
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c222a3fe-09a9-4661-9503-5fed679fd9e3.roa
File: c222a3fe-09a9-4661-9503-5fed679fd9e3.roa (raw, json)
Hash identifier: 7s4xr9KN0ttNpDx94fxTGO9SvU4T9e5h8ODl53eonp8=
Subject key identifier: 7E:E7:A4:D5:5C:7D:3C:B7:B5:64:99:04:B1:48:44:57:4B:15:36:D9
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 53B2EB6F1740FEC0CAF50871CB1DDF23E44A05C0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c222a3fe-09a9-4661-9503-5fed679fd9e3.roa
Signing time: Fri 31 Oct 2025 06:25:33 +0000
ROA not before: Fri 31 Oct 2025 06:25:33 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f80::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b2:eb:6f:17:40:fe:c0:ca:f5:08:71:cb:1d:df:23:e4:4a:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:25:33 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=f2ec2c6bd75bd67a9361a421170f7b93d9e57cd4e6319fc30a6d7ca9a1079d92, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:7c:c0:fe:e0:e8:af:89:52:98:40:3d:b4:
a8:00:0a:53:2b:dd:cd:c1:14:88:44:9d:2e:4d:85:
23:0c:79:21:54:ae:b5:83:d4:6e:ad:64:23:36:95:
5f:3f:02:4b:ca:64:7c:7f:a5:36:46:2a:c1:42:8a:
14:eb:2c:f8:23:bb:d3:6f:e5:ce:8f:33:48:91:c6:
e4:0c:74:eb:0a:28:f7:fc:08:1c:44:9d:8e:86:b4:
a8:d7:32:7c:f3:32:3c:df:f4:63:fb:84:a7:00:31:
6b:01:c2:e1:07:4d:24:3b:2d:56:32:11:51:61:de:
16:d6:c0:c2:9e:e4:55:2f:6c:0b:56:24:71:4a:ce:
57:7c:31:3f:f4:eb:8f:5b:9a:d7:bf:b0:4b:97:e1:
5c:84:63:5e:ef:08:d5:70:f6:92:18:b2:3c:98:88:
95:39:14:9f:30:e6:56:b9:c6:13:8d:b5:88:3c:1a:
f8:cc:2c:ea:80:87:e9:08:70:7e:c1:80:c6:e7:0f:
ee:12:3a:d4:9b:2a:00:7a:41:79:61:99:03:e2:fe:
2b:e2:cd:1b:eb:4f:d3:14:8b:11:03:75:02:c0:08:
be:0c:51:68:f3:b9:3f:25:9c:21:4c:b6:1c:d1:78:
42:a9:b9:e5:11:26:62:36:74:75:ee:cf:8a:6d:7f:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:A4:D5:5C:7D:3C:B7:B5:64:99:04:B1:48:44:57:4B:15:36:D9
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c222a3fe-09a9-4661-9503-5fed679fd9e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f80::/45
Signature Algorithm: sha256WithRSAEncryption
b5:31:a6:82:43:aa:f5:74:01:99:6d:52:c7:13:15:88:75:8d:
c8:fd:2d:da:5f:db:d5:9b:bf:f1:fe:25:ce:56:5c:b7:87:2c:
98:eb:cf:a9:1a:96:30:33:51:cc:50:8a:7a:01:fc:87:d5:e0:
a0:4c:4f:ff:f5:e9:88:98:ab:5b:18:93:c4:05:d6:98:8d:a9:
f5:40:71:f4:74:6e:60:37:03:3f:d1:36:71:1a:f3:10:80:cd:
e0:49:6a:13:94:60:2d:a1:ef:a5:e8:f8:74:43:2c:2c:d2:65:
0f:3e:11:6c:14:bc:bf:50:61:d4:cd:af:a9:f4:74:e1:36:04:
84:60:68:6b:6a:90:8d:15:df:05:2e:70:c7:30:8c:14:ae:2a:
49:3c:dc:09:69:3b:0b:5d:a2:d8:89:44:9e:d1:bc:2c:10:3d:
7d:18:97:2e:81:6c:21:04:e2:64:b8:b5:63:9f:9b:9d:3e:77:
a4:ef:d3:68:3a:fb:d0:61:f6:3c:83:5c:08:aa:c1:02:0b:b1:
50:a0:49:ee:cf:ca:2f:f4:a1:4b:e3:b7:70:41:a8:8d:00:e1:
b5:90:3e:2e:29:b1:00:0f:6a:17:71:56:fa:01:d0:a1:c0:12:
ed:d6:19:94:32:51:d5:af:47:5e:63:48:9b:10:ba:03:2d:70:
44:26:3e:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:50 2025 by rpki-client