
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7795b57-73ed-4838-adeb-0864fa9a3f5b.roa
File: a7795b57-73ed-4838-adeb-0864fa9a3f5b.roa (raw, json)
Hash identifier: z/ZgRd3tANHgtC5b9ah8xa3wiwZhraR3/pmEkcOOnuA=
Subject key identifier: EB:01:81:98:9D:40:E0:1B:EB:2A:BC:7E:65:96:6C:36:B8:5B:1C:D3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5D789C5B86B1FAEDA7F319D5582F0BDD57AE936D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7795b57-73ed-4838-adeb-0864fa9a3f5b.roa
Signing time: Fri 31 Oct 2025 03:36:59 +0000
ROA not before: Fri 31 Oct 2025 03:36:59 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b74::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:78:9c:5b:86:b1:fa:ed:a7:f3:19:d5:58:2f:0b:dd:57:ae:93:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:36:59 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=6d0d89e345357e8d1ec1e9e332b89eae8a59c8633de0e0e336121832fd5c21c1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:32:18:b8:01:19:a7:e0:09:09:8f:99:da:
2d:84:ed:4e:bf:90:a8:27:a1:97:fd:da:79:6e:3b:
4a:87:f9:21:75:67:d9:74:90:3e:42:26:fc:09:c9:
cb:b1:1f:c7:c0:7a:40:36:07:49:4c:0d:a5:f0:ab:
cc:0d:74:d3:b2:de:98:a4:b5:76:c0:bb:6a:b0:47:
49:a0:b5:b9:9f:68:3f:a5:27:b7:56:91:26:11:a2:
61:3b:47:b3:34:c8:73:eb:46:f6:df:58:50:04:8a:
1f:a0:1c:06:2d:62:ba:30:e3:3a:c0:27:68:13:ba:
87:99:e9:b7:0e:2a:50:74:fe:83:b4:f7:5d:d7:41:
1e:96:8e:31:2e:1e:f9:6a:d7:ab:fe:40:c4:33:04:
a9:71:82:b0:19:bf:16:f9:7f:64:73:8c:80:19:60:
3e:38:af:4f:99:68:6a:16:24:fe:b9:c3:19:30:45:
81:d5:de:75:45:6b:12:6b:fb:60:9d:9a:d5:d4:a5:
3d:35:75:08:a8:50:6d:3a:3a:b3:5b:a7:56:c9:2d:
3c:2e:cf:3c:c1:44:28:ec:53:27:0e:90:af:15:a4:
9d:a5:ea:7b:7d:ef:25:dc:05:a7:a9:ad:dd:97:12:
c8:54:be:7f:91:4c:d8:de:12:a3:bf:ac:af:1a:1f:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:01:81:98:9D:40:E0:1B:EB:2A:BC:7E:65:96:6C:36:B8:5B:1C:D3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7795b57-73ed-4838-adeb-0864fa9a3f5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b74::/46
Signature Algorithm: sha256WithRSAEncryption
83:43:22:db:3b:51:b6:8c:56:b0:fb:a7:29:a8:eb:5a:d4:ec:
75:9c:74:5a:30:f0:be:49:f8:3e:c6:21:ca:27:7a:f3:8a:ca:
44:08:ea:ca:f6:b3:6e:99:95:a9:cb:28:26:cd:3f:7a:c8:5f:
9c:d1:60:3d:60:60:1f:7c:1d:8a:f8:4e:37:a0:67:9f:bf:44:
80:f4:b5:e4:42:6e:c5:44:82:bb:96:05:76:3b:bf:91:a8:6b:
b3:7b:24:6f:7d:c5:86:f3:e3:ba:f7:81:89:63:c6:97:d4:31:
21:41:0a:77:b7:ad:2b:f8:83:62:67:28:77:cb:4c:98:67:64:
e4:43:dd:7c:0a:cd:dd:a1:08:ff:57:75:8a:59:db:e8:14:cb:
7d:b0:5e:33:09:07:38:15:df:39:d4:37:a9:5b:f9:17:52:6d:
42:78:4c:6b:70:cf:08:38:4e:f8:ff:51:08:8c:75:94:37:77:
27:8f:11:c7:c3:1e:83:77:d6:0d:6c:32:94:ab:bb:d2:e7:e3:
14:f9:fb:3f:83:ab:8e:2e:6a:10:bb:b3:ea:cb:83:b4:09:b8:
db:a5:21:27:8e:bc:06:47:83:ce:b6:30:3b:f3:db:63:6c:9f:
2c:00:51:08:64:2c:5f:25:f0:84:53:9c:80:12:4d:49:db:de:
03:50:83:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:33 2025 by rpki-client