
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96eb039f-29cc-4dea-baa8-d023430bc179.roa
File: 96eb039f-29cc-4dea-baa8-d023430bc179.roa (raw, json)
Hash identifier: rStM3TFF2RzJVSbpX6Chtw48+ZJNNeKKJmPC+BQ+208=
Subject key identifier: 92:0B:4E:3F:B0:F7:B8:97:F7:4D:8A:C4:4E:DC:FF:94:D5:1E:80:E4
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 31C82FB9E2CD20E9C2FBCA093B4AE4D8D3D073
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96eb039f-29cc-4dea-baa8-d023430bc179.roa
Signing time: Fri 31 Oct 2025 06:51:58 +0000
ROA not before: Fri 31 Oct 2025 06:51:58 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ce0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c8:2f:b9:e2:cd:20:e9:c2:fb:ca:09:3b:4a:e4:d8:d3:d0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:51:58 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4c91647ce02d42390d97c93d94da4882f0a3a0eec1994c7bff83e9044bc42cf1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:50:a0:8f:91:a0:95:ce:d8:ef:83:08:2b:
90:eb:eb:b3:a7:a2:7a:42:b0:de:3b:41:17:65:2a:
2f:2b:fc:6c:e0:07:5c:18:ab:4b:7a:0d:8f:2d:2e:
78:5b:9c:31:09:54:e7:f4:4b:e0:95:65:87:33:08:
e9:96:08:9c:8f:a8:4e:3d:d8:dd:61:f0:9a:a1:b3:
a8:c0:a0:d6:97:54:31:e1:68:71:50:04:17:16:f3:
bd:95:8d:82:37:b4:bc:4a:c8:46:95:42:ed:f8:86:
f7:c2:b0:ac:cb:e0:c9:ce:c5:44:fa:a9:12:75:8b:
30:97:0f:3e:69:30:dc:9c:05:92:86:c7:ae:12:b4:
79:82:dd:6e:b3:04:de:8b:35:96:14:eb:52:d5:c6:
d8:53:c8:c8:10:da:32:da:e4:1f:d5:6f:65:8e:1b:
e9:d8:d5:6c:76:26:76:c3:af:b4:da:5b:43:8f:d9:
f6:c5:07:22:43:6a:c4:b1:c8:25:34:61:1a:f4:6c:
d8:ad:f5:91:6e:1c:3b:40:a0:f3:ea:64:dd:6f:61:
8c:1a:53:63:36:a2:08:48:11:df:09:3f:52:e0:d0:
ac:2e:74:d9:1b:cd:1c:b3:07:74:2f:ea:ec:f9:f7:
41:0b:ab:65:d4:b5:f1:f7:6e:86:06:0d:5a:8c:ee:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0B:4E:3F:B0:F7:B8:97:F7:4D:8A:C4:4E:DC:FF:94:D5:1E:80:E4
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96eb039f-29cc-4dea-baa8-d023430bc179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ce0::/44
Signature Algorithm: sha256WithRSAEncryption
b6:14:e0:44:3d:34:d2:c5:09:ad:54:10:3f:f4:a3:b4:59:2e:
a6:a9:91:84:10:7f:42:a8:e3:f6:ef:dc:ec:2a:cd:10:0e:c4:
bf:5b:7a:60:61:47:04:ce:e8:77:06:5b:8c:e7:18:7e:89:e5:
39:8d:a9:27:23:80:ae:eb:54:96:6f:f5:a4:b6:65:78:87:55:
ce:cd:e2:32:62:b5:32:17:39:81:b3:e8:3a:73:da:c7:60:e1:
52:56:29:6f:2c:7e:c0:96:3a:7d:5e:3b:a0:76:8b:db:90:80:
8a:39:90:03:3e:00:eb:8e:a0:a8:64:5d:5e:06:19:d0:4a:92:
4d:cd:8d:3a:e4:32:67:23:d5:e0:9f:31:24:22:4f:44:80:b4:
e8:f9:6e:34:42:bd:01:17:da:c6:1c:89:f8:1a:53:f3:80:69:
9c:10:fb:68:ee:bf:b0:2b:80:da:18:d9:de:95:8a:49:d7:bd:
ce:0c:11:d2:a6:9f:5e:d2:fa:29:93:ab:0c:f1:4d:fe:85:61:
d8:61:6a:51:ff:1d:46:c3:e2:92:41:27:32:c0:d4:64:3e:95:
13:f5:40:a7:18:87:44:93:2c:6b:fb:53:50:bd:04:5f:54:69:
09:c3:30:d4:ee:28:30:2d:5d:66:4c:cb:f9:7c:4d:93:82:ff:
81:c1:95:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:53:46 2025 by rpki-client