93:ff:
bc:64:7f:58:14:b3:bb:4a:dd:6e:57:7e:db:12:9d:
6e:cb:fa:26:0c:05:ac:7e:35:5a:c8:81:46:0a:b9:
23:ea:25:9c:6c:8c:ca:4b:15:a9:82:97:c9:39:20:
7e:8c:df:fd:a5:f3:47:bb:89:c4:df:00:09:91:0a:
61:f9:0d:34:4c:05:76:22:f5:6b:54:2e:c1:2e:37:
d9:cf:87:4a:26:48:95:53:26:03:82:2b:96:e0:18:
21:a7:24:16:33:77:1e:26:e1:26:cd:b5:bd:72:f8:
51:4b:a1:29:09:c8:cd:6a:6f:86:ec:58:9b:a5:da:
72:6b:6e:8a:1d:3d:c6:1d:cf:54:ea:1d:6a:4b:92:
c4:90:6a:da:81:57:c8:1c:f4:a5:37:78:9a:08:e2:
fb:3c:2f:1c:3b:24:b0:e0:66:97:fe:c2:24:14:cc:
0d:37:0e:d4:fd:40:4c:80:1e:b1:cb:a3:4f:4f:5f:
e0:42:0e:d9:fe:60:cc:f6:a8:d1:23:74:e2:71:19:
54:6e:6c:3c:92:81:3f:de:01:31:f9:92:d8:1b:dc:
10:f5:b9:e6:ba:65:5f:e2:4d:a9:a2:49:d1:59:e6:
84:cd:04:72:b1:99:c9:a5:55:27:f3:ec:53:ac:a7:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:AC:4D:B0:74:3E:06:5A:EB:B3:D3:2F:91:D3:EE:B1:90:C4:06
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8cbdc924-48e0-443f-be7a-9a77902eb5c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d2c::/46
Signature Algorithm: sha256WithRSAEncryption
39:a9:ac:a7:a7:71:55:73:ff:3f:d0:5e:89:45:83:47:0d:32:
c8:f5:da:d4:11:50:c4:06:5b:35:8d:3d:46:25:a7:78:0f:58:
a0:8f:a5:3e:3d:32:bf:ea:b2:4a:70:e1:38:d6:af:0a:c0:bd:
da:29:dd:1b:ac:2c:8c:34:1a:6b:70:8a:58:e3:83:75:53:4a:
1a:28:0a:28:99:80:22:36:d1:4f:2c:c2:56:4e:c0:62:7e:85:
e2:91:1c:c9:99:01:b9:61:ad:64:99:5d:cf:08:c5:a8:c7:3e:
7b:20:85:a8:35:22:0a:b4:8f:27:dc:61:3c:eb:53:81:c5:8e:
25:2c:e0:3a:2a:ec:ca:6c:c2:b5:19:d2:8c:ba:46:3c:1a:4c:
0f:aa:c8:13:1e:6c:9e:55:39:b6:f0:83:5e:ec:52:ba:66:2d:
d7:a3:06:7b:e3:46:84:97:d3:01:58:46:a2:a9:a6:cb:5c:23:
d2:f0:e4:e9:67:30:27:19:cb:f7:cf:86:1b:63:27:02:c3:29:
01:c8:fa:b7:89:ff:1b:a7:9e:f3:87:5c:ee:d9:21:78:b9:3e:
1a:5c:d1:4d:87:11:a0:78:f0:e9:91:d4:9a:29:87:06:bf:91:
5c:d5:ad:83:93:13:cb:a6:ec:53:97:96:3a:86:47:2a:a7:69:
92:e5:8d:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:45 2025 by rpki-client