
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c3c0fcbf-87db-4292-9dea-76bbd82a1f98.roa
File: c3c0fcbf-87db-4292-9dea-76bbd82a1f98.roa (raw, json)
Hash identifier: MGkFXYJvRwMmhzvbYM7VdtxQJPriRLkuCuC0sbBQX98=
Subject key identifier: 5E:6E:B2:B7:CE:33:0F:E0:A0:4A:5C:3E:B0:AA:B6:52:97:11:F0:36
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2492C63F34C6969AE0DD519C636CB676A5882DAB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c3c0fcbf-87db-4292-9dea-76bbd82a1f98.roa
Signing time: Thu 30 Oct 2025 22:08:54 +0000
ROA not before: Thu 30 Oct 2025 22:08:54 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1b36::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:92:c6:3f:34:c6:96:9a:e0:dd:51:9c:63:6c:b6:76:a5:88:2d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:08:54 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=17a40ea048b3322597a7126eae581e744948222f57c0842805f579d016b6db35, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:45:7f:70:0b:20:ad:e7:f0:e9:9e:40:c0:
85:fe:52:45:da:75:ca:e9:8c:42:af:79:af:6b:9f:
48:78:4d:db:37:f6:23:7b:00:15:8a:29:23:36:7f:
3b:e5:54:39:1d:3d:b5:59:8e:54:4e:b2:67:d0:3b:
80:22:cb:f4:b1:c5:0d:4e:61:f0:0f:23:e7:43:27:
76:1e:c4:82:a4:bd:0b:cb:3a:0a:a5:c8:ab:43:35:
e1:9f:cf:0a:fb:55:03:8d:d4:11:07:97:cf:d6:bc:
31:d0:2e:ca:8e:89:ae:c6:22:66:34:33:89:e0:b4:
24:30:2b:3a:f7:50:ad:ca:96:cd:48:b9:9c:9e:6f:
41:fc:0c:a9:08:62:24:24:59:40:48:dc:46:9f:80:
cd:87:15:bb:ac:8d:ca:34:96:a2:21:79:01:b3:dc:
b7:00:b5:b7:03:d8:b3:c6:5a:99:6d:2b:ce:ed:87:
41:41:d4:92:56:39:68:d2:1f:04:5e:6d:7a:68:e6:
f3:77:9e:f9:cf:fa:40:45:5c:38:f8:fb:3b:f5:5d:
57:3f:76:22:2b:c3:bc:04:57:37:f5:f6:8e:04:84:
61:40:c9:33:83:71:49:cc:5d:ad:e1:b2:72:56:01:
ad:f5:26:68:a8:ab:e4:30:d7:fa:68:04:30:f0:10:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6E:B2:B7:CE:33:0F:E0:A0:4A:5C:3E:B0:AA:B6:52:97:11:F0:36
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c3c0fcbf-87db-4292-9dea-76bbd82a1f98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1b36::/47
Signature Algorithm: sha256WithRSAEncryption
36:83:40:b1:d9:81:ae:a7:db:57:8d:dc:44:5d:7d:3f:79:b0:
80:1c:20:13:8e:7e:d2:db:42:26:7b:c8:56:94:78:ce:59:b4:
bd:7c:be:fa:35:a4:30:04:31:a8:a0:ee:fd:74:6c:e4:7a:1b:
81:2d:e1:f7:0d:9f:ce:a6:68:ea:2c:71:13:4c:34:d4:c2:23:
c3:0e:e7:38:cd:06:f4:48:f5:e3:af:d9:13:b5:71:d6:5c:22:
5b:4a:80:2c:08:17:cf:36:6b:a3:ee:e2:a5:f9:4d:09:f4:c8:
dd:c3:69:e4:b7:9e:d2:30:bc:83:f6:05:6e:69:da:f9:40:7c:
34:03:d8:41:f6:68:52:06:d4:ea:5b:73:ed:6d:72:ef:45:16:
7b:fc:ca:77:cc:70:06:77:82:c3:38:68:f4:f5:c2:58:52:19:
20:ff:df:82:4c:d0:cb:41:bd:55:8f:d8:4e:e3:a3:0f:8b:55:
7d:71:a7:ef:e9:bc:5c:ca:d7:a9:21:c7:34:2e:91:83:41:77:
52:f3:e3:8f:3c:ca:0d:ea:36:d2:98:7a:e7:f5:ba:f9:c9:d6:
2a:9e:f3:2d:4d:1d:85:3a:80:4a:26:75:58:ad:cb:74:f9:a7:
80:3d:52:3c:7d:d5:63:0c:3e:2c:9a:a8:4f:3b:2b:cf:ad:21:
e0:fe:c9:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:11 2025 by rpki-client