
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aceb7f97-98a7-4cc6-82f9-a4eb26d38089.roa
File: aceb7f97-98a7-4cc6-82f9-a4eb26d38089.roa (raw, json)
Hash identifier: EwnvgmTIr7Rs1gN018tgOt5lTMVyuNlPBXbaTsq1+Rw=
Subject key identifier: 02:54:8A:D3:36:3B:71:85:00:E1:90:91:66:3B:32:B1:D9:F7:00:ED
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 604F5728340B3D10DC9AFE864B683B4871816DD6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aceb7f97-98a7-4cc6-82f9-a4eb26d38089.roa
Signing time: Fri 31 Oct 2025 03:23:29 +0000
ROA not before: Fri 31 Oct 2025 03:23:29 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2484::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4f:57:28:34:0b:3d:10:dc:9a:fe:86:4b:68:3b:48:71:81:6d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:23:29 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=174882029696997e0852a90f6db088939a4113db94c50c75294efd1e0fd106dd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:7d:3d:98:fc:8e:5b:02:c3:91:fe:ca:74:
d0:68:ae:69:5d:48:12:e5:63:dd:09:45:12:e0:76:
21:c3:e1:81:34:6a:86:56:4b:13:66:e8:40:07:df:
8d:91:51:e9:29:ed:cb:83:ad:f3:81:30:bf:a1:79:
ac:7e:ed:be:4e:38:0b:e5:b5:e5:e3:f2:1f:4f:19:
40:89:07:a4:e8:24:39:95:9d:d1:72:23:d5:f3:9b:
41:0a:1c:d6:21:17:49:ec:39:a5:fd:97:bd:7b:51:
59:b5:c6:45:ef:ee:a4:ec:7d:9e:62:84:66:1b:bd:
10:56:4a:3b:99:e0:22:9f:3f:27:4d:f4:4f:b3:1c:
85:95:54:53:49:3e:98:41:5d:93:cd:31:af:8f:0b:
35:6d:17:c4:4d:cc:a7:70:7b:cc:ce:92:0b:98:66:
b3:30:e1:6b:87:d9:9e:1f:8c:e7:42:fd:56:ac:ee:
fe:c9:06:31:20:88:32:61:32:ab:c7:f7:fa:b5:e0:
6b:ad:2e:51:a0:09:97:70:10:0e:0d:8a:0a:52:11:
75:78:3e:51:96:d5:39:86:4c:7c:cb:59:5d:4a:a8:
5b:b1:7f:40:46:0d:80:b0:af:bc:67:a3:86:c4:d5:
6f:41:77:57:c7:09:18:88:00:35:c5:0a:bf:7e:39:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:8A:D3:36:3B:71:85:00:E1:90:91:66:3B:32:B1:D9:F7:00:ED
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aceb7f97-98a7-4cc6-82f9-a4eb26d38089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2484::/46
Signature Algorithm: sha256WithRSAEncryption
76:f0:9d:d6:f0:f0:b5:5f:64:4c:af:e4:d0:0a:81:8b:b6:3d:
2a:ec:8d:cc:80:71:4a:01:61:01:a4:39:fd:5c:46:19:47:64:
57:2a:8a:42:8e:b0:79:1d:80:ea:d3:e3:d6:81:c8:f7:fb:54:
89:15:e6:30:ff:35:5d:a4:93:74:97:65:88:ec:4e:b0:68:b3:
d9:37:5d:97:ae:39:6e:01:38:40:f8:02:a4:1b:0d:4f:fc:d3:
fb:9a:d4:27:9f:ee:38:1f:72:e8:e6:00:b6:f8:40:94:b7:30:
14:ee:d8:b1:55:ab:f2:b5:1f:6c:71:0b:f0:10:7c:0a:e5:da:
7b:d0:1f:ec:13:2f:54:e1:6d:4c:82:75:00:09:7b:c2:5a:41:
11:51:1c:70:3c:d6:73:c9:ed:ed:dc:82:c1:ca:9d:50:6b:07:
89:75:bb:82:58:4c:b0:8d:35:44:c7:fd:d0:e3:10:a1:c0:eb:
91:8a:49:25:30:d2:7d:23:ef:d4:bf:e1:a8:e2:29:17:86:2d:
6c:12:4d:28:c4:b5:01:a9:8e:25:16:56:78:12:e6:0f:08:b5:
18:56:a1:7f:e1:3b:0d:19:12:37:32:62:37:01:02:be:1e:1e:
39:50:42:35:b4:b0:ef:f1:fb:a7:f0:ef:cf:4d:88:7e:9e:9c:
7f:56:b5:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:43 2025 by rpki-client