
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/def1e840-ddea-4329-8bc6-a6542cf56783.roa
File: def1e840-ddea-4329-8bc6-a6542cf56783.roa (raw, json)
Hash identifier: 1yH9H7Djpb6M2W9kVnvjgkVnXRgaU12FzmKyQCkLU3s=
Subject key identifier: D4:E2:6C:AF:63:0C:B9:4C:0B:94:E1:B1:BC:9D:80:4B:E6:92:DE:25
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 346221BD5763E96A6293337917E52A365A486F05
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/def1e840-ddea-4329-8bc6-a6542cf56783.roa
Signing time: Fri 31 Oct 2025 02:08:16 +0000
ROA not before: Fri 31 Oct 2025 02:08:16 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3fb2::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:62:21:bd:57:63:e9:6a:62:93:33:79:17:e5:2a:36:5a:48:6f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:08:16 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=0a1cbb07f86f07c5b1a837a3125af70c12770c8d1d32d4beed6f6cbf7133d90f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:18:41:3b:5c:14:47:74:b1:1d:09:7f:6e:
91:f0:31:15:ec:a1:85:f2:45:68:07:da:dc:72:90:
a5:20:69:b7:52:05:01:21:7f:ae:7c:75:28:c8:90:
1e:64:ef:30:79:a8:83:8c:b8:04:48:ee:23:fe:8e:
88:ec:97:b9:03:91:90:05:7f:6a:58:61:59:fe:7e:
1c:ff:cc:bb:a6:90:9d:4d:c1:0e:4d:6f:68:63:f4:
84:f2:4b:ff:fc:6a:b9:68:6f:6d:23:90:aa:b3:7e:
d6:5d:e7:35:a1:b2:08:09:8f:4d:01:ca:af:ac:27:
e7:b4:f0:a3:cd:d1:92:af:c4:60:b6:79:7f:b6:eb:
66:5e:31:69:8b:40:f6:13:8c:6e:96:1b:b6:2e:46:
b3:78:38:9d:4c:5f:0d:c0:ae:47:df:d8:64:e9:58:
34:6b:32:34:4a:c0:25:31:a7:44:fb:4a:01:62:e7:
ce:0a:30:68:56:8f:61:b1:9d:61:e5:ee:12:24:a2:
6c:d8:0f:e0:98:f2:c7:e9:3e:a1:36:42:5d:2f:ad:
d8:01:14:62:0e:d5:6d:c0:fa:20:ca:a2:b1:a2:76:
ea:b6:f5:c8:b6:f3:4f:ca:39:69:27:34:87:d8:ad:
4a:c4:4c:ee:92:90:a5:39:72:2f:00:ac:5c:57:f0:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E2:6C:AF:63:0C:B9:4C:0B:94:E1:B1:BC:9D:80:4B:E6:92:DE:25
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/def1e840-ddea-4329-8bc6-a6542cf56783.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3fb2::/47
Signature Algorithm: sha256WithRSAEncryption
64:f4:1c:01:6e:a7:6f:ae:30:39:06:0b:18:0b:16:a1:89:f6:
d9:8d:06:48:b7:0a:f2:20:ab:4d:81:66:09:d3:b5:88:57:fb:
86:7b:69:d8:13:ef:9b:24:da:29:99:41:63:85:49:fb:08:cb:
4c:b2:ff:75:6a:0e:c4:d3:30:76:8f:fa:79:22:94:cb:f2:ac:
7b:e2:3b:1d:a3:b3:2e:1b:99:9a:18:31:cc:59:5f:82:b5:e4:
38:0e:fc:32:83:9d:a3:27:14:c6:ab:a5:b1:0c:ec:36:8f:df:
ea:f1:50:03:d3:ab:89:ee:6f:8b:fc:20:b2:91:9f:62:da:85:
0e:68:1c:eb:bb:04:f6:ad:f5:1b:2a:07:02:f9:19:a8:b1:bf:
5c:a5:0d:5f:63:e6:84:71:81:c8:d3:d5:12:c1:30:96:9e:f2:
01:17:00:54:f7:33:6c:39:0c:0f:35:13:f8:3c:dd:d1:91:08:
07:cb:73:b6:f6:3b:c5:d4:bb:ee:2d:c7:42:04:2b:2d:9e:94:
1f:45:ac:f3:a5:1e:bf:ca:1e:c4:1e:ed:3e:44:ff:b1:93:49:
4c:1a:84:97:b7:31:85:78:d0:dd:c5:21:56:13:37:dc:83:21:
b3:53:53:74:c6:fe:64:3b:ae:e6:4f:f1:20:c7:13:ad:76:1b:
00:ec:a0:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:48 2025 by rpki-client