
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8ee577f-2bef-433d-b30e-6c73ab658664.roa
File: a8ee577f-2bef-433d-b30e-6c73ab658664.roa (raw, json)
Hash identifier: 0ExeN22GzeRxEnMHmUox80d5pky4DHjxTqwpHDuTuAA=
Subject key identifier: D6:DB:7D:EE:34:D4:52:70:51:39:82:0F:19:7B:9C:DF:6E:DA:E2:6F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1602860A5B5B6EB59E9A108FCD06D091AF822301
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8ee577f-2bef-433d-b30e-6c73ab658664.roa
Signing time: Fri 31 Oct 2025 04:07:00 +0000
ROA not before: Fri 31 Oct 2025 04:07:00 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:33a8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:02:86:0a:5b:5b:6e:b5:9e:9a:10:8f:cd:06:d0:91:af:82:23:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:07:00 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=138395f28accb13888192ab81087717d6d4bc03dda8437b64d25ff14fa9dd39e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:70:bd:54:ef:fb:49:f5:34:33:fd:db:9b:
89:9e:08:c7:cc:b2:cd:9f:5a:b0:77:bf:c1:c2:c9:
75:10:37:0b:b4:48:56:db:39:a8:8f:a8:35:bf:50:
6a:dc:ff:6d:71:fc:a7:59:fd:19:b4:4f:e1:7c:ff:
c4:06:c2:82:5b:01:3f:16:33:4b:1f:3b:a8:71:84:
e8:52:06:ff:1b:5f:01:a5:b0:bb:0f:6d:8b:1a:7d:
e2:7b:66:a2:2f:01:a2:53:9a:6b:5a:2d:5b:44:93:
fa:6b:77:4f:aa:9e:60:16:69:3c:88:e5:4e:e5:e1:
b5:0f:7f:e3:02:70:dc:28:14:9c:39:8d:04:35:ca:
d9:03:69:ab:ab:6e:1b:b7:0c:ba:d1:c6:86:f4:ce:
a7:7f:bd:08:03:92:75:2d:4b:7b:3e:20:73:5f:02:
4c:c8:dc:e8:97:ce:0d:c6:33:54:98:7b:53:0a:fb:
bf:c3:5a:af:7b:de:c1:8b:bc:56:d0:5f:ef:28:9e:
78:0a:d2:ef:0e:49:d1:d1:7f:56:f2:7b:df:7c:9e:
7e:25:ae:05:f6:52:23:8b:51:82:b3:7d:4e:e8:1d:
e2:d6:71:11:8f:d0:6d:10:c6:44:f0:0e:ea:c6:73:
f6:59:b1:c2:36:cf:0c:83:18:20:40:0a:49:eb:9b:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DB:7D:EE:34:D4:52:70:51:39:82:0F:19:7B:9C:DF:6E:DA:E2:6F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8ee577f-2bef-433d-b30e-6c73ab658664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:33a8::/46
Signature Algorithm: sha256WithRSAEncryption
14:d8:38:91:5f:51:e8:42:3b:9e:29:0a:27:88:ac:36:76:29:
2a:75:f8:53:31:66:55:75:05:0a:d4:b1:4d:96:b0:f8:71:86:
57:8a:84:89:08:f1:99:90:6c:45:bf:08:e0:b7:93:9c:cd:39:
a6:9f:ec:46:e0:6c:b4:3d:9f:e3:63:32:ba:1d:f0:e4:a8:06:
51:81:6c:fd:88:dc:aa:10:41:c5:e0:fb:02:fc:36:07:87:b9:
e9:fa:02:6e:1f:fc:3f:b9:ff:9f:d5:21:84:5d:c2:8c:cf:36:
d3:46:92:a4:e5:db:11:da:d5:59:c0:28:04:57:c1:ae:33:c8:
be:bf:fe:77:2b:e4:d4:5e:a9:65:b9:5c:5f:99:52:c9:6b:93:
9f:4a:82:57:59:2e:40:0b:22:1e:38:62:e6:e8:ae:ef:6c:4e:
41:ad:58:33:4b:a8:8e:be:b0:bb:02:40:c5:bb:27:5a:44:69:
a2:24:c9:e0:e0:9a:2c:b7:3a:ab:e9:ae:77:b7:f1:96:63:29:
48:ca:ec:5e:86:97:06:77:34:9d:17:ac:37:fd:96:0a:f9:68:
ab:d7:68:77:f2:97:33:ad:b5:01:dd:3f:80:0f:af:f2:8b:aa:
c1:a3:07:d5:b2:d4:7a:68:49:fd:f6:f1:c1:7f:72:0c:e6:4c:
2d:d8:ed:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:55:39 2025 by rpki-client