
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9972ce14-5d74-4d6e-9182-f8507e5572ed.roa
File: 9972ce14-5d74-4d6e-9182-f8507e5572ed.roa (raw, json)
Hash identifier: qH+DMRx0L+PzybgrSyqtS/GdE0iE5LGgXOwILxiDQKA=
Subject key identifier: 37:D3:EA:F8:85:4D:B7:78:42:73:F3:98:5D:A0:10:0B:80:D4:18:85
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 78C18E8DC84027313B627D400EA44211F3C5D625
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9972ce14-5d74-4d6e-9182-f8507e5572ed.roa
Signing time: Fri 31 Oct 2025 04:13:37 +0000
ROA not before: Fri 31 Oct 2025 04:13:37 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:368c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c1:8e:8d:c8:40:27:31:3b:62:7d:40:0e:a4:42:11:f3:c5:d6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:13:37 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=f1e843c9703149ee77662aea16d04af72bf8d35fc377673a29212c7a242588eb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:5b:5d:04:e4:5b:72:b7:8c:d7:1b:9f:84:
e7:e4:b1:d4:bb:98:88:e5:eb:3b:69:c2:76:be:3e:
02:c6:88:a2:cb:47:dd:65:42:ae:b9:fd:6d:18:13:
a2:7a:d6:8f:f3:48:ec:0f:37:bc:6c:d6:a9:cc:7e:
24:bf:09:ec:c0:c0:a8:c8:59:e0:0d:0a:27:45:af:
a4:af:aa:ad:ff:fd:7b:08:d1:60:08:10:d8:4a:b1:
6d:a6:1f:fe:85:74:53:b9:7b:49:27:fd:2b:cb:e3:
fa:48:44:4b:41:ce:23:d6:03:fc:5a:8b:79:36:e7:
d5:3a:b0:3a:98:e7:2a:fd:c9:b8:86:f2:8d:35:4c:
a5:4b:dc:0a:cb:a8:48:78:73:25:c2:8e:aa:48:22:
7a:82:00:07:38:e3:25:14:c6:e1:90:12:9b:47:0e:
25:1c:36:79:bd:14:20:f6:29:cb:6f:09:9d:84:51:
48:80:7e:6a:00:f9:13:bd:13:e8:0c:9f:3b:c0:84:
a3:b5:da:dd:10:3e:52:bf:38:cd:13:b3:67:a5:7b:
a9:8a:c0:d1:ed:32:fe:eb:bb:19:96:60:97:ca:2c:
24:3f:46:d5:30:1d:6e:a7:65:65:0c:ae:31:98:6b:
64:95:65:a6:9f:93:cc:be:6f:04:4e:63:1a:e6:b4:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:EA:F8:85:4D:B7:78:42:73:F3:98:5D:A0:10:0B:80:D4:18:85
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9972ce14-5d74-4d6e-9182-f8507e5572ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:368c::/46
Signature Algorithm: sha256WithRSAEncryption
82:2a:17:76:dd:72:79:ce:20:cd:ce:24:d9:c8:8b:0c:38:7a:
41:95:b4:e0:f4:55:6c:f0:73:a8:e5:ed:72:44:7b:b2:c8:11:
9d:77:bf:c2:34:2a:13:48:68:d9:59:a7:ad:3b:85:a6:fd:fb:
d5:89:66:c8:b7:50:8c:76:bb:a1:ef:21:64:2e:e4:77:f0:85:
e1:64:72:a4:43:ef:19:66:d1:d0:67:06:ae:86:ae:c4:ce:98:
a5:a6:af:0d:8c:27:af:00:76:07:8e:f9:71:65:7d:91:2c:e1:
6a:da:7f:77:4e:7b:1d:fb:0c:1c:9d:1b:d7:02:7f:14:46:e6:
f9:05:05:e7:f0:19:2d:8d:7e:b7:97:13:00:08:1d:70:4a:b3:
cf:f2:21:f2:e2:32:77:7c:2e:ab:b6:8c:83:ce:e5:c8:55:be:
dc:cc:d1:a4:17:eb:19:e5:ae:96:cc:fd:a4:e2:51:16:93:57:
54:1a:6b:53:02:ca:02:0b:89:b5:3a:6b:ae:37:2d:7a:7f:8f:
1c:fa:d6:34:28:22:40:d3:9c:ad:54:60:1f:ca:d4:dd:65:c7:
69:32:5c:a7:12:25:f4:05:f0:9b:15:0c:00:49:a8:a0:ce:2d:
68:90:93:c1:21:4b:b1:d4:a1:7f:bf:90:dd:47:14:87:36:71:
8e:2f:e0:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:51 2025 by rpki-client