
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c28cb1e4-bd4c-4d3f-9854-7d6cbc9c21af.roa
File: c28cb1e4-bd4c-4d3f-9854-7d6cbc9c21af.roa (raw, json)
Hash identifier: bj8b/dYfbhzoROovSCd+SjC25Ouw9/pIY+MBjal3QHc=
Subject key identifier: 73:A1:21:2E:79:7C:30:7F:89:87:14:CE:7A:C9:A9:82:58:11:57:84
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5767EA4414B881C7E2622CD5D615FAD107B808F2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c28cb1e4-bd4c-4d3f-9854-7d6cbc9c21af.roa
Signing time: Fri 31 Oct 2025 00:06:52 +0000
ROA not before: Fri 31 Oct 2025 00:06:52 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:32cc::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:67:ea:44:14:b8:81:c7:e2:62:2c:d5:d6:15:fa:d1:07:b8:08:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:06:52 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=7bfc9c7fd90c9575e184b833aa78155fa93fd87d7bca153e838aa0292c575d0f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:ab:05:44:5d:00:04:c1:53:47:68:33:b4:
33:25:4d:f2:b9:ca:db:a5:75:c6:0d:24:d1:80:dc:
9d:ce:61:bb:7a:d2:be:66:00:72:6e:c2:6f:26:a9:
cf:cf:1b:59:c2:91:8c:34:d1:5b:36:3b:d5:3c:07:
79:c9:cc:ce:9d:42:62:be:15:ee:55:f2:58:76:69:
b5:04:3b:74:35:24:95:3a:da:55:3d:49:32:91:1a:
7a:7d:08:3d:d4:1d:a8:a0:91:b4:ac:65:e7:12:6d:
79:e2:45:e3:dd:75:23:ca:e4:bf:3c:7d:7c:bc:6f:
2f:eb:62:5d:96:bf:df:07:c9:f2:9a:49:b3:95:58:
b0:89:1b:5b:8a:83:07:2c:86:3a:43:88:89:f6:2b:
db:f0:cf:86:2a:48:1b:bd:21:34:91:75:77:1a:87:
ef:63:00:ef:79:04:f9:f6:c0:29:67:2a:55:fe:82:
c7:55:11:52:d0:0a:bf:7c:ee:8c:78:fd:f1:8d:12:
27:4d:1b:ef:5b:a7:e9:5f:50:c9:cb:26:8a:a1:21:
7d:7e:e7:17:6b:00:31:03:a7:7f:83:ab:62:00:a1:
1e:b7:42:5f:39:09:5c:8c:b7:c4:ab:f1:2c:33:64:
08:06:69:93:87:85:81:a9:8d:d8:3a:2d:17:3b:95:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A1:21:2E:79:7C:30:7F:89:87:14:CE:7A:C9:A9:82:58:11:57:84
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c28cb1e4-bd4c-4d3f-9854-7d6cbc9c21af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:32cc::/47
Signature Algorithm: sha256WithRSAEncryption
4e:63:0a:11:6b:bc:0c:c1:df:8f:2d:07:dc:9b:7b:14:e9:34:
e3:48:52:be:de:ac:08:aa:76:c1:fa:5a:d8:21:f5:ff:fc:57:
0f:6e:0e:db:2d:e3:59:d2:da:58:98:e7:4e:29:36:d3:08:fb:
5b:d2:87:f9:5c:ac:22:10:66:38:e1:23:84:2a:6e:c8:8e:e1:
b6:f8:7a:fa:f3:18:b4:5f:9d:50:d3:65:9d:22:79:79:24:83:
33:fa:a2:6a:90:11:9c:4c:2c:ba:a0:94:9c:9a:98:a8:8c:4c:
00:55:d2:9a:ea:97:d6:5b:6d:cd:dc:7e:e6:c0:8b:4f:98:00:
b1:1f:66:af:f2:45:01:1b:83:9b:22:af:5a:5a:12:d4:c5:d3:
55:a8:da:74:af:62:b5:00:1d:b6:8a:ca:e8:d8:3f:80:29:5b:
39:51:5d:f8:74:0a:78:85:1f:0c:b6:71:fb:e5:1a:60:0d:17:
de:c7:ec:51:3f:86:d3:06:e6:ea:56:9d:00:f8:a7:3b:59:70:
5d:d9:87:44:54:dd:85:6e:f8:bb:73:cf:9a:51:44:cf:e8:e0:
f8:8f:73:1f:2b:0f:e8:a5:7b:f0:55:34:4a:5d:28:b1:28:90:
cc:35:5a:3c:7d:ef:dc:d0:f2:7d:94:cb:49:00:98:88:ca:33:
4f:3a:97:ef
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUV2fqRBS4gcfiYizV1hX60Qe4CPIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAwNjUyWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YmZjOWM3ZmQ5MGM5NTc1ZTE4NGI4MzNhYTc4MTU1ZmE5
M2ZkODdkN2JjYTE1M2U4MzhhYTAyOTJjNTc1ZDBmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMfqsFRF0ABMFTR2gztDMlTfK5ytuldcYNJNGA3J3OYbt6
0r5mAHJuwm8mqc/PG1nCkYw00Vs2O9U8B3nJzM6dQmK+Fe5V8lh2abUEO3Q1JJU6
2lU9STKRGnp9CD3UHaigkbSsZecSbXniRePddSPK5L88fXy8by/rYl2Wv98HyfKa
SbOVWLCJG1uKgwcshjpDiIn2K9vwz4YqSBu9ITSRdXcah+9jAO95BPn2wClnKlX+
gsdVEVLQCr987ox4/fGNEidNG+9bp+lfUMnLJoqhIX1+5xdrADEDp3+Dq2IAoR63
Ql85CVyMt8Sr8SwzZAgGaZOHhYGpjdg6LRc7lcntAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUc6EhLnl8MH+JhxTOesmpglgRV4QwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2MyOGNiMWU0LWJkNGMtNGQzZi05ODU0LTdkNmNiYzljMjFhZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAMswwDQYJKoZIhvcNAQELBQADggEBAE5jChFrvAzB348tB9ybexTp
NONIUr7erAiqdsH6Wtgh9f/8Vw9uDtst41nS2liY504pNtMI+1vSh/lcrCIQZjjh
I4QqbsiO4bb4evrzGLRfnVDTZZ0ieXkkgzP6omqQEZxMLLqglJyamKiMTABV0prq
l9Zbbc3cfubAi0+YALEfZq/yRQEbg5sir1paEtTF01Wo2nSvYrUAHbaKyujYP4Ap
WzlRXfh0CniFHwy2cfvlGmANF97H7FE/htMG5upWnQD4pztZcF3Zh0RU3YVu+Ltz
z5pRRM/o4PiPcx8rD+ile/BVNEpdKLEokMw1Wjx979zQ8n2Uy0kAmIjKM086l+8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:37 2025 by rpki-client