
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d6d457b1-8237-4b22-bfe4-97ee955431ff.roa
File: d6d457b1-8237-4b22-bfe4-97ee955431ff.roa (raw, json)
Hash identifier: RgnQ68TnrNEvv7Rtwwutq3g5EZL2EsawdNADX5kU4Yc=
Subject key identifier: FD:2D:6E:9E:89:E7:59:CE:FF:84:D1:E8:D6:D3:5A:D8:A3:81:88:FE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2455A39197068DB5FB9E9C22CCF8E76F227D0B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d6d457b1-8237-4b22-bfe4-97ee955431ff.roa
Signing time: Thu 30 Oct 2025 23:40:34 +0000
ROA not before: Thu 30 Oct 2025 23:40:34 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2eb6::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:55:a3:91:97:06:8d:b5:fb:9e:9c:22:cc:f8:e7:6f:22:7d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 23:40:34 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=dd363791d1e07d511269a2117371883757f401386ebafa72ea1e8a0c8a2d3c31, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:ef:ca:fb:07:35:bd:86:40:51:1b:a9:56:
3f:c5:23:0f:84:bf:76:28:80:50:bd:6e:20:0c:8f:
af:51:06:b8:9e:b6:77:d4:12:5c:52:c5:97:5f:39:
b2:07:bd:88:64:b0:b1:28:0f:6e:e0:18:45:97:a0:
60:33:9a:d3:97:1c:53:72:8f:f9:04:c3:0c:a4:56:
22:da:ac:6f:91:56:81:63:38:97:69:c3:57:0a:9b:
51:a2:1b:aa:6a:99:21:59:d9:a7:7f:2b:0c:79:1b:
38:e1:f5:4c:b7:e2:76:08:9c:b4:a6:10:ab:a2:4e:
ff:de:9f:4a:5b:1e:e7:bb:9a:f6:53:bb:d7:ca:82:
54:09:70:a4:a4:a8:2f:dd:8b:ce:96:b9:d0:66:44:
96:82:4d:c0:2b:b4:2a:7c:d4:16:79:ab:5e:23:fe:
33:82:c8:f2:65:c4:ae:70:ab:23:6c:a6:65:6b:5d:
4d:fc:d8:9a:63:08:52:3b:b6:36:62:72:05:22:2c:
c1:91:59:ef:64:7f:cc:be:21:e8:13:1c:a2:df:4b:
c7:9e:b3:06:4a:4a:a0:0e:9d:c5:5e:80:ec:02:0d:
3e:50:f0:86:95:66:c7:12:ed:8c:48:e4:32:72:26:
54:ea:cf:e0:41:01:63:33:52:42:55:f7:ac:33:38:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2D:6E:9E:89:E7:59:CE:FF:84:D1:E8:D6:D3:5A:D8:A3:81:88:FE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d6d457b1-8237-4b22-bfe4-97ee955431ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2eb6::/47
Signature Algorithm: sha256WithRSAEncryption
8d:b1:9d:e2:cc:a7:fd:ec:a1:f9:21:2e:8f:e5:6c:82:7a:9b:
e2:bd:78:69:5f:51:d7:4f:cf:34:4e:d2:83:7c:e0:c4:08:77:
c9:e9:1b:53:8a:79:f0:7f:11:ce:c8:65:e9:c8:7f:b3:45:aa:
f1:7c:98:d6:46:fc:e4:16:04:b2:a5:63:e8:ed:b8:94:e2:b1:
33:51:6f:db:48:be:85:fa:14:3f:24:e5:b3:af:38:69:e5:9b:
e9:0c:26:dd:b9:07:26:a9:e0:f7:8c:27:56:8f:e3:d0:7e:04:
09:a7:da:07:c0:8d:19:b8:92:9c:af:25:72:dd:16:fb:3a:47:
47:7c:2a:8b:9b:ed:17:3f:cc:0f:36:55:84:08:f9:a4:76:81:
0f:8a:41:67:9f:65:27:65:b9:35:72:d9:a1:86:84:ef:72:a9:
4f:94:75:ef:8f:f9:21:cb:02:d6:1d:07:e6:49:47:64:01:51:
62:01:d3:23:17:ef:ad:2e:5f:9f:f8:ce:38:f4:ef:52:72:c6:
48:b4:35:65:9c:3a:b2:4e:50:d5:5e:ce:5b:a1:4f:ef:83:b8:
58:9d:f7:37:b6:21:9f:3b:a8:d4:8c:26:23:87:bc:2d:03:59:
ac:bb:1f:84:71:5b:48:9d:56:ad:82:a5:9f:f0:7d:bc:43:8e:
f6:14:9c:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:53 2025 by rpki-client