
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be044344-b5a1-44b1-a9fb-b9e867952740.roa
File: be044344-b5a1-44b1-a9fb-b9e867952740.roa (raw, json)
Hash identifier: XiVPmabrdno3I2sHpB/XNZTGrHT5wOs5mJwTitIH/xA=
Subject key identifier: 4F:3F:B1:A4:8D:4E:6A:5F:0D:92:24:32:39:19:2A:C4:6B:F1:35:89
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1C4277004C67B2169B98A63B1629A4277FCFE049
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be044344-b5a1-44b1-a9fb-b9e867952740.roa
Signing time: Thu 30 Oct 2025 21:55:35 +0000
ROA not before: Thu 30 Oct 2025 21:55:35 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:19fa::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:42:77:00:4c:67:b2:16:9b:98:a6:3b:16:29:a4:27:7f:cf:e0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 21:55:35 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=a94719e913f45b42bab462da981c8cae474b7f6537f9da9a1524dcc8ce8e9324, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:bc:dc:40:a6:00:36:ec:41:6c:38:37:11:
8e:5e:f8:78:d1:15:9d:d6:14:75:a1:c1:60:0e:59:
b5:58:04:2c:c2:64:a4:ed:68:0c:97:9a:08:87:d5:
8e:0b:17:44:18:a2:ff:cc:8d:af:e4:28:71:7f:92:
a6:38:ba:46:68:fa:5d:5c:82:e2:6e:8b:19:f8:7c:
83:96:d4:02:6f:b8:8f:a6:7c:b2:b7:4c:1c:51:8c:
93:a8:18:85:61:70:11:e6:6e:04:40:31:73:c2:7f:
d5:44:7d:62:f5:84:b4:84:f6:19:13:4c:79:97:35:
cf:20:ea:23:13:a2:ce:5d:a4:45:c0:95:70:6f:62:
74:2e:eb:8b:88:ce:23:3a:36:a3:52:71:3c:a2:2b:
51:0f:93:99:1a:5c:40:80:29:0a:fc:f2:5e:56:a2:
2a:f6:65:13:44:2a:53:06:1a:a1:ab:87:ab:6d:ee:
2d:e6:01:9e:0b:d9:49:d2:83:23:a7:31:ab:03:93:
6e:a1:70:2b:01:64:76:8c:b1:52:a1:09:14:5e:53:
2c:0f:02:cb:41:1e:98:bb:c8:7d:75:60:be:5c:6e:
8c:ef:e5:06:87:1d:60:d9:7a:0d:40:1d:ec:05:12:
16:aa:8e:20:e1:71:ad:76:73:ba:4a:d7:fa:51:28:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:B1:A4:8D:4E:6A:5F:0D:92:24:32:39:19:2A:C4:6B:F1:35:89
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be044344-b5a1-44b1-a9fb-b9e867952740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:19fa::/47
Signature Algorithm: sha256WithRSAEncryption
75:4b:e3:9d:35:27:e8:82:18:d4:d2:d2:97:cc:fd:0a:01:12:
a5:49:08:33:6c:fa:f7:99:73:17:ef:c2:5f:1c:04:13:47:12:
5a:92:6e:3d:86:f8:15:7b:f1:7f:c8:fe:1e:83:13:40:58:fa:
26:71:04:4a:3f:ff:a7:4d:95:d3:b9:a9:60:46:7c:d1:45:cd:
eb:54:88:b2:aa:07:3c:a3:22:7a:da:24:2a:52:75:cb:1b:ec:
89:e7:dc:01:96:ad:97:5b:f4:e2:1a:38:fd:0f:f7:b0:72:f5:
89:14:1d:15:c0:91:15:d9:2e:50:36:77:8f:2d:d6:70:39:77:
d4:fc:5f:a7:b6:75:7a:76:6c:34:9e:12:bf:3b:46:04:41:34:
50:ec:19:5c:53:60:87:69:a8:26:64:e2:11:3a:96:28:e8:0a:
55:9f:56:74:e5:7e:d3:80:b8:8f:e8:5a:fd:c4:89:a8:55:d4:
11:22:87:2f:57:eb:80:c4:69:d0:a1:f5:0b:49:eb:39:b0:20:
65:48:76:69:04:5c:bf:7a:d3:c2:77:f6:37:02:45:f7:87:de:
d6:42:05:84:26:97:32:1a:d2:f3:cb:bf:83:f7:b2:eb:3a:25:
83:ca:6b:15:b2:4e:2e:7f:f2:0c:a0:9b:f7:05:23:e5:e7:dc:
dc:61:57:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:11 2025 by rpki-client