
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c8dcd2a-5fae-44e1-b221-0ab4b370109a.roa
File: 9c8dcd2a-5fae-44e1-b221-0ab4b370109a.roa (raw, json)
Hash identifier: Ea7i0GwzCrMzpaD6oy5McfGF6h2ecSrInSV2mEYYWlo=
Subject key identifier: 3B:C0:B2:7D:B2:28:B9:97:FB:3C:6A:9B:C5:E8:09:56:2A:55:08:1E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 19D775D137880EFD9A9CDBDCB0A2EB11E8B58002
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c8dcd2a-5fae-44e1-b221-0ab4b370109a.roa
Signing time: Fri 31 Oct 2025 01:41:25 +0000
ROA not before: Fri 31 Oct 2025 01:41:25 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d58::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d7:75:d1:37:88:0e:fd:9a:9c:db:dc:b0:a2:eb:11:e8:b5:80:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:41:25 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=68c1904d4a7eebe7568843d77698ef4963b976cb4811c04731f115e6f8dbac98, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:93:45:1a:ef:b8:c1:a5:cc:df:2e:c3:e1:
31:d1:20:5c:9f:8e:15:35:3f:b9:f6:2c:08:f3:6e:
63:aa:25:a3:11:37:a3:e2:5a:9a:6d:d2:51:fb:88:
b5:e0:7c:4d:f1:2d:3f:67:92:84:b4:dd:af:eb:f6:
f2:55:0b:fd:8a:17:28:25:c9:ae:71:e1:fe:b9:ab:
fa:52:18:01:59:eb:8e:2b:18:ec:f0:be:39:c3:14:
9a:8d:a3:12:a9:06:ed:a4:96:ca:80:4c:97:8d:68:
a7:1a:75:1b:43:a5:00:21:4f:b6:0f:34:20:29:af:
6e:18:0c:1f:ea:5e:18:fb:52:4c:65:bd:6c:5b:36:
bb:f9:17:55:8e:c9:d0:ec:60:e4:18:5c:df:a4:53:
ee:dd:c8:3c:60:5a:98:77:96:74:16:e7:75:66:5b:
d0:98:5f:d5:88:b5:ab:c6:a8:9d:59:6d:a2:d0:99:
c6:14:bd:bc:f3:97:4c:81:55:8d:98:2d:07:34:fe:
ae:bf:9e:a5:6d:96:f2:3a:2e:c8:40:93:3d:37:a7:
97:da:37:7a:78:3d:bd:73:9c:58:a9:da:58:62:eb:
96:ca:d1:d8:69:85:a3:71:b6:07:55:a4:db:bd:f4:
eb:73:50:f0:fe:30:3e:3e:fb:5f:c8:96:aa:d3:35:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C0:B2:7D:B2:28:B9:97:FB:3C:6A:9B:C5:E8:09:56:2A:55:08:1E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c8dcd2a-5fae-44e1-b221-0ab4b370109a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d58::/47
Signature Algorithm: sha256WithRSAEncryption
a7:ff:3d:fc:3b:a4:49:5a:fd:33:eb:10:c0:93:0d:29:6d:07:
11:f0:88:55:d2:2d:50:91:30:70:4a:d6:d9:d6:4a:bd:18:d6:
d3:9b:63:4a:11:fc:c3:7f:55:ef:7a:8e:e9:eb:86:e9:04:ae:
c9:68:44:c2:e1:0e:d6:89:78:fd:ba:bd:40:2a:41:5b:4e:a5:
7c:61:1f:bf:dc:d6:a2:2d:8b:38:25:24:86:f4:dc:65:51:14:
ca:80:32:ad:f7:42:8e:ff:f7:ee:e2:e3:16:40:d4:e1:29:c9:
04:35:71:2b:90:7f:e0:46:d8:1f:ce:fb:33:5c:c9:8d:6e:06:
5c:e8:b7:13:6b:94:56:82:3c:56:88:36:3f:2c:e4:e9:18:42:
84:89:80:72:6f:69:a7:af:52:40:af:a4:65:20:d4:63:a5:87:
d1:10:f9:46:63:22:1a:fb:22:78:96:b9:32:c6:e9:1d:1a:35:
eb:e6:88:13:6a:53:d4:58:19:8d:88:0e:ae:fc:1f:b4:c1:3c:
39:cd:18:47:59:32:e3:51:a2:60:64:ae:d4:ae:c7:fd:55:41:
12:4c:af:de:19:99:24:05:d2:1d:df:28:82:ec:0e:1b:ab:bd:
ba:8d:11:88:7d:80:0d:f4:5d:20:43:69:70:67:a1:40:25:1b:
22:66:5f:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:30 2025 by rpki-client