
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d7153ba9-5cc3-4c20-a242-f2f0fbb33176.roa
File: d7153ba9-5cc3-4c20-a242-f2f0fbb33176.roa (raw, json)
Hash identifier: kTgUwzmdJ6GkGGI5hLJZCv7cCcv24Ks/NfCetq+/YWM=
Subject key identifier: 00:BA:D9:48:BD:76:90:38:F8:D8:81:2A:8C:41:B1:2A:B9:5F:C7:A6
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 26CB7102321EEADB5B756CA55992769A3CC98494
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d7153ba9-5cc3-4c20-a242-f2f0fbb33176.roa
Signing time: Fri 31 Oct 2025 05:53:37 +0000
ROA not before: Fri 31 Oct 2025 05:53:37 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2f10::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cb:71:02:32:1e:ea:db:5b:75:6c:a5:59:92:76:9a:3c:c9:84:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:53:37 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=b8d64d66cd3826fe3d3e111a423acf655d8684af534857be1c27d741ad0d8acf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:5e:b1:c9:25:68:ed:61:64:98:25:6f:56:
a3:42:3a:b1:c4:1e:ad:60:90:13:9b:21:bc:63:cd:
eb:27:2b:22:94:62:3b:6e:ae:80:e9:cd:f4:5e:25:
f1:eb:99:64:ce:cb:78:74:97:37:8e:5c:6a:c1:93:
a6:07:66:a6:7c:02:86:30:79:b6:9e:be:bd:28:c7:
64:8c:67:95:3c:b0:e9:9a:bb:f6:46:58:e7:a1:65:
96:5e:5b:9a:c5:c5:f9:70:7f:5a:a5:3d:b7:de:15:
25:9e:f6:c4:35:2d:ed:b1:76:5d:4d:37:e1:8c:6e:
8d:38:28:1d:21:b5:7b:6b:77:c7:87:bd:8d:4f:08:
28:2d:25:d9:a6:19:9a:36:2c:9b:ca:db:cc:64:ae:
71:9e:71:17:36:fe:b0:e2:c4:33:da:97:34:43:44:
a5:a6:47:71:bc:79:5b:d7:9b:2b:7d:ff:fb:7c:42:
9b:81:53:c3:a1:71:9b:81:8f:ae:0a:a2:64:b4:0b:
81:34:b9:45:fa:60:65:50:0f:73:a1:ff:01:87:2a:
59:54:44:fe:9e:8e:28:84:56:00:76:5f:12:8c:69:
35:5c:81:03:87:62:c3:8c:a7:c4:11:38:72:79:e9:
ad:86:ad:57:1a:c0:26:7e:17:55:ff:16:c8:38:dc:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:D9:48:BD:76:90:38:F8:D8:81:2A:8C:41:B1:2A:B9:5F:C7:A6
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d7153ba9-5cc3-4c20-a242-f2f0fbb33176.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2f10::/45
Signature Algorithm: sha256WithRSAEncryption
80:b3:0b:2b:0f:14:3f:39:9b:dc:7e:6e:09:fb:ce:de:bb:32:
08:35:dc:67:3c:a3:ae:1c:e1:8b:7b:1d:d3:30:93:93:5a:ea:
eb:6d:85:14:f8:6b:84:d3:ef:56:e6:36:c3:df:36:a0:52:9f:
e0:58:3a:a9:3f:4c:ac:1e:ea:5f:e4:42:03:60:a6:70:ca:c7:
b2:04:c6:00:c6:53:98:1e:ef:b1:e6:4e:81:7b:eb:70:fb:28:
95:0b:e6:a8:8e:be:04:3b:85:95:2d:f3:e0:33:bb:22:88:15:
b6:11:37:63:f3:8f:a0:a3:fb:22:34:a0:a0:07:86:c6:51:14:
39:ad:e3:e4:e0:39:f1:35:34:17:b6:17:ea:41:a5:19:f4:7e:
3d:7c:e9:fa:46:21:7e:73:b2:2e:b4:67:71:60:2a:22:1d:ce:
0f:9d:b5:6f:da:dd:77:b5:34:6b:1e:33:5c:35:ce:18:48:b6:
53:8d:de:be:5c:9b:1e:32:38:d4:10:84:d5:c9:93:b7:8a:9e:
81:28:66:4b:92:1c:cf:d7:01:f3:ea:3c:c4:d6:05:47:7d:29:
e1:2c:63:7c:1f:bf:af:7d:83:16:6b:d6:eb:c1:e2:85:02:10:
02:08:1b:b8:21:60:c8:0e:ae:32:79:9d:18:e6:ca:35:08:94:
5c:81:d3:29
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUJstxAjIe6ttbdWylWZJ2mjzJhJQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1MzM3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiOGQ2NGQ2NmNkMzgyNmZlM2QzZTExMWE0MjNhY2Y2NTVk
ODY4NGFmNTM0ODU3YmUxYzI3ZDc0MWFkMGQ4YWNmMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqwV6xySVo7WFkmCVvVqNCOrHEHq1gkBObIbxjzesnKyKU
YjturoDpzfReJfHrmWTOy3h0lzeOXGrBk6YHZqZ8AoYwebaevr0ox2SMZ5U8sOma
u/ZGWOehZZZeW5rFxflwf1qlPbfeFSWe9sQ1Le2xdl1NN+GMbo04KB0htXtrd8eH
vY1PCCgtJdmmGZo2LJvK28xkrnGecRc2/rDixDPalzRDRKWmR3G8eVvXmyt9//t8
QpuBU8OhcZuBj64KomS0C4E0uUX6YGVQD3Oh/wGHKllURP6ejiiEVgB2XxKMaTVc
gQOHYsOMp8QROHJ56a2GrVcawCZ+F1X/Fsg43MHVAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUALrZSL12kDj42IEqjEGxKrlfx6YwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Q3MTUzYmE5LTVjYzMtNGMyMC1hMjQyLWYyZjBmYmIzMzE3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAALxAwDQYJKoZIhvcNAQELBQADggEBAICzCysPFD85m9x+bgn7zt67
Mgg13Gc8o64c4Yt7HdMwk5Na6utthRT4a4TT71bmNsPfNqBSn+BYOqk/TKwe6l/k
QgNgpnDKx7IExgDGU5ge77HmToF763D7KJUL5qiOvgQ7hZUt8+AzuyKIFbYRN2Pz
j6Cj+yI0oKAHhsZRFDmt4+TgOfE1NBe2F+pBpRn0fj186fpGIX5zsi60Z3FgKiId
zg+dtW/a3Xe1NGseM1w1zhhItlON3r5cmx4yONQQhNXJk7eKnoEoZkuSHM/XAfPq
PMTWBUd9KeEsY3wfv699gxZr1uvB4oUCEAIIG7ghYMgOrjJ5nRjmyjUIlFyB0yk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:33 2025 by rpki-client