
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/944fce98-9f54-4fe5-a221-4ee2a4470f17.roa
File: 944fce98-9f54-4fe5-a221-4ee2a4470f17.roa (raw, json)
Hash identifier: sbJfcwmLc1uZvIE7+zXBph2cOQZJqUDGP0NbTaOhRTQ=
Subject key identifier: DF:92:1A:9A:05:84:C8:FA:C0:7B:CD:6D:42:08:7D:92:82:96:B0:AD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 07787E59F96573A00F622C5A0E86E31B39B79D1D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/944fce98-9f54-4fe5-a221-4ee2a4470f17.roa
Signing time: Fri 31 Oct 2025 04:53:40 +0000
ROA not before: Fri 31 Oct 2025 04:53:40 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3e10::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:78:7e:59:f9:65:73:a0:0f:62:2c:5a:0e:86:e3:1b:39:b7:9d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:53:40 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4b7874868a5849ca410c37356d5957e1fcf7cf4eb4886c95c9a93314174af7ce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:1c:2e:d6:72:71:f9:9d:5a:ce:fa:6b:03:
13:2e:2d:33:68:6d:61:e9:46:24:1d:8a:2d:c2:f5:
bf:8a:fc:ae:d6:bf:f3:fc:ab:21:db:6d:cf:ae:67:
82:94:d6:6a:69:81:17:52:b3:a1:53:56:a3:59:82:
58:c2:c0:cd:69:c6:60:91:40:3d:ff:de:ea:0b:27:
ac:04:66:4e:d8:b9:a2:5a:68:21:b3:16:94:c6:a7:
b1:ad:6a:8b:d2:0c:d0:94:2f:42:ee:43:ea:1f:91:
42:c2:67:65:2f:36:41:37:40:53:d8:53:2f:e1:2d:
64:d2:35:63:57:29:37:c3:f7:3b:7a:ec:81:7a:58:
ad:3d:03:9a:9c:77:db:19:62:6b:49:5f:95:3a:37:
15:6f:19:97:df:83:d7:09:74:46:55:af:7c:a2:6c:
85:e9:9d:79:1c:be:8c:1a:3f:c1:36:b6:5a:21:76:
91:4f:34:1d:d4:6e:46:90:b4:3d:7d:e5:89:57:16:
39:4e:e6:eb:d0:b7:9b:a6:7f:54:54:e0:0c:3b:d3:
3d:6e:94:49:fc:15:07:07:34:22:6a:e3:79:c0:aa:
94:bc:c4:1e:b5:46:ea:ca:d6:f9:32:19:a7:45:5e:
44:9d:69:57:e1:b3:be:8a:41:b3:4a:39:31:a2:47:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:1A:9A:05:84:C8:FA:C0:7B:CD:6D:42:08:7D:92:82:96:B0:AD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/944fce98-9f54-4fe5-a221-4ee2a4470f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3e10::/46
Signature Algorithm: sha256WithRSAEncryption
02:cb:0d:01:e7:4d:f9:ae:ed:36:da:87:76:8e:e7:bb:1c:c8:
2f:a0:d0:ae:5f:64:b7:33:27:8f:10:bf:b9:e9:c4:b1:a8:a8:
8c:0a:39:42:14:9b:0d:64:f5:8e:22:c7:5a:7a:3c:ae:04:b6:
08:8d:77:ca:0c:d0:b3:dc:02:be:7e:bb:36:05:bc:48:d7:51:
75:e7:b6:fe:92:ad:98:75:f6:dc:7e:7c:db:0c:c3:8a:93:ec:
0c:44:4a:c4:fc:8e:22:02:8e:7a:aa:d1:98:9e:e8:6e:5e:e9:
03:97:04:57:68:9c:af:b4:5f:e6:82:d6:7f:45:fe:56:0b:31:
41:2e:84:58:b1:b7:dc:ba:73:c6:60:5f:45:77:e7:63:01:32:
19:50:c5:04:86:3e:fb:45:b8:e2:63:44:18:26:66:59:4f:72:
c6:8d:e3:43:56:71:dd:29:26:9a:e1:c1:66:3e:44:1c:45:a6:
83:77:28:be:32:34:c7:ac:fc:24:8b:5d:66:2e:c1:71:d1:06:
25:bc:09:4c:cf:2a:87:ad:c9:7a:2e:27:93:41:34:fd:f4:d5:
49:84:9b:6c:a6:9f:14:17:2d:44:fb:08:73:03:00:03:fe:b9:
6e:2b:e8:30:e9:82:ca:24:f8:f5:3c:54:8c:67:e1:bf:3b:c5:
7d:5f:47:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:27 2025 by rpki-client