
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd8d6c3e-f682-4cb7-865a-4a9356f0823f.roa
File: dd8d6c3e-f682-4cb7-865a-4a9356f0823f.roa (raw, json)
Hash identifier: xb1eBVe1quBxh4dvW5LvXPsOnxKWjSo25lwmsFX9Clk=
Subject key identifier: E2:BD:37:3B:1A:2D:04:A7:7D:D4:2E:F2:7E:5E:29:D9:93:AB:BF:B4
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6644E678700F1A6C2E0D091E2CFBDBF4611B3AA9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd8d6c3e-f682-4cb7-865a-4a9356f0823f.roa
Signing time: Fri 31 Oct 2025 01:39:57 +0000
ROA not before: Fri 31 Oct 2025 01:39:57 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d22::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:44:e6:78:70:0f:1a:6c:2e:0d:09:1e:2c:fb:db:f4:61:1b:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:39:57 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=d29ff68313c7d87a44cc9e884fcc918c6b36938749073b57fca2a3edbb256c03, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:85:e2:75:bf:de:41:e6:e1:17:d3:84:b6:
11:7a:13:c4:4a:e2:1b:1f:32:8c:4a:d3:39:01:11:
0d:66:14:29:73:ef:ba:3e:b8:14:d4:61:8d:c0:12:
d1:00:0f:ec:6c:62:97:c5:13:c1:67:db:4d:df:06:
20:81:ad:56:b6:5e:ae:b0:39:8b:6b:fe:a8:aa:9c:
b2:57:b3:f2:2a:b5:a3:c4:22:b0:be:74:bc:bb:cc:
dc:7c:cc:47:be:be:0f:7d:6e:11:00:57:ee:13:3f:
65:f9:14:fe:07:b7:d0:8d:25:3f:4e:72:5e:f2:50:
4a:fa:9e:12:95:ae:07:4f:64:3c:3a:a7:52:f3:25:
64:86:e9:26:84:d1:8c:e0:3f:7a:99:23:f9:9d:18:
a6:c9:cf:14:5a:16:50:7f:a1:43:01:5d:fe:43:cd:
fb:8d:de:61:e1:23:80:9f:49:4d:56:31:6a:1b:77:
36:b4:dc:2d:8c:44:dc:78:48:9a:fb:63:a5:70:35:
58:3c:1c:40:1d:b4:90:d9:03:11:bd:a2:1a:5b:8d:
9c:19:41:5d:b7:a5:21:49:31:ad:86:1d:2c:b6:a9:
c7:5c:0b:e2:8f:57:66:18:c5:29:2d:3b:59:4c:27:
45:46:10:2b:13:1b:3b:d9:c1:4b:24:c6:53:26:e1:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BD:37:3B:1A:2D:04:A7:7D:D4:2E:F2:7E:5E:29:D9:93:AB:BF:B4
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd8d6c3e-f682-4cb7-865a-4a9356f0823f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d22::/47
Signature Algorithm: sha256WithRSAEncryption
1e:c5:37:d8:a6:a0:85:15:2a:a3:29:7d:88:71:ae:96:f6:0f:
d6:45:35:a8:e7:04:f8:7c:49:d5:db:64:71:49:82:70:7e:8f:
ac:62:1b:0e:2b:1f:f2:35:6f:44:31:e0:34:9a:48:97:a6:b0:
b7:b2:a4:55:9d:4c:03:02:53:95:4b:3a:5d:39:12:51:90:79:
61:a7:9a:f9:16:2c:88:14:dd:4d:08:cf:77:b0:95:8d:eb:96:
2a:56:91:da:89:e1:9e:af:a3:bc:a9:6f:1a:c9:50:70:dd:72:
1e:70:55:41:2f:3f:86:c8:da:f9:62:82:ea:16:d0:20:36:74:
2d:91:dc:bc:3a:73:37:70:ac:ae:03:b6:b4:8a:90:89:d6:9e:
0a:52:b6:af:57:5f:07:26:6d:6d:e1:12:9c:f9:60:1f:32:48:
66:1d:70:66:42:6f:9f:fe:69:29:ef:7e:5b:dc:50:a0:0b:5d:
8f:b4:14:62:77:f3:7f:78:11:73:52:b0:50:5d:02:c3:c1:a8:
4f:8f:51:24:f6:0e:55:54:89:80:5d:eb:02:04:bf:4e:a0:5c:
5e:db:6e:26:d5:7c:84:55:08:83:c6:fd:ed:17:e8:d2:79:46:
2f:a4:23:e6:7d:5d:fc:51:8b:e3:74:b4:29:e6:2d:2c:d9:3d:
1d:0b:80:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:42:32 2025 by rpki-client