
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2f3da81-1db7-40ab-bd1a-265e3bc5ff87.roa
File: b2f3da81-1db7-40ab-bd1a-265e3bc5ff87.roa (raw, json)
Hash identifier: J78/bHOMjuWxRnWQmazjqyVG7kc9p6thGLPXjPf/cpM=
Subject key identifier: 11:32:CD:CF:4E:67:A8:48:08:F6:CA:0A:80:DA:BA:2D:45:0B:20:7B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5BDC91A399AF037D57CC97BACA909784FE3B2E0D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2f3da81-1db7-40ab-bd1a-265e3bc5ff87.roa
Signing time: Fri 31 Oct 2025 00:13:53 +0000
ROA not before: Fri 31 Oct 2025 00:13:53 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:343a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:dc:91:a3:99:af:03:7d:57:cc:97:ba:ca:90:97:84:fe:3b:2e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:13:53 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=8817df9582503028fcd4564e77657d03f212fae03d2eacac5a35c19dcc8a9527, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:9c:da:cb:92:18:d3:e3:48:d5:9c:f5:26:
94:c5:b7:ec:40:63:72:18:e3:bd:3a:69:4e:fd:05:
31:26:30:5f:c5:11:4a:24:f7:96:7d:22:1c:f4:6c:
4c:9e:29:ef:0c:36:57:dd:51:08:a2:a0:b0:73:30:
04:a8:5e:22:d3:0c:df:3d:a8:c9:b7:de:b6:f8:0f:
7e:98:ec:51:cd:d6:d5:46:5f:8a:ac:74:c5:87:a4:
6a:30:6f:5b:dc:8c:28:67:39:f0:43:aa:6b:f9:78:
8b:52:40:1f:a2:e1:25:3d:3c:45:80:d1:8f:e8:97:
30:8c:1f:24:1f:b8:23:b1:85:d9:16:f6:f1:99:22:
e3:76:a4:ce:fe:97:a7:f0:d3:7b:17:3c:8b:66:81:
97:e5:bb:9d:89:d1:3e:97:b6:05:42:47:a7:07:0b:
4f:9b:b6:f6:35:0b:f5:54:a0:e6:79:31:d6:82:ba:
76:81:85:24:34:ca:7d:d7:7a:46:35:2c:43:54:bf:
db:00:51:3a:f2:3d:1f:f9:d7:a2:fb:e5:79:c4:38:
95:71:9e:93:32:d6:0d:0d:1b:8f:0d:df:aa:14:e7:
0a:30:86:17:d6:0a:01:8b:ae:2e:10:87:8d:3d:17:
fe:37:fe:ad:4d:b9:8a:65:55:43:d4:31:41:fd:d6:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:CD:CF:4E:67:A8:48:08:F6:CA:0A:80:DA:BA:2D:45:0B:20:7B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2f3da81-1db7-40ab-bd1a-265e3bc5ff87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:343a::/47
Signature Algorithm: sha256WithRSAEncryption
99:24:2f:1b:28:19:73:73:7c:6c:95:cc:60:f1:57:d2:53:5b:
11:44:4b:6f:ca:cd:91:72:52:65:2a:74:ea:5f:2e:14:b9:bf:
e4:ee:3c:78:30:c6:96:0b:92:4d:43:97:e0:26:1b:ff:2f:9e:
4d:0d:0a:42:b4:c7:00:af:13:10:b7:c5:9f:82:20:ed:ca:a4:
47:98:b1:e5:60:44:aa:21:c4:2f:dc:f1:b8:b7:0d:88:e7:b9:
86:98:a9:09:75:ec:d3:4e:6d:47:da:cc:9d:e0:d8:f9:d5:26:
08:c9:19:5c:15:cc:86:55:a2:57:b8:f6:0c:fd:40:07:82:89:
5f:a6:e6:19:db:29:04:39:dd:0a:df:e5:ed:46:7f:77:f6:7a:
b2:e0:c2:b0:ee:9c:f0:c8:38:73:8d:20:c0:d4:35:c5:f4:27:
9f:c7:6e:b1:69:30:a8:db:4f:40:58:ca:b1:16:af:f7:15:03:
2e:ac:e8:c2:6d:03:ea:63:7b:92:d6:9d:51:f1:c1:ed:2b:39:
18:ec:7c:2e:80:28:0b:b3:92:26:7b:10:18:68:26:2d:34:67:
46:f2:67:b7:6c:29:94:3f:69:fc:cb:d9:a6:2d:2b:af:14:08:
ff:d9:a3:ae:8f:1e:c4:e2:3e:81:1e:ec:7c:96:0f:9d:03:52:
e0:11:e4:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:53 2025 by rpki-client