
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac3f59d7-d6ba-461b-ab1e-3581ed8c3d55.roa
File: ac3f59d7-d6ba-461b-ab1e-3581ed8c3d55.roa (raw, json)
Hash identifier: f5q11DWYY2R3l7SFmLKu0NzAvYkc1s35tEhYIoHZCw4=
Subject key identifier: 51:A1:5B:6B:C9:7E:27:0B:D4:AB:07:0B:27:83:5A:33:FC:77:91:B9
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 63694B879EC50E670E3667CD7126A95005E2729F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac3f59d7-d6ba-461b-ab1e-3581ed8c3d55.roa
Signing time: Thu 30 Oct 2025 22:14:00 +0000
ROA not before: Thu 30 Oct 2025 22:14:00 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1c24::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:69:4b:87:9e:c5:0e:67:0e:36:67:cd:71:26:a9:50:05:e2:72:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:14:00 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=74b7d3e24649cc4ced4f11744dfcea675ee953e956e749e980fb08acdb461e98, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:72:78:f4:15:62:c2:0d:f5:6e:bd:18:fd:
a7:cf:8b:e2:e9:00:33:34:14:04:3b:64:d6:45:4c:
4c:cc:19:d2:61:20:96:45:97:c5:16:16:4c:f1:c7:
ea:39:a6:f7:23:7f:2c:a9:52:2c:87:17:1c:a0:9c:
50:27:dc:1d:08:3c:81:30:7e:da:7e:31:9b:a1:53:
1b:87:73:fa:8a:8e:a4:f5:5d:4f:0a:45:ee:e7:88:
7d:d0:24:81:e0:56:3a:7b:67:ba:0b:8c:d3:26:14:
8b:73:fb:38:d0:11:67:a0:f4:6c:26:02:1a:2d:f3:
f2:fe:4d:0b:46:b7:16:d7:6d:fe:99:b4:60:60:6a:
86:75:8b:f3:52:21:f3:fe:12:14:c1:ff:b3:4a:22:
95:f9:48:47:96:ce:45:85:d8:35:cd:96:e7:da:d4:
c7:cd:dc:26:bf:d9:88:4a:d7:7f:ee:84:ed:af:32:
7d:99:ee:f7:c9:e4:5f:8a:4c:0e:9a:d0:03:0d:5c:
5f:52:a4:2f:14:c7:f7:0a:58:ea:58:82:50:20:e0:
11:f3:6a:d4:70:bb:43:dd:da:22:4b:42:da:97:97:
b8:0e:9e:87:79:70:a6:03:3b:e1:76:6b:08:1c:98:
8f:6d:49:d9:ac:83:83:37:d3:c3:27:2d:c7:79:da:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A1:5B:6B:C9:7E:27:0B:D4:AB:07:0B:27:83:5A:33:FC:77:91:B9
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ac3f59d7-d6ba-461b-ab1e-3581ed8c3d55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1c24::/47
Signature Algorithm: sha256WithRSAEncryption
77:e8:05:91:dd:5b:97:fd:8d:f6:4e:9e:19:05:62:8b:54:dc:
4a:6f:09:16:51:2a:d4:a7:b3:7f:3a:5c:e1:37:3a:bb:02:c0:
27:30:03:c1:58:cf:d3:7a:dd:09:c5:aa:b4:d0:e2:c2:10:bd:
f2:e4:1a:84:84:8a:a9:4f:81:9b:20:a4:28:f7:f2:d8:b7:95:
86:96:db:e6:e3:c2:ba:79:f5:cb:7d:88:fd:30:e8:67:1a:ba:
4c:3e:73:a6:61:d9:02:dc:65:75:11:a6:a8:41:49:d8:44:bd:
7d:ca:7a:b9:2a:bf:08:17:6d:14:c5:dc:04:21:0e:25:ae:62:
23:42:4e:d5:11:6b:a6:c3:57:a1:b4:dc:b8:22:84:2f:fa:a3:
e6:06:e5:95:f0:72:15:07:60:7c:c5:94:db:99:d6:d3:67:83:
f7:8d:37:7d:f6:65:4f:93:a2:32:df:7b:66:b6:3f:a0:63:d5:
a1:cf:41:1a:8c:97:c1:ab:10:23:7b:24:25:77:f8:7c:85:df:
4a:08:06:44:b1:df:b7:b8:4c:36:ae:f6:27:1a:83:14:4f:a3:
2b:5a:ad:84:c8:d5:88:0b:9b:8f:ea:2b:97:59:d9:a8:6b:16:
e0:da:6a:6a:47:3f:e3:16:08:54:0c:c9:dc:6d:ca:61:8b:54:
0f:12:71:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:09 2025 by rpki-client