
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b74de488-1770-437e-9ae7-5074c1d89e53.roa
File: b74de488-1770-437e-9ae7-5074c1d89e53.roa (raw, json)
Hash identifier: 7AwIw9DwV/b354AiZSXIi+hFMiIWHqFp/jMXpJt/T9M=
Subject key identifier: AF:2F:8E:19:58:5F:02:F8:FF:42:A8:37:FA:16:CD:5E:ED:97:F4:57
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 32045BE56B7D131D0CDA0AF63B6E994F87E6BBB3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b74de488-1770-437e-9ae7-5074c1d89e53.roa
Signing time: Fri 31 Oct 2025 01:10:11 +0000
ROA not before: Fri 31 Oct 2025 01:10:11 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3a02::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:04:5b:e5:6b:7d:13:1d:0c:da:0a:f6:3b:6e:99:4f:87:e6:bb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:10:11 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=a0b9a446fc39c625a4cbf9b696d4c9226a553ec3c0dec5be5dc54f6b237feb26, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:19:1b:68:08:96:cd:50:15:7f:b9:ee:29:
fb:6a:01:4d:0d:5d:e8:ea:8c:c5:55:46:e5:bc:92:
75:8b:7d:69:e1:ff:7e:b4:f3:aa:28:77:0c:54:c2:
79:cd:2f:6e:c0:fd:cf:8c:a1:ba:a2:f1:df:79:b4:
b2:bb:f9:e3:65:94:74:ab:4d:88:48:05:4a:8d:4d:
6f:58:2c:5a:4a:cb:22:29:47:99:59:0d:c4:51:52:
93:ec:8c:d7:20:ff:47:46:8e:76:b2:43:53:6d:bd:
6e:d6:13:95:f3:18:b6:f8:8f:15:30:3d:4e:dd:54:
af:92:26:a9:e9:df:2f:b4:1b:6b:b6:b6:96:8c:d8:
1e:d9:6b:91:44:ec:bf:53:41:03:a5:53:5a:8a:b4:
24:ba:37:ec:e7:56:bb:5a:31:e1:ae:d6:a2:20:c2:
67:a1:91:d0:b8:71:7f:33:16:1b:d1:9e:e5:68:6e:
36:e3:7b:6d:04:19:5e:74:55:e5:9c:5d:fc:58:03:
c6:00:0b:8d:c8:45:ee:58:ae:50:e6:53:d2:13:c8:
6d:f5:50:2f:c1:b4:10:d9:5c:28:00:94:e3:6f:ed:
ff:45:d2:4a:0e:2e:a0:00:c8:f2:ae:a9:e6:d7:cc:
07:d2:df:3a:23:d2:65:5d:63:7b:a6:b6:6e:81:6d:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:8E:19:58:5F:02:F8:FF:42:A8:37:FA:16:CD:5E:ED:97:F4:57
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b74de488-1770-437e-9ae7-5074c1d89e53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3a02::/47
Signature Algorithm: sha256WithRSAEncryption
b5:79:5c:2f:7a:5f:ab:19:e8:8f:3e:64:22:ec:62:8b:2a:b5:
2e:32:8b:16:f4:8a:a2:f5:95:f4:07:28:ca:16:b1:a5:26:af:
8f:99:34:86:45:92:d4:10:a0:a2:a8:dc:87:9b:c1:90:af:2d:
34:4b:18:48:c4:8b:6c:02:26:55:9a:39:0d:c1:44:8e:64:5f:
28:36:99:6c:91:21:d8:55:ed:58:19:ee:e4:2b:59:e1:34:eb:
53:f5:2b:37:17:e3:03:de:76:f2:1a:64:78:cc:95:ef:67:79:
a9:9e:60:ee:a3:84:fc:50:ee:01:92:7a:22:8c:3c:ff:e2:ba:
05:09:89:a9:95:17:43:7f:d8:54:68:83:5e:a9:e1:96:cf:18:
c1:e3:32:3d:18:29:f4:d4:f3:a0:76:7c:5a:91:c6:ea:6e:2c:
e2:10:f8:31:e8:cc:b8:73:dd:44:3f:dd:55:7f:cf:30:1c:a7:
4e:71:75:18:8f:0a:08:e3:9d:c3:21:62:5b:64:3a:1d:8a:e3:
fd:74:ed:4a:94:83:81:57:80:83:12:b4:82:50:c1:6a:45:b5:
5b:f8:89:9d:35:5b:18:9f:17:ef:a1:2c:3c:ba:67:79:1d:eb:
07:73:e1:70:9e:8c:b9:33:19:00:a6:c4:90:39:3b:c7:f3:7e:
46:e3:66:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:54:43 2025 by rpki-client