
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa33783b-67de-448c-bbf3-87b07f178f2d.roa
File: aa33783b-67de-448c-bbf3-87b07f178f2d.roa (raw, json)
Hash identifier: 0zEo0N96BFqbWf1wy0Gs0ZpShljlVyDtWsjh+SkKia0=
Subject key identifier: 98:8B:6E:A1:0D:22:CF:08:C0:8B:52:72:DF:2A:9A:42:DD:C2:24:1A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 791DF68F6C3FA5BF300B6D0FD87B81E7584A5CD9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa33783b-67de-448c-bbf3-87b07f178f2d.roa
Signing time: Fri 31 Oct 2025 02:52:11 +0000
ROA not before: Fri 31 Oct 2025 02:52:11 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:18c0::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1d:f6:8f:6c:3f:a5:bf:30:0b:6d:0f:d8:7b:81:e7:58:4a:5c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:52:11 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=91a87d57e02bcfccd1401819e1ac3161ad84ef773eac8f06d44fb39d08c065bf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e2:7c:5f:7c:ea:5d:91:aa:d7:6c:9f:6d:2d:
d3:ca:70:c0:cd:b2:d2:b6:d0:ec:38:85:26:78:65:
03:e2:df:fd:dc:26:36:a9:da:5f:4c:27:84:f8:f4:
75:75:24:8f:9d:b2:3b:86:29:ec:12:b1:2b:e9:e9:
0f:fd:b5:c9:04:bf:e9:86:1b:9c:c6:7e:85:1a:60:
4e:22:47:07:de:dd:ad:af:13:94:9e:91:dd:65:ef:
45:68:cf:9b:e2:9b:74:6a:1e:55:6a:94:f5:13:c2:
c1:37:34:7c:a5:08:02:39:ff:1a:46:f1:67:93:7c:
a7:26:30:59:32:8a:da:36:e9:06:bc:0f:7b:01:a4:
30:f5:58:cb:9c:f2:e8:cb:33:c6:23:78:51:78:0c:
e6:5e:27:2e:d5:39:3b:00:5e:ec:df:c4:77:33:fc:
f1:3e:5b:25:d8:f9:87:a9:dd:cd:36:5d:ba:3f:70:
65:8c:f0:23:58:cd:f4:f1:e9:cb:af:99:92:89:85:
b1:06:fa:91:93:3b:1f:db:0c:3b:7b:eb:d1:74:e5:
af:3b:94:eb:98:d5:c1:ad:86:64:9c:11:cd:2a:08:
21:40:cd:4e:8e:cc:93:81:36:24:03:3f:c1:09:59:
bf:cb:d6:55:d9:4c:0b:9d:fe:dd:0d:34:77:7e:1f:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:6E:A1:0D:22:CF:08:C0:8B:52:72:DF:2A:9A:42:DD:C2:24:1A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa33783b-67de-448c-bbf3-87b07f178f2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:18c0::/46
Signature Algorithm: sha256WithRSAEncryption
b2:ca:ec:c9:ed:cc:6c:1a:dd:5c:8b:b4:05:84:eb:b7:c2:01:
e5:b7:5a:36:ea:e6:1e:c1:38:2e:b4:da:54:13:eb:d9:37:36:
10:67:57:17:ed:bf:e9:62:5b:35:32:0a:06:40:20:d4:39:8f:
c6:3d:3f:56:26:17:2e:88:e6:30:54:53:52:ac:3c:71:14:c5:
18:55:68:15:51:4c:d1:51:28:28:77:f5:fd:29:73:32:bb:b9:
52:2a:64:1c:d6:02:9c:fa:a6:54:f4:3f:e6:0c:79:a3:fa:0e:
ef:ab:6e:13:e0:ab:bf:7d:86:40:d1:e3:ec:af:45:48:be:64:
e8:93:bf:79:77:aa:1a:d3:45:19:e2:f0:f7:a0:f0:43:cb:c6:
b0:00:92:01:ee:c0:fe:50:bb:42:fb:62:7d:4e:75:0d:d0:31:
2e:ef:8a:30:7e:dc:88:07:dd:9f:0c:8f:d1:2d:c7:13:60:5e:
e3:35:c0:27:b0:07:47:0f:18:2d:42:75:b7:0f:22:64:fa:f7:
80:09:47:39:4f:3a:44:ca:33:06:20:51:ca:49:6d:ff:2a:4b:
0b:dd:2d:de:f5:7b:9c:5c:4c:4a:ee:1b:ce:bc:ae:a7:94:f5:
ec:c1:77:50:fe:72:28:dd:98:f6:e3:32:7e:5d:bc:db:4c:93:
bb:09:3b:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:48 2025 by rpki-client