
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e09dfd71-c1a8-4f7b-a8c0-e0c6decff6b4.roa
File: e09dfd71-c1a8-4f7b-a8c0-e0c6decff6b4.roa (raw, json)
Hash identifier: 2+VkC/T0IFZAriNmIV2aSopa+3vj5+uKws/mJFRNpiw=
Subject key identifier: 9F:65:D3:A1:64:8C:EF:B1:4D:FA:57:52:5B:C7:64:2E:09:81:D9:77
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5C7A93DEDCD17618BF1F265042ED0F8417A9F30A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e09dfd71-c1a8-4f7b-a8c0-e0c6decff6b4.roa
Signing time: Thu 30 Oct 2025 23:25:24 +0000
ROA not before: Thu 30 Oct 2025 23:25:24 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2cfe::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:7a:93:de:dc:d1:76:18:bf:1f:26:50:42:ed:0f:84:17:a9:f3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 23:25:24 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=f6f98e9206514d83d0f50f6198ccc3bd865bd956b1c664cdbdebd2a58ea00050, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:d5:2e:c8:f2:71:b3:85:ef:e6:6d:23:0e:
cd:7e:e6:93:f6:b9:80:90:53:3a:92:24:5f:89:ca:
53:36:21:ed:7e:71:03:50:40:95:9f:81:1d:3d:35:
6f:7f:58:63:ec:d6:bf:ca:97:b5:80:95:ea:09:e1:
35:41:9c:17:fb:5a:61:22:5b:13:08:c3:3e:ca:83:
8a:af:5c:f5:3b:44:18:74:a7:ae:e3:40:87:7d:ff:
55:3b:0a:1d:ae:be:79:84:9a:93:98:cc:1a:a5:6c:
d4:c4:22:03:9f:cd:47:a1:7d:b2:f6:13:48:aa:75:
bd:45:11:2a:20:93:f5:2f:d7:6b:d5:9a:5b:d0:0b:
f2:b1:65:4d:07:da:94:ec:39:81:16:af:15:ed:29:
47:4a:97:71:8b:14:cd:54:f6:b5:84:aa:e3:5b:6b:
db:d3:f1:00:36:2c:4e:76:b9:63:6f:99:e8:00:dc:
63:3d:49:9f:da:af:dd:08:43:8b:9c:1d:e2:0d:40:
03:e1:4a:4a:c4:55:a9:76:86:17:fc:be:6f:22:11:
4c:70:f2:e8:a2:9d:e2:32:5d:d7:a2:e1:c6:87:5e:
87:b0:45:cd:c9:a7:23:b3:99:42:40:b1:fd:2c:ce:
47:73:a6:93:43:6a:c4:a1:08:3f:dc:dd:98:14:11:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:65:D3:A1:64:8C:EF:B1:4D:FA:57:52:5B:C7:64:2E:09:81:D9:77
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e09dfd71-c1a8-4f7b-a8c0-e0c6decff6b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2cfe::/47
Signature Algorithm: sha256WithRSAEncryption
67:1f:9e:a7:b8:9c:e7:68:1b:bb:d3:01:82:bb:c9:ae:a1:73:
d8:36:a5:4e:32:91:96:42:64:6e:fd:35:41:84:d7:f4:ba:21:
6f:cd:e8:40:0f:21:6e:21:d2:a0:22:32:36:ce:c4:d3:33:20:
86:0f:ab:4f:12:7c:23:9c:13:35:8b:b4:74:67:b8:aa:da:8a:
08:b1:f3:f4:0b:14:13:0d:8a:63:66:be:ab:56:56:77:9f:ef:
19:da:28:fa:1c:b3:52:05:aa:a6:59:c5:4f:39:21:64:a6:7e:
4d:c6:96:6a:f2:76:05:ff:06:1c:06:43:82:6e:02:50:da:0d:
81:99:08:8d:09:a2:6a:c1:6a:f5:28:17:41:f0:b0:d0:20:01:
33:78:e9:4d:be:ed:6e:95:fe:ae:0a:b2:a8:ad:69:0f:73:60:
8e:5b:ec:5d:b2:2e:b0:20:f3:b3:1a:6c:d3:f6:8a:60:00:1d:
bd:c5:34:3e:b6:a9:39:ea:8c:bb:ad:6a:59:a4:20:8e:b4:32:
08:4d:11:b1:3f:c1:87:6b:43:1e:e3:bb:c5:7a:35:1e:2d:a0:
6c:91:b1:c1:ba:8a:b4:ed:1b:d2:a6:5d:8d:68:6c:7d:1d:16:
16:26:a9:ca:67:a6:ce:89:99:0b:16:f0:c3:df:d3:45:72:60:
57:b6:8e:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:24 2025 by rpki-client