
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9fedbddf-0241-4bb8-9c9e-4e882c4a49b1.roa
File: 9fedbddf-0241-4bb8-9c9e-4e882c4a49b1.roa (raw, json)
Hash identifier: ZMPi5IWj2ffu229hVbWPIVVYLr4qny4IXGrVM4lxWts=
Subject key identifier: D7:29:BB:48:C5:95:5A:B3:D5:62:00:47:A5:A0:CF:63:5A:08:30:14
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 721F2A8F80514417F0D156F7663C8310A6E6683E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9fedbddf-0241-4bb8-9c9e-4e882c4a49b1.roa
Signing time: Thu 30 Oct 2025 20:12:08 +0000
ROA not before: Thu 30 Oct 2025 20:12:08 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:24e0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1f:2a:8f:80:51:44:17:f0:d1:56:f7:66:3c:83:10:a6:e6:68:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:12:08 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=2c3b91ddaf9d8990144cf31ae76ef1e128073b8b151dcda7dff3b78e35916208, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:b1:89:7f:df:da:b3:1b:a1:cd:42:7b:0d:
97:c2:5b:42:f5:38:60:a9:cb:22:10:8f:fe:97:fe:
c7:c2:94:a4:46:29:e6:f2:15:76:82:81:9a:b3:20:
4d:53:7d:f9:16:18:43:d0:34:93:9b:62:cb:63:92:
6d:a8:ff:26:ae:bc:90:5f:97:ab:91:58:5b:0f:b0:
e1:68:06:84:43:9e:f6:fc:07:e0:b3:37:4d:ca:6d:
21:c6:5d:e6:40:e3:93:74:89:fc:a6:e8:72:5d:03:
14:9a:de:c1:57:e8:79:a3:e0:88:93:c9:c5:b2:2e:
81:37:4b:70:10:be:fa:49:66:c5:05:d1:00:da:bd:
27:c5:3e:9f:ac:a1:e9:d0:65:ce:66:f6:1e:e6:0d:
29:05:19:ec:f5:34:8b:aa:35:2d:6e:ad:ef:55:18:
e4:ce:a7:47:09:2d:aa:d5:ae:f0:2a:cf:d1:71:ef:
30:9d:f1:72:ca:65:1d:d7:bd:b0:73:bb:08:23:ce:
f8:74:85:8f:85:d9:cc:b3:9e:db:93:5b:63:9d:f8:
08:40:27:db:c5:08:d8:0c:c7:83:be:a4:8b:83:1d:
38:1c:2d:1d:76:13:11:71:71:8e:c7:91:1e:97:c9:
b0:a1:82:18:04:9f:5f:26:52:36:55:e8:a9:c0:1f:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:BB:48:C5:95:5A:B3:D5:62:00:47:A5:A0:CF:63:5A:08:30:14
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9fedbddf-0241-4bb8-9c9e-4e882c4a49b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:24e0::/46
Signature Algorithm: sha256WithRSAEncryption
69:c7:23:f5:64:d7:57:e3:f8:c2:54:8b:69:4c:52:54:c2:89:
85:46:3e:f6:8b:e6:90:48:a1:65:06:02:e3:b8:92:b0:d4:33:
9f:10:c2:e5:06:78:27:ef:64:7d:fa:b0:62:37:6e:f6:d5:48:
2a:7f:6e:e7:c5:77:c9:a0:16:a3:0b:9f:16:c0:b8:75:4c:e2:
a1:a1:06:44:76:3d:46:91:5b:2b:6b:6e:b2:8d:13:a4:bb:ca:
21:12:cc:58:4c:5e:e4:ed:e7:15:d3:23:db:d7:ed:a6:30:bc:
82:7a:b7:a4:55:ff:a6:dd:5c:96:ec:4f:d0:ca:5b:65:e5:01:
5e:05:2c:b6:f5:7e:89:f5:70:64:a0:f4:c5:bd:ec:94:e8:8c:
36:e7:2a:59:60:26:26:4b:e2:f6:a5:e7:b6:75:5c:0a:b3:89:
6b:7b:c9:86:ca:44:fc:34:f6:7b:9d:bf:a9:ac:a9:4b:09:bf:
a4:eb:87:1f:67:77:9f:a4:3c:f5:4f:2e:5d:3e:ce:ee:1f:48:
3d:66:a0:91:bf:30:7e:8b:87:e1:5f:22:3c:f3:7d:be:a0:26:
54:fc:33:0c:27:54:2d:52:59:02:90:de:38:95:88:27:19:b8:
c8:64:78:2d:7b:29:f5:b4:ef:4e:4f:b8:94:b6:6f:82:38:fc:
16:7b:6c:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:08 2025 by rpki-client