
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c98d5eb6-960b-4d35-8922-3d719a077828.roa
File: c98d5eb6-960b-4d35-8922-3d719a077828.roa (raw, json)
Hash identifier: 5gJbuBLjaaL13eao0i5TRVSdBykry+WXQokWvl9w7IA=
Subject key identifier: B2:D3:5E:2F:AD:45:E8:C0:F3:D7:33:88:73:20:20:0C:1F:36:DF:CA
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 203E1EBD16C07D2243763BEBFD026F2A380FCEB6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c98d5eb6-960b-4d35-8922-3d719a077828.roa
Signing time: Fri 31 Oct 2025 03:51:45 +0000
ROA not before: Fri 31 Oct 2025 03:51:45 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2e50::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3e:1e:bd:16:c0:7d:22:43:76:3b:eb:fd:02:6f:2a:38:0f:ce:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:51:45 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=f5707be0ed02b718dd25d90bdec7c221614ccf02b3c3b7c847d153f5dffe523d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:6e:37:96:dd:a9:f1:d0:38:3d:2a:8c:2e:
66:ca:74:83:0d:4e:2b:03:2e:e5:ca:47:4e:e3:73:
c5:c9:1f:04:b5:66:03:09:ae:b3:86:78:5d:fb:55:
8d:fa:6f:b7:a6:b5:96:16:b1:91:d8:af:ca:7c:2a:
fb:81:a6:0c:fb:42:34:50:ef:2b:9f:99:3b:05:6d:
ce:a5:5f:31:b6:44:0e:24:bf:cc:ea:95:a7:81:b5:
ba:5c:f1:1b:d2:c5:6d:08:7e:ca:cb:46:e6:2b:df:
37:c6:6c:4e:3d:18:9f:ca:ef:97:a4:27:18:86:bc:
36:ed:e1:e4:49:04:85:42:b0:dc:25:67:47:15:21:
16:49:54:61:8f:dc:73:8e:52:ba:5d:0f:08:84:14:
79:e4:4e:61:c2:97:d5:a8:96:b6:82:4e:58:d0:98:
66:b9:45:61:e1:61:e4:3d:52:66:57:5d:b6:76:94:
8b:d8:71:89:f7:ed:80:f1:33:d5:e8:ea:08:5e:bf:
3f:15:50:9b:49:d8:54:60:a3:9e:5f:8e:b8:ec:4f:
d9:7a:6b:0f:3b:b2:86:43:7e:7c:4c:0f:01:44:c9:
75:fd:a1:5e:e4:d0:73:b1:b0:21:8a:69:a8:9e:60:
ef:82:b5:ff:c0:ea:28:ae:4a:9a:4e:6b:68:09:d6:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D3:5E:2F:AD:45:E8:C0:F3:D7:33:88:73:20:20:0C:1F:36:DF:CA
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c98d5eb6-960b-4d35-8922-3d719a077828.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2e50::/46
Signature Algorithm: sha256WithRSAEncryption
4e:ff:8e:ae:8c:d6:bf:26:06:01:e1:34:fb:9c:10:b1:5f:93:
33:dd:46:a2:83:86:bf:b4:1a:d7:8e:28:34:41:7e:c5:bf:de:
9f:5f:2d:36:ef:da:d9:13:aa:b9:40:01:f2:a8:df:fc:93:64:
f4:93:92:56:1b:60:35:a0:82:0e:ac:6f:ae:e9:6e:a1:c3:7a:
b0:c2:22:f7:40:c2:d5:79:4e:3a:f4:5a:34:97:8f:46:7d:24:
c3:19:ca:59:aa:87:63:e1:91:5b:d3:ee:7a:ff:70:ce:63:3a:
78:47:e8:f1:3c:b9:33:1f:6b:2b:03:2e:34:07:a1:5d:1d:f6:
ae:55:e2:49:53:98:33:f4:38:a5:f8:c6:5e:24:65:4b:d4:6c:
42:a6:02:ee:f3:59:2f:53:38:f4:c3:f5:4e:14:9b:c3:9c:42:
ff:f0:f9:63:b9:b1:fd:0e:15:8e:07:07:30:e2:16:fa:f0:d2:
93:d9:ad:8b:60:c6:ea:c6:45:4b:99:07:08:42:b8:31:f1:05:
2e:41:be:e4:6c:84:cf:a1:03:fc:c6:5e:89:ad:98:57:b2:3a:
00:49:ee:5e:08:25:4e:66:20:c9:0d:27:ba:67:63:f6:fb:64:
eb:bc:c9:19:83:c0:fd:85:2e:22:17:aa:f9:35:1c:3c:07:97:
ee:fb:2a:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:02 2025 by rpki-client