
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d22618ad-3c19-49fe-b5be-6602407a9edc.roa
File: d22618ad-3c19-49fe-b5be-6602407a9edc.roa (raw, json)
Hash identifier: LR+AUNh0T+zb7OSb09XXj036p5F3WPj1KW4CeMeh+cs=
Subject key identifier: 73:AE:44:63:23:05:A7:C2:22:B4:C4:99:C0:55:A6:91:57:DC:F1:39
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 18858D65C812E9E4AB10D16AACAE0D2C9FD11DD6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d22618ad-3c19-49fe-b5be-6602407a9edc.roa
Signing time: Thu 30 Oct 2025 20:54:57 +0000
ROA not before: Thu 30 Oct 2025 20:54:57 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:13b8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:85:8d:65:c8:12:e9:e4:ab:10:d1:6a:ac:ae:0d:2c:9f:d1:1d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:54:57 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=b6a713a8f4edf0a91cff61bb68543ebe09e3c6ad19cdec7f3f5170cb0397b15c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:44:09:22:d8:bd:c1:90:c2:f7:fb:0d:f7:
e7:cb:89:d0:b3:df:00:df:03:df:c8:b9:2b:c9:9c:
70:e2:14:8d:bf:71:15:4c:36:cd:18:63:99:6b:bd:
b7:7e:76:2e:50:be:7b:fc:48:80:64:df:a7:38:92:
2d:eb:c1:06:00:e2:1d:cd:39:31:c7:99:54:b4:74:
f9:47:70:36:cf:46:cb:fc:ae:e8:ec:12:e1:b0:79:
32:97:46:42:01:79:d1:b4:9c:d8:7e:22:ac:0d:da:
ba:5a:48:b6:70:91:b3:70:05:e5:0d:b8:bb:2b:79:
9a:69:e2:1c:c8:05:57:89:d4:27:67:29:49:ba:3d:
9b:73:7d:66:2e:38:4f:f7:bc:37:92:48:14:88:17:
e0:6f:e7:c4:d1:fb:e6:54:16:9e:68:32:24:f0:a1:
9e:49:65:a2:cb:f0:dd:0e:a9:94:08:df:00:b3:4f:
e8:24:ab:0b:2c:77:6a:5d:0f:e7:f4:90:27:32:21:
c0:12:7e:c7:77:9f:55:10:0c:45:80:6e:cc:7f:56:
f0:1f:a8:42:3e:d1:7d:91:4f:0e:3b:dc:d9:00:94:
52:0d:92:1a:aa:2d:70:38:c7:80:7a:fc:44:5c:7d:
1b:e4:2b:f5:d0:12:65:b0:8a:1f:ef:f2:37:2b:83:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:44:63:23:05:A7:C2:22:B4:C4:99:C0:55:A6:91:57:DC:F1:39
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d22618ad-3c19-49fe-b5be-6602407a9edc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:13b8::/47
Signature Algorithm: sha256WithRSAEncryption
38:f5:56:26:6b:43:53:55:49:b9:a8:51:5f:87:05:a7:57:9d:
a0:bd:dd:f2:ee:9d:9e:97:9f:6d:c8:d7:ac:d2:54:e1:f1:cd:
67:7a:6a:70:05:7b:de:6f:c4:d1:f2:23:17:12:a5:88:7f:a2:
6a:c0:13:e9:b4:42:08:de:c2:05:a7:02:a9:98:76:e5:1e:13:
16:f6:36:61:82:05:59:9c:7f:e8:b1:c3:f7:4f:71:26:9c:d7:
c3:f5:12:19:c3:50:47:bc:91:7e:9d:66:b3:9c:3d:30:c3:32:
55:99:03:f6:98:a7:74:ce:19:fb:e8:6c:9f:88:25:25:7e:44:
a6:d8:82:6f:23:20:72:c5:65:a5:1c:40:fc:cb:89:c0:66:40:
d7:cb:14:12:97:38:cc:9e:8a:19:21:0d:26:93:88:86:4d:d4:
74:11:48:43:88:66:dd:35:a2:b1:8f:4c:ac:0d:4e:93:db:5f:
36:dc:e5:14:91:e9:eb:0e:a0:5b:49:3b:26:ea:76:ac:f6:39:
2a:cc:df:5d:a7:d3:ac:03:76:e0:b3:d8:d1:cb:79:82:06:4e:
db:12:f1:6d:15:60:22:3f:f3:9c:29:d5:2a:9b:8e:ee:2a:c8:
07:7b:31:98:07:11:49:05:74:6b:fc:f6:1a:e3:ce:99:65:1e:
e7:74:ce:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:47 2025 by rpki-client