
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9884e47-fcf0-4a1e-b034-a4416e1f6c47.roa
File: c9884e47-fcf0-4a1e-b034-a4416e1f6c47.roa (raw, json)
Hash identifier: mjP8lTaQevhCC1CZxjkW1maU7C8lSGJtVEOMct1AGRM=
Subject key identifier: 52:57:F6:FA:E1:78:42:96:0E:F4:5D:7D:88:8D:C3:DB:8D:54:29:69
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 344D9F0B8F9291EC5A62576440361EA382CFAC90
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9884e47-fcf0-4a1e-b034-a4416e1f6c47.roa
Signing time: Fri 31 Oct 2025 06:36:54 +0000
ROA not before: Fri 31 Oct 2025 06:36:54 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1770::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4d:9f:0b:8f:92:91:ec:5a:62:57:64:40:36:1e:a3:82:cf:ac:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:36:54 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=337a4cd7a233b3da4e71d05bed83fe055896b22a18f0014961499fe5c8b1ddbd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:f0:60:0b:9f:e4:29:6d:22:d2:7a:6a:17:
f2:19:81:8d:ce:82:90:d2:47:17:d4:6a:ae:dd:d4:
bc:d3:49:36:78:61:fc:8a:c9:08:9f:0a:a0:a9:16:
aa:5a:5b:55:30:10:ee:24:88:6a:c8:30:2c:41:37:
38:57:96:47:e1:1f:a9:5b:aa:0e:db:4e:76:d2:e5:
5b:d8:68:2a:ba:d1:8d:0a:e0:75:db:f1:33:bc:e2:
5c:39:86:a7:35:d9:a5:1a:e4:bb:86:20:cd:04:dd:
1f:4a:e9:56:50:01:db:82:4b:91:15:c9:79:dc:cc:
43:de:ce:52:b0:4f:f9:fa:09:e7:35:af:f7:ba:4e:
f0:83:bd:7b:4b:15:20:5f:a7:b0:6f:b2:ef:30:23:
52:c7:9d:8a:ef:88:97:c7:95:10:b1:74:79:55:2d:
95:a8:79:a4:90:13:01:6a:bc:2e:4f:b5:c5:6b:f6:
fc:c3:24:6d:ab:86:80:5e:eb:a2:ec:2c:fc:50:c1:
2f:b3:42:fc:e4:73:8e:84:b7:fd:be:44:46:4d:71:
1e:0b:e1:a8:30:2d:ec:7a:a1:d2:7e:3d:4e:0b:c9:
66:05:e9:ad:f4:39:7b:01:20:e5:4f:0a:ee:44:ab:
b4:3d:2f:b7:8c:5e:09:6f:b3:93:5f:e4:37:87:32:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:57:F6:FA:E1:78:42:96:0E:F4:5D:7D:88:8D:C3:DB:8D:54:29:69
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9884e47-fcf0-4a1e-b034-a4416e1f6c47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1770::/44
Signature Algorithm: sha256WithRSAEncryption
7e:62:2c:49:cf:26:0c:34:cb:ff:a4:c6:fc:ef:c4:fc:32:09:
8b:52:9b:4d:97:05:db:9a:02:2a:3a:52:ea:87:9f:94:ec:8f:
9a:e7:4d:bd:3f:c5:37:c2:f8:7c:26:48:0a:e8:4a:88:1e:94:
9f:e1:bd:ea:5a:95:ec:b7:da:54:57:e0:29:ce:91:6c:dd:19:
a8:f3:f8:97:85:ce:ea:9e:a8:40:c7:2a:c0:7c:7a:9c:9d:85:
28:97:91:a2:5c:45:e7:96:e7:ae:36:24:2d:da:47:c7:91:cd:
3d:c6:65:09:9a:53:25:d3:f6:fa:e4:ae:49:a8:52:aa:ff:8b:
89:fd:b6:2c:ab:87:86:b2:74:37:12:29:12:d3:76:da:0f:82:
bd:d9:3a:f4:7f:01:0a:9a:b1:26:76:41:d5:fe:e0:4a:02:53:
ce:5f:2d:c3:79:e1:61:0c:91:14:dd:db:e3:ce:45:af:29:0d:
ac:90:f9:e8:ed:f8:4b:4b:55:a5:5f:a1:5e:bd:19:ec:cc:c1:
5e:ea:5b:26:5b:fd:f5:b8:8e:eb:82:0f:bd:e7:fb:15:09:12:
d4:0f:13:04:f7:ad:3f:8f:c4:7e:bc:55:6e:5b:37:3c:78:f5:
6e:47:a5:1e:d5:84:76:06:fd:1f:39:c0:4f:d1:5f:ef:5f:bd:
75:89:1a:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:26 2025 by rpki-client