
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ab78448d-a316-4082-87c8-ae96ff8ee1c1.roa
File: ab78448d-a316-4082-87c8-ae96ff8ee1c1.roa (raw, json)
Hash identifier: h5S+6/I3Rl09VNBFHZ8HuyRRM/ARBPIVE24xEKDUwC0=
Subject key identifier: F1:3C:EF:15:77:20:4F:39:48:D5:5F:40:DD:A6:72:89:CA:9E:1A:97
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 10469F20EFF5AC11B437EB938983AE216DC83DAF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ab78448d-a316-4082-87c8-ae96ff8ee1c1.roa
Signing time: Fri 31 Oct 2025 03:36:52 +0000
ROA not before: Fri 31 Oct 2025 03:36:52 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b44::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:46:9f:20:ef:f5:ac:11:b4:37:eb:93:89:83:ae:21:6d:c8:3d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:36:52 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=70e9b405d068689f02b1a970f0bcfeee97a5ed51c2d397c43d80936e7922f551, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:f4:c5:8f:24:80:a4:89:c2:34:2d:3e:df:
db:02:fb:1b:fb:31:08:aa:e3:6d:e9:e1:fb:52:da:
c1:8a:0f:49:08:86:5b:f1:56:1a:56:2b:59:fb:90:
43:74:89:02:bb:46:98:2f:f0:b5:6e:41:ff:2b:37:
35:fd:ac:e8:14:38:47:35:0e:8c:e1:5d:be:92:fb:
79:02:5c:d4:61:79:38:73:34:fc:7c:90:11:89:15:
16:30:1b:c7:0d:94:7d:93:ec:53:5f:1e:f7:3e:a4:
ee:5f:3b:f4:b0:e8:06:0a:a3:fc:ad:32:27:23:ff:
79:56:6c:5c:c3:89:e4:a0:0f:55:33:04:c3:d8:5b:
4c:56:31:a0:9e:d3:86:62:4e:1e:67:48:8f:bb:0f:
68:05:41:fb:af:88:fa:3a:68:d5:69:e6:c0:80:ff:
0b:09:61:16:46:bf:01:6c:d1:db:ff:79:2d:8a:dd:
b8:15:f9:ae:26:d6:2f:9f:50:53:c6:5c:2a:f4:d6:
66:98:04:e7:33:85:fc:d7:04:f8:87:88:14:30:0f:
b5:a9:fe:0b:c4:b0:d5:7c:1b:4d:77:c8:ab:47:af:
ac:eb:aa:84:d9:6a:b7:ca:8f:82:2d:e1:86:2b:4f:
8f:87:96:4e:78:54:b2:e4:33:06:5f:24:10:83:61:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3C:EF:15:77:20:4F:39:48:D5:5F:40:DD:A6:72:89:CA:9E:1A:97
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ab78448d-a316-4082-87c8-ae96ff8ee1c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b44::/46
Signature Algorithm: sha256WithRSAEncryption
80:0e:94:c3:d0:d3:59:ff:2a:e5:a4:ca:15:e9:3e:93:62:9b:
4b:8a:06:61:f5:28:ed:59:22:03:bf:47:d9:9c:68:6e:ed:0d:
bf:78:64:29:d3:e1:56:6b:11:d8:dc:df:d6:dd:0d:c9:7f:6e:
45:fe:79:67:da:9f:c5:b4:e7:db:eb:0c:4c:93:14:ac:8b:aa:
fa:c9:b5:be:a5:c1:b6:bb:0f:61:cc:7d:9f:5b:1c:75:55:8f:
d4:45:f8:9e:9d:5e:62:b0:b7:a8:c2:93:4a:1c:f0:72:eb:49:
8d:c8:ba:43:e9:9b:c6:91:0d:f1:4d:9d:ad:a5:99:28:64:9c:
5e:76:86:02:c4:ca:95:f7:2c:ee:98:08:2d:b5:e1:47:84:be:
6d:7d:dd:cc:62:10:df:d1:13:50:51:12:19:bd:48:e4:5b:88:
b0:d3:9b:4f:77:69:5b:f5:2d:29:31:89:a4:b6:73:1a:6d:51:
14:f4:30:70:45:a8:13:d8:48:37:df:09:df:60:29:51:a1:e7:
6a:3b:d8:64:e0:54:0e:e2:e3:4a:b3:1a:4e:49:9c:6f:39:7c:
26:73:67:cd:23:7c:ba:1d:c7:a3:84:82:95:c6:3e:c1:05:20:
33:a5:cd:87:08:cd:4d:38:70:6e:7b:c7:33:83:67:27:27:ae:
da:fc:19:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:10 2025 by rpki-client