
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9658a3fe-7508-4fb3-810c-e63d63a5d23c.roa
File: 9658a3fe-7508-4fb3-810c-e63d63a5d23c.roa (raw, json)
Hash identifier: NAvcoqusEPOTRnC129A1Y8gThv9WMOrrn+eCkEJw6sw=
Subject key identifier: D6:0B:F9:58:8A:67:CF:31:93:EB:52:CC:0B:B1:9C:EB:84:08:EE:DF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 39286096FFE0C9A19C8F70D14DEB97E97986A918
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9658a3fe-7508-4fb3-810c-e63d63a5d23c.roa
Signing time: Fri 31 Oct 2025 03:36:57 +0000
ROA not before: Fri 31 Oct 2025 03:36:57 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b64::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:28:60:96:ff:e0:c9:a1:9c:8f:70:d1:4d:eb:97:e9:79:86:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:36:57 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=73713945d7b5b999fb73220d722b9fee7f28a9706040f9a0d9668e6c83c7df81, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:69:b7:42:5e:8a:91:c3:ca:20:c8:e1:fb:
d2:e3:6b:5a:9f:17:3f:96:da:6d:e0:1f:87:ce:3b:
d7:b4:26:c0:01:6a:1a:ab:31:28:7c:69:41:b0:2e:
b5:a3:22:ef:44:60:0a:bc:5b:c1:94:56:3d:2c:b0:
ad:de:26:49:a3:d4:f9:95:50:d7:14:dc:16:6e:fd:
ea:ba:02:e9:b6:11:91:b9:ce:b3:f7:e2:15:48:da:
33:65:04:91:36:69:ac:73:c7:17:92:5e:8b:17:02:
50:83:f7:64:db:c9:c4:63:1e:70:45:4e:e0:02:b8:
20:2f:c7:26:f6:2a:7f:fb:00:c2:60:79:9f:81:5c:
83:34:3a:4f:c9:87:ce:a8:1e:08:eb:b1:2d:57:01:
3d:46:39:93:d5:76:6d:ed:03:43:ea:4c:49:3e:6b:
a5:76:07:60:c9:15:5b:57:47:ff:7a:29:fa:5a:cc:
c3:79:63:0e:23:0c:28:83:f0:df:4a:75:58:d4:64:
e6:90:ee:fc:c1:b7:60:46:c8:ee:9b:8c:f5:8e:9a:
05:26:ed:9d:1c:a6:68:09:95:b8:1c:d6:f2:42:13:
4c:a0:1d:73:52:6f:34:eb:bd:93:69:06:40:d4:fa:
a0:c6:9b:c2:11:fd:97:a8:3e:6b:1c:5c:ae:58:67:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0B:F9:58:8A:67:CF:31:93:EB:52:CC:0B:B1:9C:EB:84:08:EE:DF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9658a3fe-7508-4fb3-810c-e63d63a5d23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b64::/46
Signature Algorithm: sha256WithRSAEncryption
ac:b3:db:8b:33:8b:02:49:49:b3:6b:21:23:71:4e:e5:dd:5e:
6c:6f:1a:8d:aa:f0:13:24:cc:2f:7e:1c:76:c9:ba:ca:14:f0:
ab:81:40:a0:14:af:aa:bf:f2:12:82:26:76:38:e0:03:9b:80:
6e:5f:3a:5b:26:50:75:b7:8d:e1:fc:32:c9:64:74:bb:72:80:
ed:47:c8:7d:f3:00:5a:fb:0d:5f:48:8b:69:8e:e5:45:6b:52:
b8:33:e8:f3:3e:4f:e5:8b:73:b1:77:47:00:67:fe:06:c2:13:
48:b6:d7:cf:6e:58:32:11:26:af:f8:45:6d:e9:da:6f:90:f5:
23:8c:36:2e:40:d3:f4:1d:d2:5a:a9:16:17:c9:14:e1:71:1d:
be:6d:c5:1e:27:36:ff:9c:5e:0c:70:d9:c7:c2:8e:fe:4c:c7:
f3:31:0e:76:03:7a:54:80:c4:88:d2:6f:d4:83:bd:f4:29:47:
c2:51:bc:9f:ec:a4:e3:47:ff:5e:96:6b:3a:10:e8:dd:f0:77:
b2:a0:ed:91:26:e1:2f:57:07:01:ba:19:df:cb:15:39:02:eb:
76:b1:83:19:71:4a:74:47:fc:54:5b:54:48:16:a8:d2:11:f4:
c0:31:40:60:53:8c:e5:21:b8:e8:17:fe:e8:48:8f:da:23:47:
73:27:09:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:48 2025 by rpki-client