
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dcead1df-f63f-4aef-9c10-65ba43d0a460.roa
File: dcead1df-f63f-4aef-9c10-65ba43d0a460.roa (raw, json)
Hash identifier: sezoM+9BqSZau0rWTtNzh8b1cLxP2t1cUiuGHmNll7c=
Subject key identifier: 15:CB:FB:A7:BB:36:EF:CE:DC:C6:18:54:D5:93:26:12:57:BF:73:59
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2EFCE46C7E08E4E99E61D36404CCFB90C7C906F7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dcead1df-f63f-4aef-9c10-65ba43d0a460.roa
Signing time: Thu 30 Oct 2025 20:08:31 +0000
ROA not before: Thu 30 Oct 2025 20:08:31 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2560::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fc:e4:6c:7e:08:e4:e9:9e:61:d3:64:04:cc:fb:90:c7:c9:06:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:08:31 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=4abf73f7f188d1e25a5b37bac0e05e7792262bbdfe915da5608a6c1f86907768, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:02:72:52:b4:75:64:f3:a3:23:f2:d8:1f:
42:24:bf:47:ec:62:8d:31:7f:28:fd:7c:48:71:3c:
2e:83:fe:2d:41:00:2d:ee:28:ef:a7:56:3a:f1:91:
e7:8e:de:d1:5f:58:b0:78:e6:a7:57:3e:f2:be:c1:
ba:9d:21:3e:55:ca:8e:cc:0c:87:66:0e:ce:0e:b4:
d3:af:3a:8e:3c:0a:ca:4e:7d:7b:51:34:50:3e:30:
9a:fe:a3:6c:6c:f3:e0:16:57:c7:d9:ec:8c:8e:d0:
20:86:c8:41:1e:a4:75:68:da:41:23:e2:45:b5:18:
ba:ab:36:9b:57:ef:b3:d1:9d:03:fd:c6:25:d3:f5:
fb:7a:8c:05:c0:ae:cc:43:80:7a:2f:b1:dd:d1:85:
f2:e3:7c:1c:ce:48:15:b6:a6:a0:72:ca:0e:a4:69:
48:0f:6f:bb:1d:ab:96:87:d4:d0:61:45:ac:67:ab:
91:06:b8:84:01:fa:05:74:68:a3:02:ac:94:4a:f2:
ef:ce:33:19:aa:64:b8:eb:81:30:42:dd:2b:de:72:
6f:7d:44:a9:d2:a5:0f:d7:c1:2d:47:08:30:95:c4:
6b:9c:6e:60:70:7d:8a:75:87:12:52:e7:4b:90:31:
42:6f:5b:12:d8:ed:e3:98:0a:9b:63:65:b8:3b:f1:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CB:FB:A7:BB:36:EF:CE:DC:C6:18:54:D5:93:26:12:57:BF:73:59
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dcead1df-f63f-4aef-9c10-65ba43d0a460.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2560::/43
Signature Algorithm: sha256WithRSAEncryption
a4:fe:e5:10:fe:ad:89:42:5f:56:74:ac:21:f4:a1:54:17:9e:
11:4e:63:71:69:a4:fa:ff:89:a5:27:a6:2d:af:33:b4:97:9e:
c7:ad:5f:6e:ea:3a:0d:99:1b:cd:49:ca:7d:d6:1a:bb:3b:24:
2e:e5:18:7d:4e:5e:f0:0d:bf:42:8f:70:c3:d9:02:e8:ea:0e:
35:bb:e2:73:a9:d2:de:e0:90:8e:99:90:be:79:4c:fe:95:19:
dc:b8:66:7a:90:d7:67:e7:42:46:d7:0f:b6:8c:d6:77:a8:36:
a1:7f:4d:d6:b8:14:38:e9:40:5e:a3:98:c1:11:23:4d:60:1c:
a4:7b:9b:f1:ed:53:0e:86:10:7b:8c:cf:bd:df:00:6e:25:b1:
8e:f6:c3:d7:49:bd:66:9d:1f:19:2e:3f:59:d8:14:e4:5b:d2:
78:16:7a:0f:c7:27:81:13:8c:f2:33:5b:91:86:5a:be:e7:3b:
e1:d4:c7:33:7f:fb:ef:7a:58:38:cd:1f:68:bb:8a:21:46:8b:
be:d6:3f:1b:c8:22:58:ff:06:85:f0:71:69:58:13:43:1e:0b:
59:72:c2:67:36:ae:1e:4b:99:e5:90:2c:5b:b6:14:f9:5c:50:
21:7e:09:77:77:d2:2b:73:3a:65:75:20:22:10:0f:6f:4c:b3:
05:81:54:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:10 2025 by rpki-client