
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce54f425-58de-4b6b-ae69-14bcf6018c84.roa
File: ce54f425-58de-4b6b-ae69-14bcf6018c84.roa (raw, json)
Hash identifier: uKiRhrS5BeYFGSNRCS1eyxf2DtoAhVC3tFRQWMRZTOM=
Subject key identifier: 21:5B:11:5F:53:4F:18:4D:CB:72:68:D0:20:F9:D4:45:80:34:04:42
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0AB23F25FA35B4C2AB7C0AD367DFBB484E8624CC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce54f425-58de-4b6b-ae69-14bcf6018c84.roa
Signing time: Fri 31 Oct 2025 02:23:52 +0000
ROA not before: Fri 31 Oct 2025 02:23:52 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1344::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b2:3f:25:fa:35:b4:c2:ab:7c:0a:d3:67:df:bb:48:4e:86:24:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:23:52 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=5dd19bf05fa6e4abe7b37546432e281a827eaf7e7530048bcb12aeeadb2a7a9e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:a0:4d:9a:59:50:47:69:f4:1c:b1:ef:8e:
74:d4:b3:db:fb:79:5e:71:7f:43:22:f5:9f:1d:c1:
a2:51:50:0c:7c:ae:fe:fd:67:06:b9:44:bb:ce:5d:
46:9d:24:0e:f7:04:7f:1d:f1:90:c8:78:b0:35:59:
08:57:a9:0a:5b:21:7f:1d:36:cc:bd:b3:7a:45:6b:
ba:9e:f4:dc:fd:42:65:4c:e3:4a:20:d8:40:e6:74:
4e:b5:59:ae:76:3b:3e:10:f7:5e:af:8f:f1:01:9d:
66:fe:db:89:24:82:0c:aa:1d:5f:81:9a:ac:f3:8d:
42:41:10:d3:40:f2:aa:ed:be:51:77:08:2f:02:e0:
c8:26:92:68:9b:61:6c:20:d5:da:8e:5e:a6:21:5a:
2d:e9:11:88:27:77:e1:d9:b9:eb:a9:fc:50:5f:53:
93:b1:2a:9b:67:90:1e:70:b3:d9:a1:1b:ed:24:b7:
1f:8a:ca:ae:9b:c1:5c:03:56:3c:c0:47:14:89:dd:
49:f9:cc:65:b2:7f:3e:37:41:20:ac:c8:a6:73:d8:
2d:53:31:2f:32:3f:d0:b6:fd:0a:ea:ac:68:fc:08:
b7:b6:b6:e5:67:b9:29:54:ff:bc:bd:64:b0:a1:70:
0a:e5:ca:5e:7e:d7:3b:de:47:9d:70:58:d4:f3:37:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5B:11:5F:53:4F:18:4D:CB:72:68:D0:20:F9:D4:45:80:34:04:42
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce54f425-58de-4b6b-ae69-14bcf6018c84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1344::/46
Signature Algorithm: sha256WithRSAEncryption
3a:00:69:e3:8a:e8:3a:fa:6a:7a:e4:79:a7:c4:d3:96:4b:d8:
4b:f1:51:69:c5:b9:67:86:36:65:69:23:dd:19:2a:2d:4c:ab:
e7:01:23:5d:9f:1b:31:53:ad:ce:ba:45:7a:ce:9f:4a:73:8b:
64:bf:d1:f9:e6:a0:df:93:04:23:27:e0:aa:7e:b2:eb:b9:82:
7f:d0:d1:6e:37:a3:60:34:ac:de:69:43:ee:ff:a0:a8:1e:ca:
71:e5:f9:6f:95:ce:8b:f2:83:d3:36:7b:24:ba:cd:7c:f6:19:
25:03:d0:44:1c:97:71:ed:24:ae:d0:55:84:bf:43:0b:49:d2:
63:1f:3b:41:40:13:a4:3a:6e:ec:6d:f6:c8:27:cb:fa:e1:05:
cf:36:69:72:5f:17:85:30:a3:ab:b1:23:ea:ce:21:7a:16:d2:
98:56:54:a1:bd:68:0b:b6:2d:e4:9a:89:d7:f9:76:0a:35:36:
28:39:d3:31:dd:49:4c:0a:52:65:16:36:50:45:97:46:df:75:
5e:17:4b:17:cd:ce:be:71:30:05:45:84:a8:7f:aa:cb:42:43:
a7:dd:e9:ff:94:9f:32:d7:9c:74:04:02:a3:61:1c:66:f1:3b:
cc:7c:40:20:36:14:07:ce:30:7e:53:10:b2:38:e5:2e:61:e1:
dd:6f:29:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:26 2025 by rpki-client