
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a15a3405-1775-400e-96e3-eddb42c4f58a.roa
File: a15a3405-1775-400e-96e3-eddb42c4f58a.roa (raw, json)
Hash identifier: q4aXySWjKvtJzhg1QASSEgAWk05qQRcC7R15glhet3Y=
Subject key identifier: CD:61:37:7C:06:A1:B9:59:5A:B1:90:5B:81:3C:BE:9A:0D:42:DA:9F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 543561F00803099556EE7A3C7192FEB4CD6C6287
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a15a3405-1775-400e-96e3-eddb42c4f58a.roa
Signing time: Fri 31 Oct 2025 00:37:01 +0000
ROA not before: Fri 31 Oct 2025 00:37:01 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:363c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:35:61:f0:08:03:09:95:56:ee:7a:3c:71:92:fe:b4:cd:6c:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:37:01 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=e42babfe994a2e1710dc670d74c7eb32d62ac32db70d321ddd9be410244d6829, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:2d:eb:42:34:d6:14:d1:d8:0e:04:bc:e7:
3a:78:86:6f:c6:44:dd:bb:93:ce:88:c8:d7:7a:fa:
05:ad:b9:d2:b7:3f:02:82:a7:38:a8:11:4a:bc:40:
dc:53:8e:01:c1:48:96:8a:b9:23:f8:14:9a:fa:50:
6e:42:25:52:a5:fe:b9:79:bf:4f:55:ac:4e:42:be:
4e:a7:b1:d3:63:52:c9:a5:75:d6:36:b4:d7:6b:8a:
63:7d:f7:77:99:b7:9c:25:8b:9b:2e:97:3d:70:ee:
69:18:8d:30:63:05:50:52:0c:4d:83:9c:0d:69:81:
fc:3e:c8:65:6e:35:93:46:9e:65:9f:2d:60:ad:56:
72:93:7b:b8:17:c0:e2:88:46:bf:f0:81:cd:c4:fd:
cc:53:23:eb:42:dd:31:9c:ca:7a:7a:63:86:d5:31:
55:25:13:1d:0f:c8:b6:61:6b:bb:90:99:59:7a:d4:
8d:03:b0:8c:98:03:af:5e:35:b6:b4:1c:da:2a:08:
48:8a:19:75:7a:97:d5:28:36:5c:e3:48:40:4a:70:
44:d1:28:fd:75:62:ff:f9:b2:36:1b:c9:79:a8:67:
1d:6a:bc:49:2c:4a:48:88:0b:70:1a:01:15:7a:ca:
ee:e7:f1:b8:c3:69:d7:f5:42:ac:7f:de:d7:ab:04:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:61:37:7C:06:A1:B9:59:5A:B1:90:5B:81:3C:BE:9A:0D:42:DA:9F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a15a3405-1775-400e-96e3-eddb42c4f58a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:363c::/47
Signature Algorithm: sha256WithRSAEncryption
16:e5:96:84:32:41:43:07:c8:ad:35:95:dc:2f:e8:14:13:be:
f3:be:9e:cf:47:25:a1:3a:2e:c2:a7:34:36:dd:d1:35:88:ec:
f9:f0:0b:0c:2b:c1:d4:0e:8b:29:43:28:f2:c5:01:78:1c:3e:
7c:ba:7b:d6:ec:16:61:83:cc:4b:d7:4b:e9:66:31:fd:fe:9e:
c4:f5:30:7e:ac:f9:29:89:c5:ea:fb:fa:79:51:e3:69:79:3d:
2e:62:fd:52:d9:43:33:80:16:cb:e5:79:6a:39:bf:7c:69:a3:
d6:ce:4c:02:fa:d3:c3:d7:04:63:28:a4:a3:fa:de:9b:a0:81:
7f:55:ed:34:74:75:eb:a2:07:95:58:59:b3:84:78:b9:c0:5a:
58:35:85:f8:51:b1:2e:25:01:da:71:c2:c1:9b:c4:a7:7d:3f:
3d:9a:06:68:c5:3a:2c:ee:5a:9d:3e:5c:15:a8:25:18:22:60:
48:9d:c1:62:74:d5:cd:21:8c:ca:ac:69:69:d6:7b:88:28:55:
d8:f7:f1:2b:a4:09:88:82:79:de:d0:8e:4c:07:95:1e:e3:01:
c9:4c:91:a4:e7:bc:cc:05:43:24:d1:f4:78:55:9b:90:92:31:
17:36:51:30:79:7a:78:4e:4e:38:65:f4:f9:ae:52:f6:92:01:
e2:1c:67:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:41 2025 by rpki-client