
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce28f211-9149-4287-83f5-45766b376d8c.roa
File: ce28f211-9149-4287-83f5-45766b376d8c.roa (raw, json)
Hash identifier: mGVcWnd+do1VSWr/UDz6yXWJHTBUHnBKxE1D/uBvRng=
Subject key identifier: 59:F2:1F:FC:CB:88:18:00:E1:7C:93:60:72:1A:E4:05:E0:2D:A8:1A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 326216BF2E81AB902F7BDACF612BEB1CE21A7B1F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce28f211-9149-4287-83f5-45766b376d8c.roa
Signing time: Fri 31 Oct 2025 01:08:31 +0000
ROA not before: Fri 31 Oct 2025 01:08:31 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:397c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:62:16:bf:2e:81:ab:90:2f:7b:da:cf:61:2b:eb:1c:e2:1a:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:08:31 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=58e7869d190813cd0a66d4a4ccf60448b6687eea66c4bc6873c0356b45b0060c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:fa:e5:15:d3:cd:68:07:25:f2:ca:6b:7e:
dd:77:f0:45:29:af:13:e7:36:47:bb:b5:f2:5f:b2:
54:a4:e6:a7:3d:c6:a4:56:c3:f2:9b:00:38:61:04:
50:7a:af:82:08:ba:b7:32:28:cd:39:7f:72:f7:4a:
0c:cc:b6:a8:16:5c:91:dc:ef:6a:0d:bb:71:94:4c:
c9:e1:ab:dc:3a:45:a9:c3:2d:8c:28:f6:2b:ba:96:
b3:2c:92:4b:04:c5:f3:0a:b6:94:8a:a0:97:16:7d:
46:39:94:a6:6c:da:f4:8a:56:68:60:4c:c9:39:dd:
53:30:67:76:aa:61:be:d9:ba:5d:96:ee:53:8a:e8:
0f:9e:89:55:08:dd:b2:12:20:84:8a:bf:7a:99:d5:
7a:a3:19:61:90:1d:5e:cf:f7:24:28:08:e8:af:e3:
b6:9e:d3:7d:eb:35:b9:3d:56:bb:e6:5d:68:26:4c:
ca:c4:e8:6d:ca:7a:61:4c:7c:06:98:e9:8f:5f:69:
3f:29:83:e5:ea:7e:aa:83:dd:5a:c2:9c:de:38:4b:
14:e9:59:5d:d8:6f:04:25:9e:69:1c:87:10:e2:bc:
ab:3b:de:71:4d:a7:e0:5e:f4:99:6f:1e:23:f4:ee:
07:bb:55:cd:b1:bb:d7:21:30:72:d0:c9:5c:60:c4:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F2:1F:FC:CB:88:18:00:E1:7C:93:60:72:1A:E4:05:E0:2D:A8:1A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce28f211-9149-4287-83f5-45766b376d8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:397c::/47
Signature Algorithm: sha256WithRSAEncryption
11:89:2b:11:62:ab:af:50:d2:72:81:5c:e5:c0:5b:f8:e0:ab:
49:50:b0:2d:63:9f:b0:86:38:e3:19:35:01:4a:65:60:bb:f9:
aa:48:c9:25:ce:ab:7f:df:c6:46:4f:ce:c1:44:7a:fc:7b:c0:
9a:c7:5d:be:60:8e:ef:46:b7:fa:79:f6:77:3b:c8:ba:0b:49:
9c:55:9d:8b:48:3d:1e:8a:3f:3d:7d:71:7c:9f:fa:50:77:69:
6c:6f:3a:52:0c:99:3d:29:5f:4e:87:e4:e0:e7:ad:06:5c:2f:
80:24:95:37:37:ce:19:92:77:18:38:0d:e5:b1:5e:54:33:89:
a5:d2:e5:8e:69:0e:de:23:5f:5b:b8:4f:a5:62:ca:96:97:79:
60:72:a2:cd:5e:53:dd:11:9c:fd:38:f1:e5:5d:88:53:61:e1:
b7:bc:84:bd:54:10:29:c9:5e:db:74:17:ad:bd:eb:87:4a:9f:
4a:c6:50:2d:ea:9b:77:9e:46:5f:63:1a:3d:80:2e:0c:9a:2b:
98:5e:cc:77:89:55:22:7c:e0:93:3f:31:3a:fa:ff:b3:a2:72:
91:fb:1d:01:46:9f:8e:f4:bc:d8:14:7a:52:18:10:4c:ac:1f:
b7:00:6b:f7:2a:d1:99:c5:bf:09:67:b8:ba:ec:53:b0:26:b1:
39:c1:16:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:14 2025 by rpki-client