
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3307c48-5823-4276-a9d5-7d7b1cf51170.roa
File: a3307c48-5823-4276-a9d5-7d7b1cf51170.roa (raw, json)
Hash identifier: MpqqzHWNz4x3qGcutOAncLa5Gbww1KJtNQuOsARpvPo=
Subject key identifier: B7:13:22:1A:49:C7:60:AB:68:BA:F6:A2:86:0E:F2:4F:F4:DA:30:E7
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 338F715DCBE5C14DA914B0CFEA97088E9F182642
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3307c48-5823-4276-a9d5-7d7b1cf51170.roa
Signing time: Fri 31 Oct 2025 05:42:24 +0000
ROA not before: Fri 31 Oct 2025 05:42:24 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2bf8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:8f:71:5d:cb:e5:c1:4d:a9:14:b0:cf:ea:97:08:8e:9f:18:26:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:42:24 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=5ab1d10ac738eb0b25a5586369e4ad20874a78eb7df42e66b49eec7ae4eb51e4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:66:42:30:1a:39:6c:26:77:bc:5a:bc:6c:
1e:a4:f5:f5:bb:c0:3f:01:64:46:b8:17:33:ed:92:
b9:22:89:a9:62:b5:3c:aa:b4:0e:ce:82:fa:b7:61:
15:b1:fd:e2:a9:de:7c:eb:47:ca:11:5f:9b:52:a5:
4c:18:d0:4e:37:12:fb:3e:a4:7d:4a:19:c8:2f:c7:
43:15:ee:86:13:56:c4:17:ce:f1:7f:c1:10:c0:32:
8d:12:2a:e1:04:f8:91:91:cd:a5:1c:ee:0e:2a:3e:
22:72:34:81:46:28:38:49:fc:0e:0a:5d:bb:2f:02:
7e:cc:b7:6f:c2:69:29:ae:22:2f:32:be:5e:4e:d9:
36:c1:00:63:ee:ee:9e:d2:09:c7:a5:b3:b4:c3:d5:
41:7a:36:a2:5b:bd:40:dd:fc:1d:46:88:88:8b:e9:
59:6f:fa:c2:3d:49:e9:68:e1:fc:67:15:05:12:a2:
61:6e:e6:64:a0:c8:69:36:af:5f:93:1b:22:9a:91:
63:45:97:4f:9c:24:88:ee:1b:ff:8b:f9:51:d9:88:
81:77:37:a4:b1:53:de:2b:86:32:48:5d:33:6e:8e:
5d:40:34:2d:44:58:2d:0c:8c:e7:59:f8:30:5c:bf:
52:c0:95:13:71:06:d0:a4:d8:e6:22:3f:fd:53:c2:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:13:22:1A:49:C7:60:AB:68:BA:F6:A2:86:0E:F2:4F:F4:DA:30:E7
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3307c48-5823-4276-a9d5-7d7b1cf51170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2bf8::/45
Signature Algorithm: sha256WithRSAEncryption
bb:95:de:2d:1b:25:c6:b7:0a:28:9e:12:45:2f:76:d6:7e:df:
b9:0d:91:17:6a:76:25:6f:8f:6c:f7:8e:c4:5a:b9:86:11:e5:
67:3b:b4:61:c2:7b:ad:fd:4e:ef:2d:81:66:eb:90:8e:c9:20:
4d:8c:54:91:f6:99:6b:a3:22:c9:4a:f1:92:f1:4c:56:ae:39:
9c:48:71:71:f1:5b:35:df:5d:47:b1:84:17:b5:ca:f4:4a:e3:
cd:b4:7e:08:ff:f2:7f:b1:63:ea:81:41:a1:35:63:ff:c2:ab:
19:fe:62:c1:bd:18:4d:48:27:89:7d:b2:b2:38:3c:d1:44:19:
49:96:c8:38:8c:ce:1d:94:4c:51:07:ff:18:11:c5:fe:2e:30:
7f:74:c7:d5:af:04:34:7a:47:ec:1c:41:a8:ee:11:65:ef:42:
3e:85:92:61:90:d4:65:5f:3a:13:53:0f:55:23:f4:da:e0:3e:
24:a8:3b:20:cf:97:7c:fa:51:77:64:6d:1e:c5:ca:90:d2:42:
9f:b9:c2:40:f6:bd:a8:6a:f4:5c:24:c5:f1:fb:d8:15:83:ee:
9e:21:09:11:83:8b:97:56:88:ee:78:15:63:82:be:88:90:49:
44:81:06:1a:e8:f8:06:54:bf:2d:5f:53:9c:eb:31:06:46:c3:
18:b4:7c:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:10 2025 by rpki-client