
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e091e050-18bc-4072-9caf-e19351dd675f.roa
File: e091e050-18bc-4072-9caf-e19351dd675f.roa (raw, json)
Hash identifier: 5j2otLl7wbgctgQ+jpDZYEvNKziJnGDo17vMPdPvz/E=
Subject key identifier: 62:66:2B:57:F5:D2:73:F6:7C:5F:9F:9E:89:44:24:EF:F7:FB:A3:B4
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2B5C419F6B650776C9153ED82365CB391EE87E92
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e091e050-18bc-4072-9caf-e19351dd675f.roa
Signing time: Thu 30 Oct 2025 22:37:00 +0000
ROA not before: Thu 30 Oct 2025 22:37:00 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1ecc::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5c:41:9f:6b:65:07:76:c9:15:3e:d8:23:65:cb:39:1e:e8:7e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:37:00 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=b4ea8afeb4e256dd4cba3a85b85abe56ded31b55c1f77a092b83026d66ef3274, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:56:6f:91:87:86:e9:de:f1:c8:f2:5a:0c:
1c:6c:68:46:8a:d2:df:4e:53:73:37:0b:14:fa:cf:
90:e2:51:2b:4f:2b:dc:ca:91:ca:9f:99:23:92:1b:
36:bf:cd:1e:4d:e5:e2:c8:aa:af:f6:41:8b:d9:e8:
6f:bf:c4:d6:82:73:10:1b:f2:39:fc:7a:fb:b5:ec:
ee:50:ed:fb:c6:8e:04:c9:1e:c8:77:de:9f:35:b7:
69:5d:e5:63:c8:26:02:98:ae:a9:1d:ff:07:6c:7a:
f4:5a:69:73:d4:e6:15:c2:b0:70:72:7c:a7:e9:e6:
81:0f:07:90:41:34:ec:fe:9e:85:d3:90:26:5c:a0:
dd:a8:a6:99:bd:c6:e4:77:83:04:08:b8:35:6f:a9:
51:a2:50:07:29:b5:d4:e1:62:ce:53:ac:22:2e:d8:
43:9e:02:78:81:0c:8c:05:bf:88:28:0b:89:66:48:
cc:f0:d3:dd:66:d8:a2:4e:13:4f:ca:80:02:81:b0:
74:0b:31:04:f5:dc:6f:53:30:b5:c1:aa:ea:dd:8c:
0c:5b:ac:0f:22:ed:3a:6c:4a:77:8c:f1:81:c6:d0:
37:af:dd:aa:51:e1:e7:ed:16:b6:6d:bf:5a:95:cf:
fe:fc:a3:67:dc:53:3d:f1:92:b7:47:0b:7d:e3:f1:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:66:2B:57:F5:D2:73:F6:7C:5F:9F:9E:89:44:24:EF:F7:FB:A3:B4
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e091e050-18bc-4072-9caf-e19351dd675f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1ecc::/47
Signature Algorithm: sha256WithRSAEncryption
57:52:aa:d4:69:16:5b:af:7f:ce:8c:03:fe:c0:de:54:7e:56:
81:ab:2d:7d:73:01:73:69:67:7c:17:5c:91:86:9b:3d:79:9d:
6e:ad:00:04:fa:98:41:73:0e:36:93:36:11:16:52:9b:b7:3c:
fc:0a:0e:dd:18:3e:7f:98:0e:80:fb:02:ce:36:06:f9:f6:6b:
ed:04:e8:9c:bd:91:52:7c:75:db:4e:f6:29:e2:3c:ae:bf:25:
7d:a8:3c:a6:24:4e:32:40:69:8f:53:ad:58:13:5e:fb:0f:b1:
b9:85:b9:ae:67:6a:f2:19:64:a0:cb:65:34:23:e6:f5:28:35:
45:ad:64:6c:09:6c:03:dc:bf:90:20:c2:e2:08:bd:f6:3e:9a:
dd:a3:96:ba:f3:32:af:02:9d:f1:45:db:ab:64:ce:91:82:50:
64:f2:34:3c:6a:a0:bd:42:e5:09:0b:e0:0e:91:0a:fb:cd:7d:
83:c9:f4:67:7d:5d:ff:c8:38:92:6d:5d:8d:3a:29:49:53:d4:
df:4b:72:a4:6f:5c:b5:7c:59:32:e5:91:50:1b:e6:e2:68:4f:
b9:cf:32:e6:08:24:dd:4d:69:e7:ea:1b:13:f5:b3:b4:71:2d:
8f:2d:96:e9:48:22:e2:62:76:b9:6e:71:27:ee:59:d9:d5:1e:
39:a7:6c:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:46 2025 by rpki-client