
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4f9e023-062b-4a68-b63d-aaf50b8d241e.roa
File: c4f9e023-062b-4a68-b63d-aaf50b8d241e.roa (raw, json)
Hash identifier: aROON5xf7WpZajHFXvsfpFF1FMzuewV31pKlPbUsSKY=
Subject key identifier: 9A:E5:D7:D0:8B:6B:44:DB:CF:D1:84:33:15:6A:6E:75:5C:46:07:C6
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7680F4A1EC14D728A3838E02F9FE92E4FB62F682
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4f9e023-062b-4a68-b63d-aaf50b8d241e.roa
Signing time: Fri 31 Oct 2025 04:12:06 +0000
ROA not before: Fri 31 Oct 2025 04:12:06 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:35ec::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:80:f4:a1:ec:14:d7:28:a3:83:8e:02:f9:fe:92:e4:fb:62:f6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:12:06 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=38a362e9ccd80d9a525513387208a6b2331fc44db5f096cfa974e33a4a7dafb0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:d3:31:25:73:b5:72:68:53:93:b2:f2:03:
0b:2c:2a:9a:8c:12:0a:d9:3e:d5:be:3a:52:88:41:
b7:b6:7f:6d:4c:00:23:a9:bb:df:4d:91:ac:40:ad:
74:28:91:7c:8d:bc:dd:29:57:56:28:e2:5e:02:4b:
a1:13:be:b2:e6:18:9c:4f:ee:20:d2:85:fd:ed:aa:
d5:c3:e7:90:7b:5e:09:65:b3:c8:18:e2:be:d3:43:
1c:1c:b8:be:20:2b:09:b8:95:24:ff:b7:f4:ce:9d:
08:5d:33:e3:4f:cd:33:8e:28:89:af:5a:1b:d5:ae:
29:eb:7e:da:83:79:fe:47:5a:65:00:fb:4d:ec:c9:
4f:4b:8f:49:d2:f5:c6:b6:1b:5a:ec:81:c3:7a:fa:
f8:87:96:f0:da:ed:ba:05:fe:cd:17:c7:77:00:14:
ce:5c:73:59:b3:d1:05:84:fc:a7:46:4c:1e:5f:92:
79:02:e1:46:dc:e2:44:98:0a:e5:ed:f2:4f:e9:44:
a7:7f:7c:cf:35:de:bc:32:17:16:cc:68:60:cf:7f:
23:55:7f:64:a6:30:5c:cb:32:8e:3e:ac:f3:11:12:
b9:58:38:8d:b8:0f:97:68:aa:e5:87:1e:07:a9:db:
d6:9d:92:1a:fc:df:3c:85:04:b8:ae:15:73:9c:d3:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E5:D7:D0:8B:6B:44:DB:CF:D1:84:33:15:6A:6E:75:5C:46:07:C6
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4f9e023-062b-4a68-b63d-aaf50b8d241e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:35ec::/46
Signature Algorithm: sha256WithRSAEncryption
5b:b9:fd:22:e0:04:a8:0a:53:1f:b9:3c:65:ce:47:7b:6e:88:
d0:1a:e9:ce:99:35:e2:56:d9:c5:ff:e7:87:f8:82:bb:cb:83:
26:37:f6:ec:3c:9a:b3:d0:fb:63:d0:4b:ed:93:7f:a3:fb:3f:
ad:83:25:be:3d:41:6d:37:63:9b:bc:a9:39:a2:af:67:04:7f:
7c:34:63:e6:63:3d:85:88:a0:e1:a5:c0:60:bd:43:56:45:49:
32:cf:c4:31:e6:6b:08:d7:0f:1b:0b:d1:c8:f5:9e:c9:51:38:
e2:1d:ec:d4:1a:9d:f9:79:b2:4c:37:ad:ed:c9:fd:c0:d6:01:
8f:7c:69:eb:d3:08:1c:ff:5b:3f:b4:8f:ec:73:20:be:46:aa:
b2:97:8f:e2:66:b1:f3:48:e6:f8:d8:7f:52:e7:ac:7b:db:0d:
cd:94:66:b7:41:d7:cc:52:2f:ff:be:42:fc:ca:0a:40:c0:5a:
f4:95:42:79:7d:04:ed:d9:5b:8e:d0:4d:86:1d:e5:c7:c8:56:
be:98:1b:5e:44:3b:1f:dc:b3:70:58:7f:78:2b:74:66:10:15:
2b:8f:77:99:ae:21:9f:3f:f6:c9:a5:88:f6:b4:28:50:e2:51:
b5:95:b6:20:f1:52:03:9e:38:2e:2d:6e:47:06:83:9a:c7:dd:
70:be:42:83
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdoD0oewU1yijg44C+f6S5Pti9oIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQxMjA2WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzOGEzNjJlOWNjZDgwZDlhNTI1NTEzMzg3MjA4YTZiMjMz
MWZjNDRkYjVmMDk2Y2ZhOTc0ZTMzYTRhN2RhZmIwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDp9MxJXO1cmhTk7LyAwssKpqMEgrZPtW+OlKIQbe2f21M
ACOpu99NkaxArXQokXyNvN0pV1Yo4l4CS6ETvrLmGJxP7iDShf3tqtXD55B7Xgll
s8gY4r7TQxwcuL4gKwm4lST/t/TOnQhdM+NPzTOOKImvWhvVrinrftqDef5HWmUA
+03syU9Lj0nS9ca2G1rsgcN6+viHlvDa7boF/s0Xx3cAFM5cc1mz0QWE/KdGTB5f
knkC4Ubc4kSYCuXt8k/pRKd/fM813rwyFxbMaGDPfyNVf2SmMFzLMo4+rPMRErlY
OI24D5doquWHHgep29adkhr83zyFBLiuFXOc02+nAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUmuXX0ItrRNvP0YQzFWpudVxGB8YwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2M0ZjllMDIzLTA2MmItNGE2OC1iNjNkLWFhZjUwYjhkMjQxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAANewwDQYJKoZIhvcNAQELBQADggEBAFu5/SLgBKgKUx+5PGXOR3tu
iNAa6c6ZNeJW2cX/54f4grvLgyY39uw8mrPQ+2PQS+2Tf6P7P62DJb49QW03Y5u8
qTmir2cEf3w0Y+ZjPYWIoOGlwGC9Q1ZFSTLPxDHmawjXDxsL0cj1nslROOId7NQa
nfl5skw3re3J/cDWAY98aevTCBz/Wz+0j+xzIL5GqrKXj+JmsfNI5vjYf1LnrHvb
Dc2UZrdB18xSL/++QvzKCkDAWvSVQnl9BO3ZW47QTYYd5cfIVr6YG15EOx/cs3BY
f3grdGYQFSuPd5muIZ8/9smliPa0KFDiUbWVtiDxUgOeOC4tbkcGg5rH3XC+QoM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:34 2025 by rpki-client