
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cf609379-4ec7-417b-916d-c19080d2e853.roa
File: cf609379-4ec7-417b-916d-c19080d2e853.roa (raw, json)
Hash identifier: pqaKEtwE20FV8Zkx9LWj/vlu+tWKmuavLdGeF0VDnqg=
Subject key identifier: B9:9C:46:E3:2E:06:BF:9F:EE:60:94:AC:89:EA:E8:5B:10:29:20:EB
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6206B81EEC84EEAD39E9BC434096E19206317447
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cf609379-4ec7-417b-916d-c19080d2e853.roa
Signing time: Fri 31 Oct 2025 05:40:37 +0000
ROA not before: Fri 31 Oct 2025 05:40:37 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2aa8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:06:b8:1e:ec:84:ee:ad:39:e9:bc:43:40:96:e1:92:06:31:74:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:40:37 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=21628dfc35c7b12e730f5f5339dab6a8ef77c21caa836e802cbb4e6cb998ebcc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:43:eb:c6:27:50:d1:ca:48:f7:ae:ff:81:
85:e4:e8:2c:18:df:67:ef:01:f2:1f:d0:d1:47:16:
b5:a1:4a:57:a5:54:70:1f:80:a9:a7:15:ba:7c:27:
eb:e9:c8:9e:b5:93:00:b8:98:80:8f:a8:8d:1b:a9:
7d:61:50:ed:85:6b:05:59:23:66:17:0d:1b:b9:f5:
61:7f:ff:37:7d:5f:9b:b0:ab:82:11:86:17:d5:36:
78:83:d0:bf:56:0c:ce:45:bd:3a:35:a3:0a:bf:8b:
11:cc:70:63:d5:d6:a3:57:b6:77:35:7e:16:01:c0:
bc:a4:19:44:dd:1c:99:44:5a:75:ac:43:c1:9d:d0:
50:79:b4:f6:27:70:47:53:35:d2:64:1d:aa:38:58:
79:10:36:d1:02:4a:10:24:a7:c3:1c:46:61:cc:ae:
2b:bd:c3:52:11:01:8b:97:e2:da:16:03:b5:0a:c5:
31:a5:7c:40:7d:2b:41:15:1a:8b:09:6a:d1:65:43:
2c:69:e6:6a:dd:3f:fd:a9:71:36:cf:aa:47:22:3e:
b7:bb:6e:d2:b9:15:fd:5e:aa:8b:b1:b5:c2:62:6d:
f9:ca:de:56:09:89:7c:05:29:b5:92:c3:12:bb:8f:
01:56:27:c6:62:78:bf:cc:42:3a:91:22:cd:ad:e2:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9C:46:E3:2E:06:BF:9F:EE:60:94:AC:89:EA:E8:5B:10:29:20:EB
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cf609379-4ec7-417b-916d-c19080d2e853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2aa8::/45
Signature Algorithm: sha256WithRSAEncryption
a3:b0:31:8a:ca:50:c2:03:8a:24:9c:e3:15:84:d1:bf:cb:7f:
0c:9e:11:65:1f:64:31:aa:52:92:19:bc:42:ed:f9:3a:75:f0:
29:6c:2d:8f:7a:04:f4:0f:d2:f7:82:6d:a3:a0:7d:c4:b3:0a:
cd:bd:4b:e9:9c:d0:a8:9c:12:57:6c:8c:c9:49:18:c4:17:38:
a5:25:8e:be:3e:d5:e4:be:e1:dc:dc:3f:b8:ad:7e:31:15:e4:
78:f5:2d:ba:40:86:eb:70:cf:bf:07:a7:d6:be:0d:fb:1b:e8:
58:8c:e0:51:30:83:fa:34:4a:b5:49:8c:9e:b2:9c:23:19:be:
23:14:96:7d:c2:d7:a6:fa:46:67:2a:55:84:9d:0e:2b:b6:c9:
9b:8b:22:78:8a:12:b2:fc:1b:89:57:04:c5:03:5c:ad:52:22:
c2:63:c0:22:81:04:08:00:36:78:49:67:c2:0d:2d:36:b9:96:
79:e6:f8:fe:1d:d5:53:60:12:10:b7:ec:b6:0b:e0:1e:18:18:
a0:0e:61:e7:ce:53:5c:b5:ec:82:90:8b:fb:d6:49:9d:6b:50:
44:9c:a2:d8:6d:50:51:6d:23:87:c1:05:51:0b:99:5a:27:9b:
5a:19:94:e1:08:40:df:5f:0b:00:1f:19:4a:01:22:31:a4:0a:
59:2f:03:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:07:37 2025 by rpki-client