
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4c834bb-2d9a-4b1c-bf2a-136d5f62af15.roa
File: c4c834bb-2d9a-4b1c-bf2a-136d5f62af15.roa (raw, json)
Hash identifier: R+Bff34IkSdjI1QEz6fNe2WSEhxPDKEzBmKI6GtCu6c=
Subject key identifier: 43:6B:BA:5A:AC:34:EA:8E:F6:92:BD:13:FC:A5:90:3F:27:E5:DB:0A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6DBAEB8F20C24E86D6060BAED7166DF2D917358F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4c834bb-2d9a-4b1c-bf2a-136d5f62af15.roa
Signing time: Fri 31 Oct 2025 00:28:08 +0000
ROA not before: Fri 31 Oct 2025 00:28:08 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:35d8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ba:eb:8f:20:c2:4e:86:d6:06:0b:ae:d7:16:6d:f2:d9:17:35:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:28:08 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=06759daa5ca2c6e7a83ca6af75c1ba71e8b81f3130ee02164f9551d81efb3782, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:12:a7:32:03:e2:87:50:98:18:02:0d:83:08:
bc:b0:9c:47:78:26:d5:4f:fa:e1:1d:13:8a:4a:d7:
19:4d:ee:d6:c5:63:38:92:f1:e5:34:81:16:cb:c7:
42:e9:76:c1:b6:30:bb:d7:9a:44:ec:d9:c6:21:86:
a0:5b:32:a0:76:64:30:25:84:00:fb:3d:5c:5c:f0:
0c:82:59:f5:5d:05:1b:65:b1:c1:2e:72:78:ae:43:
a0:a4:1c:70:41:17:bd:b7:cd:c1:f0:ba:48:3d:f4:
c8:70:67:8e:39:32:f9:1b:df:e5:d9:d7:69:50:22:
95:1f:26:c3:28:6d:c4:2e:dc:64:63:15:e3:cf:72:
d4:13:1b:87:b3:33:04:64:75:41:51:40:b1:d2:0c:
8e:49:a5:24:cb:42:1e:06:c7:3b:ea:fd:86:9c:f8:
1b:ce:ad:2c:82:49:8d:21:e7:ac:51:1d:2a:93:68:
d6:a7:f3:7c:72:02:59:b5:1e:60:c1:7b:9b:b7:05:
42:f6:f1:8f:f4:ca:34:c2:8a:97:94:50:6d:ee:25:
26:9c:51:a7:16:80:d2:ad:23:c4:56:10:63:54:16:
5c:d8:01:54:93:67:26:8a:6a:8a:a5:1a:e1:69:57:
0f:f0:57:27:8b:8a:f1:a6:53:d7:83:d7:14:d7:6e:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6B:BA:5A:AC:34:EA:8E:F6:92:BD:13:FC:A5:90:3F:27:E5:DB:0A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4c834bb-2d9a-4b1c-bf2a-136d5f62af15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:35d8::/47
Signature Algorithm: sha256WithRSAEncryption
59:71:26:46:8b:86:b5:d4:7b:b9:21:c2:23:6e:14:eb:6b:98:
62:9a:78:1c:25:0e:ea:50:2d:a0:af:da:73:85:70:3a:f9:cd:
87:0a:a6:06:20:b8:4d:e3:b4:5d:bc:6b:6f:9b:84:0e:08:6e:
3d:39:58:28:12:5f:81:8d:49:b8:7a:1a:a0:e6:70:6a:44:78:
78:89:b4:ad:01:65:d2:e4:55:14:0f:7f:fb:dc:c8:1f:cd:a4:
91:d7:51:66:01:c7:22:14:c1:2e:53:87:dd:8d:d7:e6:2b:ee:
78:0d:a8:b4:25:cb:91:99:43:d6:ed:d9:6d:e0:b8:cc:d2:3a:
80:3d:90:93:e6:32:52:14:63:64:d1:e6:23:9e:f1:6b:9a:ef:
11:2c:76:d1:05:eb:e5:9a:bc:9e:b1:85:d9:0e:d3:9f:43:b5:
45:e3:e0:9c:a7:27:3e:9e:76:79:7c:f4:b7:b5:5b:52:77:4f:
4d:21:f8:ed:89:ce:f6:b8:4c:bf:25:b1:29:fb:98:b5:9f:41:
1a:83:42:9c:0c:d8:a8:c2:3c:03:57:8d:2b:f3:3e:71:96:76:
70:9b:c1:42:1e:d7:b0:8f:df:61:de:b8:e5:42:ae:7d:a2:27:
57:c3:1d:b9:e3:3d:af:1e:94:13:32:64:09:b1:66:db:51:25:
51:e3:9d:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:49 2025 by rpki-client