
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e851e93-bc0f-4528-a944-8bcf91516b6b.roa
File: 9e851e93-bc0f-4528-a944-8bcf91516b6b.roa (raw, json)
Hash identifier: fNI3C2nhMQ76GweBg3UioyaNzF2QMslnN7/YqbzIJlI=
Subject key identifier: 44:92:88:08:91:AC:6E:31:AC:EE:48:9A:76:FC:00:C2:B2:46:15:11
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 40CFC879DA47197549B55308676115DD0D58D9F4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e851e93-bc0f-4528-a944-8bcf91516b6b.roa
Signing time: Fri 31 Oct 2025 03:54:59 +0000
ROA not before: Fri 31 Oct 2025 03:54:59 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2fb0::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:cf:c8:79:da:47:19:75:49:b5:53:08:67:61:15:dd:0d:58:d9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:54:59 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=76f411d0b9d538fdeed70b35919e3e2f129be216907fbe37cd649da64e712066, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:e4:44:c4:c7:15:4d:7b:e0:48:8c:8c:75:
c4:71:b8:c8:07:85:d6:90:e3:6a:f2:27:7e:97:42:
67:75:d1:bf:c2:6f:dd:f7:4e:70:a1:1c:22:38:a5:
ba:93:bf:d0:d0:f2:4b:f4:98:52:45:d9:d6:eb:39:
d3:36:4e:33:16:7b:e5:39:42:20:d8:3e:bc:2a:29:
be:25:44:5a:83:66:e6:2f:07:ca:fb:a6:1f:c9:9e:
c7:ab:99:1b:87:be:60:ab:ee:9f:7b:a3:de:2b:78:
27:9d:18:46:38:58:ee:70:af:62:0f:5e:0d:3b:cc:
7b:c3:50:20:1d:3d:c8:1e:a2:11:82:b1:9b:79:43:
f7:8f:3d:7c:ab:68:bd:33:a6:53:f0:e3:ab:e0:24:
78:dd:59:70:51:44:9b:3b:22:64:f4:dd:13:89:0b:
f6:53:6f:78:a2:8f:c1:9c:d7:8b:34:05:be:a5:83:
7f:23:6e:c0:ef:c9:7e:06:71:df:7f:b7:94:e2:92:
3f:b2:8e:a5:49:a8:91:a7:17:fa:27:47:4f:57:cc:
bc:64:96:60:9a:80:5b:d1:13:54:e1:21:5b:d4:45:
a7:e4:fc:d9:06:3e:51:68:1c:1e:d4:fd:06:f1:2c:
d0:c9:9a:4e:2b:41:c2:02:17:7c:6b:93:da:5d:e2:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:92:88:08:91:AC:6E:31:AC:EE:48:9A:76:FC:00:C2:B2:46:15:11
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e851e93-bc0f-4528-a944-8bcf91516b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2fb0::/46
Signature Algorithm: sha256WithRSAEncryption
03:3c:72:d8:70:f4:80:46:70:2a:19:d6:dc:a4:3d:e5:b0:fb:
f1:d5:b6:39:9b:d3:f4:a5:69:f5:e3:6b:dd:ab:a6:e3:ce:b1:
47:c7:a0:ac:34:b4:45:49:b3:75:31:a2:4b:3f:05:2a:7f:a5:
df:29:25:b7:41:1c:fe:01:5d:bf:4f:18:35:19:50:97:84:d9:
91:38:64:c9:bd:35:b1:65:34:d1:f5:32:80:bb:e0:b7:37:19:
47:5a:a1:2e:50:6e:90:52:66:1d:00:30:3d:cf:82:c0:55:b2:
5b:5d:31:9d:1a:e8:48:8d:ce:c3:90:5c:7d:4c:b2:33:10:43:
81:82:bb:05:dc:a5:fb:6f:2a:c2:0d:91:a3:53:8e:78:fa:c5:
6f:52:6e:89:b3:62:bb:76:a7:c6:96:65:ac:9a:74:aa:b7:64:
94:41:05:84:27:29:e4:05:81:0d:1c:03:4e:7c:d1:d2:66:89:
b8:1d:34:cc:cd:8e:b9:56:a8:26:73:c6:71:2f:6c:db:84:70:
8f:3a:55:bb:12:b5:40:10:c0:a1:e6:fd:db:df:4c:9d:45:66:
f8:b4:c8:1c:eb:19:2f:ac:d8:ab:02:fa:5d:ae:80:b6:4b:d8:
87:9c:b4:08:53:dd:fc:ea:77:31:ac:66:54:4c:b2:f8:d8:22:
3c:db:84:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:23 2025 by rpki-client