
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c60830ac-d759-42ea-ad06-c90bd5d2a05b.roa
File: c60830ac-d759-42ea-ad06-c90bd5d2a05b.roa (raw, json)
Hash identifier: jy3NRd9Qn1thsADbc+6cdXPMBgeC7bI0ZmXG1PntExw=
Subject key identifier: BD:09:B3:3A:AA:4B:B3:7E:CF:7B:89:80:B3:43:A3:9E:46:21:39:99
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 708C5A327DF70C141F0BF95CAEABAC01E9B75434
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c60830ac-d759-42ea-ad06-c90bd5d2a05b.roa
Signing time: Thu 30 Oct 2025 20:06:46 +0000
ROA not before: Thu 30 Oct 2025 20:06:46 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:5200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8c:5a:32:7d:f7:0c:14:1f:0b:f9:5c:ae:ab:ac:01:e9:b7:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:06:46 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=5c129b27655001cafbadb1083263acee37fb501e1431814efcae970daec56d98, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:c2:88:b0:2a:92:ea:ae:35:07:ec:a1:ac:
06:d5:d3:bd:d9:1c:b4:d2:01:f0:9a:03:48:26:e9:
dd:0a:e7:5a:e5:66:ab:cf:73:5d:40:8a:8f:e7:75:
90:d0:6c:62:e2:d3:13:cc:ec:17:a8:66:a0:5a:87:
ea:bc:a3:27:52:ef:52:2b:7d:30:92:9e:44:de:67:
d8:7f:6a:78:d5:de:1d:c0:de:cc:50:67:32:d5:e5:
86:8b:5d:d1:1b:05:b8:f0:72:ec:c5:87:67:53:f5:
a8:63:0b:be:40:69:8d:0b:19:bc:ca:11:4e:46:35:
b0:e6:19:fe:f5:84:3f:ca:ad:95:c1:5a:40:d9:f2:
2f:9f:28:d7:73:1c:ee:42:c7:42:ca:52:99:fb:0c:
3b:e0:16:56:50:58:8c:97:cb:99:44:73:aa:ff:12:
14:ab:ab:05:4a:7c:9d:92:e3:66:25:4d:04:e3:2d:
58:59:79:39:df:f4:90:11:89:5e:d8:4c:4d:03:c3:
08:0d:28:d5:e9:00:ef:93:e3:a2:3e:2f:65:47:01:
05:b1:3a:8a:0a:8b:61:16:20:09:8a:8d:5f:69:91:
39:12:1c:7f:df:a3:c0:f6:a4:54:26:d2:33:53:91:
63:24:57:45:a7:b8:5f:47:e7:d4:31:ed:bf:9f:99:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:09:B3:3A:AA:4B:B3:7E:CF:7B:89:80:B3:43:A3:9E:46:21:39:99
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c60830ac-d759-42ea-ad06-c90bd5d2a05b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:5200::/40
Signature Algorithm: sha256WithRSAEncryption
87:86:98:32:15:2d:e4:55:16:f6:27:e2:e8:06:6f:a2:77:b0:
6b:49:e6:23:ad:87:c6:d2:8f:82:39:76:ad:0d:76:94:39:28:
e7:73:3a:2e:af:c8:d6:13:71:22:06:a3:de:69:be:8d:8b:92:
06:d0:70:0b:a1:85:ce:0d:19:c7:91:0e:e4:1e:64:d5:8e:01:
d0:9f:c4:1b:f1:01:72:ff:e4:41:c0:0d:1b:61:6d:99:a8:1d:
15:7b:be:3a:70:61:cd:91:ad:93:af:eb:74:7a:14:49:a7:9c:
e1:5a:1c:8f:ae:82:9d:37:ef:73:cd:75:ef:6a:f1:61:6e:99:
24:82:cf:6c:2a:70:30:f7:9b:c5:25:d2:03:c3:01:e3:4f:5b:
c9:92:54:ad:32:fe:65:53:6f:54:f5:4f:88:54:3c:aa:67:3f:
b0:ac:d4:3c:c8:d4:d1:36:ed:cd:ea:b7:66:2d:f3:60:08:8f:
67:a6:8b:ba:35:ab:90:bb:41:f7:48:fa:49:27:80:51:fd:4f:
0e:94:2b:9b:9c:aa:c0:96:fa:82:8e:33:61:2a:f5:d4:6b:0c:
51:df:fd:90:32:a0:a4:5d:da:db:1f:a1:fd:d4:7b:c2:f6:52:
cd:8c:1e:35:6d:71:d5:68:6a:ff:d3:e1:d5:6b:24:44:df:67:
5e:59:38:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:05 2025 by rpki-client