
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bc3add0b-bae7-4ee1-9cbc-e3bd167a1d47.roa
File: bc3add0b-bae7-4ee1-9cbc-e3bd167a1d47.roa (raw, json)
Hash identifier: 6XQ8847azKCkWpCbsrPpm+3heytXL7vZZqJHU5iXQRQ=
Subject key identifier: D7:F5:E7:20:1C:F3:09:79:D1:08:F4:20:8B:BE:A1:9B:66:EF:7E:AA
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5B3F13EF279F90BA13A5A7091333361CC84DE271
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bc3add0b-bae7-4ee1-9cbc-e3bd167a1d47.roa
Signing time: Fri 31 Oct 2025 03:38:50 +0000
ROA not before: Fri 31 Oct 2025 03:38:50 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2c24::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:3f:13:ef:27:9f:90:ba:13:a5:a7:09:13:33:36:1c:c8:4d:e2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:38:50 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=9679f17f80823e83baf467c331e1527aad1e70cf6d556d00c598527302daf7c8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:0d:e0:85:44:46:90:81:69:9a:b4:8e:f5:
1c:bf:45:7c:c2:a2:10:ff:af:55:be:60:e5:54:9c:
43:96:26:96:85:c7:cf:d0:bd:11:24:9d:3c:ca:b5:
7b:28:91:f5:6a:8d:1e:b1:0c:3f:0e:9e:09:9a:6d:
d8:67:03:c7:0e:7f:46:99:c1:12:3d:56:85:d1:22:
b7:3b:78:98:fb:3b:bd:de:bc:05:a7:a5:f9:d4:ab:
f1:f3:48:d0:7a:0f:27:05:ba:1c:bb:f7:51:0c:5c:
5d:87:a1:4a:45:d1:b6:9f:94:06:c0:9d:a0:3c:25:
9f:1f:d8:88:cd:34:ec:dc:6d:02:51:13:77:c7:bc:
41:37:12:e7:ba:3e:0d:40:8d:8b:df:04:bb:ab:07:
55:76:9b:10:bd:2a:64:22:84:60:e7:58:e8:4c:a0:
5d:65:6f:0c:fb:28:af:ae:02:04:3e:a0:f2:92:33:
78:d7:15:c6:43:cd:c8:eb:fe:94:ce:65:55:20:08:
43:fa:c6:5f:e6:30:62:39:15:cc:f4:86:42:17:47:
10:a5:6d:1b:76:9e:1c:8a:82:54:79:f2:3d:03:bd:
1e:a1:d6:e2:1d:fe:8d:17:63:54:6c:91:0f:d4:a4:
38:de:58:2d:f5:cb:a5:83:87:64:e6:19:ed:2d:46:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:E7:20:1C:F3:09:79:D1:08:F4:20:8B:BE:A1:9B:66:EF:7E:AA
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bc3add0b-bae7-4ee1-9cbc-e3bd167a1d47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2c24::/46
Signature Algorithm: sha256WithRSAEncryption
7f:54:ee:cb:17:d7:8d:d5:bb:ea:31:2c:0f:8e:b8:85:05:f8:
6b:23:62:05:3e:a5:d9:22:6d:26:65:33:a8:8d:16:32:48:91:
13:20:85:db:49:61:48:8a:0a:77:99:39:87:60:43:26:f1:0a:
ef:65:be:a9:3e:77:b0:56:86:0b:42:00:9b:d8:28:ac:30:0b:
d2:45:25:b4:e9:b7:8d:06:36:1f:3b:14:d3:f8:b3:c9:5c:bd:
64:7f:fd:d4:70:0c:76:5f:fb:cb:27:a2:a9:f8:e9:23:3a:9c:
0f:b1:0a:f8:7d:06:71:a5:76:17:cd:83:8e:20:1f:00:a2:75:
71:53:e7:33:bf:19:74:a5:ab:2d:a6:08:08:a2:1b:79:16:3e:
3c:b4:fc:5f:fd:f7:c2:73:22:82:34:63:ba:26:92:cb:4f:39:
22:82:84:28:ee:82:ad:0b:39:95:4a:03:49:d4:0e:79:19:1e:
6f:38:fe:47:87:02:bc:11:aa:1d:73:e8:7f:cb:cf:4f:7d:fd:
56:f3:64:8a:e8:e5:b3:bd:0e:00:6d:d4:16:32:9b:ff:d2:f0:
bc:c3:45:08:54:71:0a:f5:f3:21:f8:8e:0f:c5:4c:ef:36:7b:
89:c9:f2:cd:00:23:c1:c7:83:e1:46:2c:f6:32:aa:c1:3f:5f:
e3:90:1c:ba
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWz8T7yefkLoTpacJEzM2HMhN4nEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMzODUwWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5Njc5ZjE3ZjgwODIzZTgzYmFmNDY3YzMzMWUxNTI3YWFk
MWU3MGNmNmQ1NTZkMDBjNTk4NTI3MzAyZGFmN2M4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPFA3ghURGkIFpmrSO9Ry/RXzCohD/r1W+YOVUnEOWJpaF
x8/QvREknTzKtXsokfVqjR6xDD8OngmabdhnA8cOf0aZwRI9VoXRIrc7eJj7O73e
vAWnpfnUq/HzSNB6DycFuhy791EMXF2HoUpF0baflAbAnaA8JZ8f2IjNNOzcbQJR
E3fHvEE3Eue6Pg1AjYvfBLurB1V2mxC9KmQihGDnWOhMoF1lbwz7KK+uAgQ+oPKS
M3jXFcZDzcjr/pTOZVUgCEP6xl/mMGI5Fcz0hkIXRxClbRt2nhyKglR58j0DvR6h
1uId/o0XY1RskQ/UpDjeWC31y6WDh2TmGe0tRjtBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU1/XnIBzzCXnRCPQgi76hm2bvfqowHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2JjM2FkZDBiLWJhZTctNGVlMS05Y2JjLWUzYmQxNjdhMWQ0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAALCQwDQYJKoZIhvcNAQELBQADggEBAH9U7ssX143Vu+oxLA+OuIUF
+GsjYgU+pdkibSZlM6iNFjJIkRMghdtJYUiKCneZOYdgQybxCu9lvqk+d7BWhgtC
AJvYKKwwC9JFJbTpt40GNh87FNP4s8lcvWR//dRwDHZf+8snoqn46SM6nA+xCvh9
BnGldhfNg44gHwCidXFT5zO/GXSlqy2mCAiiG3kWPjy0/F/998JzIoI0Y7omkstP
OSKChCjugq0LOZVKA0nUDnkZHm84/keHArwRqh1z6H/Lz099/VbzZIro5bO9DgBt
1BYym//S8LzDRQhUcQr18yH4jg/FTO82e4nJ8s0AI8HHg+FGLPYyqsE/X+OQHLo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:14 2025 by rpki-client