
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b5fb0fc-a870-4d3a-b58b-33043837e4d7.roa
File: 9b5fb0fc-a870-4d3a-b58b-33043837e4d7.roa (raw, json)
Hash identifier: sncOTplpZeNt6HiBIEGMnya4zor8hD2aHKstIzc5wTI=
Subject key identifier: 12:51:AD:C8:0D:89:96:25:9D:CA:0E:50:73:7E:63:11:C2:A8:54:3E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 25BF5A7B66936D6D0921A27B1ADF9A1C750A294A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b5fb0fc-a870-4d3a-b58b-33043837e4d7.roa
Signing time: Fri 31 Oct 2025 04:38:07 +0000
ROA not before: Fri 31 Oct 2025 04:38:07 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3a6c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:bf:5a:7b:66:93:6d:6d:09:21:a2:7b:1a:df:9a:1c:75:0a:29:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:38:07 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=89dfc8ed2b4d510e52f1cb74473742da28f64032038f9376e2ca46c22725a949, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:41:6a:c3:3c:04:24:96:e8:bc:cb:7a:3c:
18:a8:57:ec:c5:91:7d:7a:1e:40:74:9f:88:9a:8f:
ee:3e:ee:04:52:00:85:9c:fb:26:0b:2c:12:db:f7:
c8:71:e1:15:86:bc:bf:3f:7f:e0:d5:f1:e8:20:bc:
a9:a4:59:8a:dc:ba:81:80:43:cb:32:a0:99:41:10:
1c:9b:a0:42:29:21:6c:06:18:09:ab:20:af:79:f4:
a0:ac:b0:06:f4:34:2e:b0:ae:51:a2:4b:aa:8e:f6:
25:70:63:cf:12:42:e2:f4:19:3a:8c:36:3b:b8:01:
cb:61:c9:0a:d9:75:01:63:c1:b1:75:d6:b7:f8:c9:
bb:f9:82:5d:18:36:5d:41:18:8f:08:75:3b:8c:4b:
ba:df:f2:ed:d6:d5:23:cd:e3:da:34:21:ea:1c:ac:
ed:c9:f7:cb:e8:e6:30:ef:13:8e:ed:1c:cd:30:d8:
c6:0f:15:16:8e:8c:a8:e6:8c:fe:8c:50:43:27:02:
2c:1e:39:9a:fb:78:0d:89:76:b4:ce:ac:68:7f:22:
c2:73:b2:fb:ae:b6:59:69:96:30:fc:84:6b:30:ec:
36:b4:58:5c:7f:88:37:d6:cd:91:04:02:51:26:b3:
09:76:f8:78:ca:bc:14:85:98:13:f8:97:28:b7:d1:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:AD:C8:0D:89:96:25:9D:CA:0E:50:73:7E:63:11:C2:A8:54:3E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b5fb0fc-a870-4d3a-b58b-33043837e4d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3a6c::/46
Signature Algorithm: sha256WithRSAEncryption
4f:18:c4:50:17:7d:8f:49:6c:35:12:c5:26:41:fd:b7:0f:af:
48:04:15:3f:7b:03:18:86:60:e7:96:84:3e:e8:77:19:4a:c5:
3e:a3:ab:8e:ef:ef:e9:76:7e:d7:f4:a6:12:36:54:33:78:fc:
47:e2:a1:62:81:79:bf:7c:57:2f:a1:13:01:29:09:e2:3d:b2:
5e:f2:7e:b8:2b:10:a2:9d:65:e3:49:a7:23:54:76:3d:bc:32:
82:a7:ae:d1:7c:39:18:c0:e7:f5:cf:2c:39:61:f9:15:f7:bb:
3e:01:54:50:62:bf:db:c8:bd:5c:35:d0:65:e9:98:05:01:e5:
b7:3f:36:ae:f0:ef:b7:f4:c0:6b:57:47:43:ad:b3:c9:5f:c1:
85:6b:89:a0:a7:46:95:ee:b3:4a:56:87:50:25:62:3d:6f:4e:
76:b1:fd:20:c4:8e:d4:da:2e:ef:e5:51:59:38:07:27:31:4c:
87:cc:b6:28:83:8e:a2:ec:46:db:a3:65:2e:f7:e0:a6:fb:d6:
2b:db:ab:27:25:64:8d:88:e5:eb:cd:dc:ba:1b:07:f1:fb:49:
b1:eb:b6:d7:1a:d3:f2:9b:fa:7b:a8:e4:4c:7e:a5:6d:38:64:
40:47:28:8d:24:c4:18:25:75:8b:75:a4:f5:5f:9a:d6:f3:99:
98:2c:67:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:50 2025 by rpki-client