
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd68e5a3-81a3-48e4-8bc0-ef27d2f40c54.roa
File: dd68e5a3-81a3-48e4-8bc0-ef27d2f40c54.roa (raw, json)
Hash identifier: rjmF9qTsi3ttO17qO0itgv9UmekAsBoaDBM4DUZoAFg=
Subject key identifier: 43:24:23:B8:0F:6D:FE:F3:61:0D:C1:F2:AB:8A:70:53:B6:63:0D:F5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2ADAB11638208B780CA74CFAFED67B3AC81E90D2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd68e5a3-81a3-48e4-8bc0-ef27d2f40c54.roa
Signing time: Fri 31 Oct 2025 03:43:33 +0000
ROA not before: Fri 31 Oct 2025 03:43:33 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2dfc::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:da:b1:16:38:20:8b:78:0c:a7:4c:fa:fe:d6:7b:3a:c8:1e:90:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:43:33 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=a45636f1b671ee8200890821ae931e63bd2c73abbdd9874e9c260dea0d372740, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:83:a7:2a:09:45:30:36:e1:2c:81:3f:e6:
8a:eb:41:3b:e7:5a:8c:b7:ab:6a:5f:9c:4c:79:ba:
7d:e0:e3:ce:e4:1b:79:c9:64:6e:74:10:b5:ad:76:
5a:40:ca:bd:6e:96:06:7a:4e:b7:6a:bb:e6:8f:aa:
61:0d:95:4d:9d:79:f1:33:a1:40:4f:82:6a:80:6e:
73:6e:b1:7b:3b:e9:b3:3b:9a:0d:c7:7e:ae:af:27:
12:e3:fe:bc:c5:e1:f8:b3:a3:60:47:84:40:1d:53:
ca:16:f3:ed:93:c1:ed:66:e1:77:4c:e6:7c:a6:15:
a2:f5:33:93:52:f1:26:ae:20:26:db:69:30:41:6b:
06:44:0c:7a:d1:56:64:ce:89:1b:e4:3a:0e:a5:93:
f7:7d:b1:3d:68:a1:4b:7c:2f:cc:49:5e:33:d1:6a:
1e:c0:99:98:c6:9a:90:95:9c:8b:c5:d7:c5:2f:b5:
c6:70:bf:d0:1a:2e:bc:47:33:77:bf:d2:d7:26:93:
64:5e:2f:fe:00:71:69:dc:40:43:8f:dd:75:0b:b9:
b5:ea:11:23:af:36:28:af:87:44:b2:12:dc:f8:6d:
ec:d5:8a:d2:10:33:35:f0:64:1e:66:9f:4c:78:1e:
4d:41:89:a5:00:9e:d6:45:29:08:61:ca:4c:32:a6:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:23:B8:0F:6D:FE:F3:61:0D:C1:F2:AB:8A:70:53:B6:63:0D:F5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd68e5a3-81a3-48e4-8bc0-ef27d2f40c54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2dfc::/46
Signature Algorithm: sha256WithRSAEncryption
52:f0:91:a3:77:28:1e:a1:ad:ab:a6:47:f7:6b:9e:b2:c9:6f:
f0:44:e4:f8:d4:49:f0:56:32:1b:cc:d1:b5:f9:f0:9f:cc:f1:
99:08:4e:5b:17:7a:f2:e2:c1:89:10:40:ec:4c:a2:44:eb:0b:
c6:9e:c4:8f:5c:7c:59:19:ce:53:53:c1:e7:ff:8a:8b:ee:41:
e9:30:61:13:19:c6:02:e7:f5:a0:52:7c:11:39:f4:45:41:c2:
e9:e2:3b:30:c2:6e:16:26:99:9b:b8:82:3d:99:33:6b:66:cc:
5c:72:5f:4d:0f:b7:18:39:6f:fa:dd:5a:79:6c:f8:d6:20:4c:
7a:e5:cc:77:bf:01:ff:33:66:63:0d:b6:0e:97:6b:16:e6:50:
53:3d:a7:ce:bf:b6:70:a9:e0:1b:14:d7:e1:77:be:7f:ef:8a:
d2:25:6e:85:30:cc:ad:4b:c5:b0:64:2a:09:ed:73:57:4c:20:
f7:f7:ea:eb:9d:96:e9:f3:a5:ae:21:86:b4:ec:ed:41:a4:cd:
51:73:2a:5c:e7:3b:33:ab:2a:ce:80:f9:06:e0:03:9a:92:a6:
82:42:08:db:a0:fc:d1:b4:d3:d8:00:f1:c1:7d:9e:c3:2b:63:
de:96:22:80:bb:2c:39:2f:61:f9:7d:34:67:18:be:09:a1:1d:
c8:79:e7:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:57 2025 by rpki-client