
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bb4b5f44-4639-4248-b283-f2dd88eab9ce.roa
File: bb4b5f44-4639-4248-b283-f2dd88eab9ce.roa (raw, json)
Hash identifier: mFTqLZBFyYu4trt5GzRSrf+MEGZINzDIvrBymQ7z7kc=
Subject key identifier: 06:10:2E:EA:C5:79:AA:49:D9:CF:10:AC:3A:BA:82:7C:29:EB:A2:4A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 21D7842D0E67AD791C7FCF597F84CF216692E3AE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bb4b5f44-4639-4248-b283-f2dd88eab9ce.roa
Signing time: Fri 31 Oct 2025 04:21:57 +0000
ROA not before: Fri 31 Oct 2025 04:21:57 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:370c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d7:84:2d:0e:67:ad:79:1c:7f:cf:59:7f:84:cf:21:66:92:e3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:21:57 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=9761a43cec91e8cd22eb02804c78aed2bbae5fdc9c2b784b4c23093651e300cc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:cf:59:a2:f5:cd:21:88:2c:d1:c3:0c:29:
c5:16:c3:d1:3e:bc:c0:99:3d:79:d0:bf:c5:1e:f5:
94:b4:3b:c5:6f:ae:6e:37:41:4f:ed:72:6b:02:27:
3e:20:75:58:48:dc:da:63:35:23:b6:4e:a7:93:5c:
71:63:78:43:fc:1a:e0:12:c0:3b:67:d0:c4:9f:07:
8d:b4:36:b8:25:e9:a8:e2:6a:db:10:75:82:0a:84:
cc:70:33:fc:bc:d6:a7:b6:68:59:c6:77:93:1c:ed:
82:76:d9:ed:8d:6e:81:f9:67:c0:4a:f3:5f:bd:29:
86:7a:d0:5e:86:7f:a5:6e:5b:1e:c5:96:0f:b1:9a:
3d:02:41:01:c9:8a:76:08:a7:5c:58:1a:80:1e:ab:
75:ec:ca:9b:80:a4:53:ce:b9:86:f2:99:da:ee:9d:
f2:d5:f1:00:7a:31:ca:00:8f:06:c5:3f:c0:30:a5:
18:d1:2e:e8:ac:3c:e2:a5:08:2c:d4:55:f9:f3:b3:
50:c3:7f:1e:2c:22:6f:25:90:81:fd:f6:a5:6f:26:
fc:17:e0:cb:f2:f0:89:95:f5:e7:b8:0c:5a:cf:63:
dd:f0:51:65:c6:1a:86:b8:cf:33:c7:c7:9d:6a:10:
9b:8c:11:92:22:82:b5:9e:33:65:ab:78:5c:58:44:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:2E:EA:C5:79:AA:49:D9:CF:10:AC:3A:BA:82:7C:29:EB:A2:4A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bb4b5f44-4639-4248-b283-f2dd88eab9ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:370c::/46
Signature Algorithm: sha256WithRSAEncryption
97:d1:71:d2:65:6a:04:48:13:a0:a7:8e:4a:e3:c7:45:0e:1f:
6e:04:40:5e:67:55:be:3c:1d:30:47:58:ba:92:87:e9:f4:9b:
ee:f2:c0:13:3e:fc:f0:bc:4b:a7:83:3f:1e:b9:7c:dd:a1:4d:
dc:22:d0:17:a6:92:af:c2:f3:a9:2e:ea:42:cf:81:2d:90:af:
ab:2f:dc:ea:f5:2c:d0:ea:cd:34:a2:ab:38:19:9f:a1:db:4c:
63:59:b3:a3:b7:3b:17:72:6d:75:bb:bf:6d:5c:65:fa:dd:be:
9d:32:43:73:a6:03:3e:f3:51:c3:13:10:32:2c:f2:8d:ea:4a:
51:fb:39:67:92:3c:00:89:b4:93:27:de:c9:a7:30:88:7e:70:
ed:f9:30:78:e1:25:70:53:7b:f7:f3:4e:96:44:f7:4b:16:22:
b5:7d:bc:13:12:c4:75:d4:03:07:a4:79:71:a3:9a:da:45:23:
af:be:cc:eb:7f:d4:76:7f:ed:da:a4:af:f6:9b:a9:9d:96:c8:
62:15:a2:a5:50:c2:2c:bd:a2:52:7d:d2:e4:cf:00:e0:12:66:
d1:ee:1a:89:12:5e:22:38:aa:5a:5e:33:ce:01:86:11:16:a3:
e5:b6:9c:f6:71:f6:a1:b9:6c:43:85:a5:48:e3:79:23:d6:7d:
fa:9b:1f:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:32 2025 by rpki-client