
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca58d427-5d8c-4d3b-af87-b639bbdcf13f.roa
File: ca58d427-5d8c-4d3b-af87-b639bbdcf13f.roa (raw, json)
Hash identifier: 8mvTKjMVfC+aAf+cTWKg3XpKzraBThwybK6SjZaTr9Q=
Subject key identifier: 14:FC:BD:E9:71:CE:3C:B3:EF:DC:04:E2:2C:9C:22:C1:27:00:ED:2B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6E3DF03D160035CA08C9BEAC0CDC0488815150EC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca58d427-5d8c-4d3b-af87-b639bbdcf13f.roa
Signing time: Fri 31 Oct 2025 06:43:57 +0000
ROA not before: Fri 31 Oct 2025 06:43:57 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ab0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3d:f0:3d:16:00:35:ca:08:c9:be:ac:0c:dc:04:88:81:51:50:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:43:57 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=56543812250ee1448da2be29403f3b9bb3f0a992011cec4bb795057047dc06e5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:ed:ce:6c:83:9a:2b:c1:99:70:8e:d3:f5:
d5:e0:fa:d3:cc:40:eb:a7:5b:29:07:1f:e0:1b:90:
d8:cd:4d:d2:7b:0b:dc:19:c4:b7:42:58:bb:b9:a9:
c6:c2:eb:8d:b8:0c:fd:64:a7:61:28:5a:5c:d0:40:
53:7f:0d:eb:ed:94:63:ac:9a:ae:28:64:1d:d5:db:
28:d0:2b:26:d6:6c:d2:f6:6f:a2:2d:84:31:e4:56:
e0:9e:6f:74:2f:46:c0:70:ec:cf:ee:1e:3a:a1:24:
87:f4:4b:c9:d6:31:ee:78:f0:34:c6:48:e7:41:b9:
03:9e:85:f7:c5:f7:97:11:bc:43:59:16:7d:c5:69:
92:d1:dd:f1:d6:bf:12:f6:69:42:0c:cf:35:10:5c:
02:97:80:ff:a6:52:f3:f4:eb:f3:9f:48:e0:9b:aa:
c0:69:ae:4c:c4:d5:20:37:cf:86:80:95:6a:39:4f:
83:1f:b7:bf:a8:fd:03:de:a9:a0:0c:34:af:13:a9:
21:12:86:18:5a:c3:cc:3e:1e:b0:27:15:cb:49:25:
9d:5f:ed:40:72:58:3c:2d:94:12:60:7b:02:db:31:
0c:4c:c5:ee:0e:14:db:f7:44:bc:b6:08:4f:47:69:
f3:99:81:95:11:29:59:5c:53:af:8e:45:92:bd:51:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:BD:E9:71:CE:3C:B3:EF:DC:04:E2:2C:9C:22:C1:27:00:ED:2B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca58d427-5d8c-4d3b-af87-b639bbdcf13f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ab0::/44
Signature Algorithm: sha256WithRSAEncryption
b8:28:db:f1:d7:a1:0e:81:ba:ec:d0:d7:e3:19:16:53:1e:31:
96:bf:ed:b4:11:59:b7:87:17:9b:7e:25:ce:cd:70:29:cd:84:
bf:83:3d:d7:cb:9d:16:5f:53:4b:43:52:43:b8:97:5a:46:1c:
9e:dd:97:46:46:1f:90:f4:f3:e8:a6:5f:3b:58:e8:5a:c2:7a:
6f:2f:8b:27:6c:d7:1e:4d:71:9b:22:a3:a5:af:3f:2b:34:3f:
54:4b:cf:1f:7a:ca:2b:7d:8b:92:a0:e9:5e:14:71:5a:4c:16:
ec:58:8a:3e:7c:79:3a:3d:48:90:61:6e:7a:14:f0:90:ac:4a:
eb:df:3c:88:f0:4c:e3:14:96:f5:1a:dd:e1:74:5d:54:ac:9a:
bb:1c:b9:ed:b5:24:f8:1b:c4:b6:95:8f:29:ec:3a:1b:0a:ad:
68:60:3c:67:b9:af:3f:11:fb:4d:68:2e:f5:43:38:0c:d2:d8:
c9:b5:6c:1f:fe:90:fe:4d:34:ab:dc:0e:c5:f8:c5:cc:ec:80:
4d:ab:20:a5:2d:d2:33:65:87:18:5b:97:0f:67:f7:fe:c3:33:
32:3a:cb:1b:48:29:4b:ac:a7:47:e4:4a:eb:e0:84:9f:28:bd:
ec:30:25:2e:a4:01:af:fe:14:19:8c:51:f9:d6:97:3d:37:70:
33:c8:4a:9f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbj3wPRYANcoIyb6sDNwEiIFRUOwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MzU3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NjU0MzgxMjI1MGVlMTQ0OGRhMmJlMjk0MDNmM2I5YmIz
ZjBhOTkyMDExY2VjNGJiNzk1MDU3MDQ3ZGMwNmU1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDO3u3ObIOaK8GZcI7T9dXg+tPMQOunWykHH+AbkNjNTdJ7
C9wZxLdCWLu5qcbC6424DP1kp2EoWlzQQFN/DevtlGOsmq4oZB3V2yjQKybWbNL2
b6IthDHkVuCeb3QvRsBw7M/uHjqhJIf0S8nWMe548DTGSOdBuQOehffF95cRvENZ
Fn3FaZLR3fHWvxL2aUIMzzUQXAKXgP+mUvP06/OfSOCbqsBprkzE1SA3z4aAlWo5
T4Mft7+o/QPeqaAMNK8TqSEShhhaw8w+HrAnFctJJZ1f7UByWDwtlBJgewLbMQxM
xe4OFNv3RLy2CE9HafOZgZURKVlcU6+ORZK9UV0TAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUFPy96XHOPLPv3ATiLJwiwScA7SswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2NhNThkNDI3LTVkOGMtNGQzYi1hZjg3LWI2MzliYmRjZjEzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAKrAwDQYJKoZIhvcNAQELBQADggEBALgo2/HXoQ6BuuzQ1+MZFlMe
MZa/7bQRWbeHF5t+Jc7NcCnNhL+DPdfLnRZfU0tDUkO4l1pGHJ7dl0ZGH5D08+im
XztY6FrCem8viyds1x5NcZsio6WvPys0P1RLzx96yit9i5Kg6V4UcVpMFuxYij58
eTo9SJBhbnoU8JCsSuvfPIjwTOMUlvUa3eF0XVSsmrscue21JPgbxLaVjynsOhsK
rWhgPGe5rz8R+01oLvVDOAzS2Mm1bB/+kP5NNKvcDsX4xczsgE2rIKUt0jNlhxhb
lw9n9/7DMzI6yxtIKUusp0fkSuvghJ8ovewwJS6kAa/+FBmMUfnWlz03cDPISp8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:14 2025 by rpki-client