
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9095aa03-27bc-43d8-b765-c533afc7ed72.roa
File: 9095aa03-27bc-43d8-b765-c533afc7ed72.roa (raw, json)
Hash identifier: MEzEBTDkhZx/coJd0nj7P4MDKvlTHoUWyxkLFAgAg00=
Subject key identifier: 5C:6C:EF:19:AD:4A:84:D6:F0:D6:F8:76:4F:52:1F:6A:D1:2D:87:88
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4A238BDD4BF8AAB62D36AE70D412D37F8BA1FBC5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9095aa03-27bc-43d8-b765-c533afc7ed72.roa
Signing time: Thu 30 Oct 2025 23:40:37 +0000
ROA not before: Thu 30 Oct 2025 23:40:37 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ec2::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:23:8b:dd:4b:f8:aa:b6:2d:36:ae:70:d4:12:d3:7f:8b:a1:fb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 23:40:37 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=ae5ca7edc1160a1c811e3ae1162782e21b6654b78989c2b43f3f8e71fb2b0496, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:b8:2c:23:ae:9f:ac:de:6c:13:ac:9c:8f:
60:24:8d:e3:cf:82:ae:cc:ca:85:89:8c:cd:6f:90:
2c:e6:43:4d:ed:eb:86:70:a9:b7:a0:03:be:a4:ff:
86:13:17:ed:74:25:a7:b4:62:6a:32:6d:be:10:d5:
7e:01:73:28:93:28:e9:17:bc:89:7b:3a:bc:33:d1:
c3:10:16:45:13:27:42:0e:88:52:13:d6:32:b3:3d:
44:e2:4c:21:21:0b:9f:e9:89:40:41:51:38:04:8f:
bf:f4:cf:62:0b:07:09:88:d1:f2:28:82:45:2b:98:
6e:26:b9:27:7d:66:4c:6c:5c:a2:aa:cf:63:76:84:
71:77:89:5f:de:ba:5b:1f:9e:c9:d1:60:c1:ca:6f:
2a:0e:64:2c:59:e3:b5:02:c3:2f:f6:53:15:75:bf:
b6:7f:87:e9:62:df:72:3e:51:7d:27:17:62:90:3f:
f8:38:c8:43:e1:e8:e8:2d:4f:70:81:e5:bf:5d:3a:
e8:63:3c:3d:e1:ba:f2:3a:b1:94:14:00:ae:71:eb:
f9:07:54:53:84:97:64:88:8e:c9:78:93:a8:25:b7:
97:72:56:88:3e:97:96:0b:97:22:2d:4f:5a:0d:03:
f4:6d:da:de:69:c3:da:c5:f0:c1:50:d7:8b:ae:4b:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:EF:19:AD:4A:84:D6:F0:D6:F8:76:4F:52:1F:6A:D1:2D:87:88
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9095aa03-27bc-43d8-b765-c533afc7ed72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ec2::/47
Signature Algorithm: sha256WithRSAEncryption
b5:1b:18:b1:ed:e0:89:76:76:46:52:10:27:3f:93:90:38:77:
a1:7e:17:f2:d0:02:e9:d5:e5:66:07:9a:c5:2b:eb:2a:1d:c5:
dd:73:e8:a0:f5:ef:62:d2:96:5b:61:91:3d:f0:84:99:d5:e0:
ce:33:87:48:51:43:40:48:7d:8f:43:41:5f:e7:f4:c9:e1:96:
c1:99:00:03:08:7a:21:3b:5c:47:e3:83:25:c5:91:e5:61:c3:
a3:a2:89:88:97:18:ac:95:54:2c:59:2a:bc:bd:57:77:9f:71:
73:6f:d4:58:bf:59:9c:05:26:45:f4:6e:4d:08:06:a9:90:98:
21:67:6d:2b:5d:c3:54:f4:42:0a:d7:ec:96:02:f3:3a:11:71:
cf:44:09:ce:4b:af:b0:fe:d7:34:aa:d8:0d:7c:26:ed:3d:f3:
6a:02:1b:54:0e:ad:60:b8:bd:e6:e6:20:9b:35:2b:05:a3:c7:
fe:c0:8f:02:58:6c:ab:85:1b:fa:78:19:e0:73:b4:f2:d0:d0:
dc:81:23:71:9e:04:cf:ab:eb:89:fe:96:bf:d4:88:2a:60:e4:
0b:e4:e4:48:6f:4f:2c:3b:61:89:ba:d2:5b:0d:b4:b0:95:eb:
89:99:97:cc:88:24:54:c2:0d:93:8c:0f:d2:a0:68:aa:7e:4d:
b9:82:36:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:51 2025 by rpki-client