
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e21f69c7-7615-44df-9ff8-c9d9a6e2f94e.roa
File: e21f69c7-7615-44df-9ff8-c9d9a6e2f94e.roa (raw, json)
Hash identifier: T+U+RVB6jf7RRisGHLeqFIlt1WNIQzexK2FQoJ4GHV4=
Subject key identifier: 94:47:C5:E0:46:58:C7:7F:AB:44:59:AC:FB:03:ED:27:FD:3F:48:92
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7433D5B236B41AEB3C2EB3711614E074EF6FB113
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e21f69c7-7615-44df-9ff8-c9d9a6e2f94e.roa
Signing time: Fri 31 Oct 2025 07:42:29 +0000
ROA not before: Fri 31 Oct 2025 07:42:29 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:38c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:33:d5:b2:36:b4:1a:eb:3c:2e:b3:71:16:14:e0:74:ef:6f:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:42:29 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=835eb0d8adc819703b4340de916a56c71e2debe928ddb3d787f15f28c159717d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:3d:7e:db:04:77:a7:bf:e3:73:b7:17:d4:
29:8e:2b:fc:0c:f0:44:e1:76:8c:86:46:90:2c:66:
4a:80:0b:18:3e:2b:d6:3d:41:dd:8b:06:49:dc:ec:
d2:db:da:a2:e0:85:c6:83:04:36:8a:96:cd:1b:c5:
20:36:0e:36:49:89:12:ee:b4:71:0c:a6:37:53:d2:
fb:0d:9f:4c:c7:10:d8:f8:ad:14:8e:5e:7e:f0:d2:
99:bd:be:9d:38:05:33:34:70:94:24:d5:8a:52:2a:
0d:97:e4:5f:65:17:ae:05:9d:02:0a:64:0e:b7:09:
04:fc:71:85:68:94:02:a7:2d:40:34:ef:9c:c0:64:
e1:76:ab:9e:fc:7b:d5:75:d2:16:0e:cb:53:59:77:
ac:1b:51:97:97:7c:f0:bf:34:f1:ee:78:3e:11:67:
32:3b:d8:21:18:89:d0:3a:0f:ab:d4:69:e1:e3:ea:
69:33:91:7d:65:47:65:3d:64:5a:69:4c:9a:be:78:
07:bc:73:e6:a1:b9:77:a0:85:07:8c:9b:e6:d3:6f:
e7:a4:e5:ac:15:90:cd:6f:bf:b5:36:0f:c0:fa:40:
7b:22:93:35:a9:ed:f6:0c:e2:98:9c:c5:89:77:5b:
04:7c:55:e6:bf:7a:50:8b:db:fa:fb:06:fc:c3:18:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:C5:E0:46:58:C7:7F:AB:44:59:AC:FB:03:ED:27:FD:3F:48:92
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e21f69c7-7615-44df-9ff8-c9d9a6e2f94e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:38c0::/42
Signature Algorithm: sha256WithRSAEncryption
4e:83:e6:e7:4c:74:1e:53:df:5c:e0:b9:65:bf:27:2e:08:28:
e9:aa:14:0b:1c:0f:62:0f:74:1e:3b:a1:aa:1e:56:56:70:2b:
06:a1:65:a2:d2:3c:a1:6a:b2:40:1c:73:6b:03:d3:c3:c0:7f:
7c:0b:3a:98:08:22:90:06:a5:d6:22:70:7c:9e:e3:7d:82:79:
99:b1:35:ca:cf:6a:d1:6c:b2:e7:e9:d7:17:52:a6:11:74:f9:
18:a6:42:12:e3:06:59:7c:f0:f6:e8:db:98:6b:a8:be:13:79:
a7:1a:b6:0d:72:2b:b5:77:56:06:69:34:ff:85:18:dd:cd:1a:
c3:14:d5:03:5c:e7:4b:b8:0e:c1:c7:ea:9c:bc:8b:2f:21:db:
9c:28:90:a3:19:93:a1:26:3f:6f:79:76:4e:9e:91:37:b1:44:
55:0e:3b:f4:8a:e5:ee:36:86:a4:49:f4:bd:11:1b:6a:e3:26:
b2:c8:a5:c0:4a:fa:fc:82:4e:c8:2c:06:f5:95:d5:c0:eb:fb:
f1:d2:98:0b:22:30:81:57:aa:73:2f:db:91:c5:ef:ea:76:f2:
5f:e3:77:73:97:f2:3c:d5:f3:b6:60:9d:ab:55:59:68:57:de:
64:a0:31:9c:16:24:22:d0:76:ef:f2:b7:31:8f:76:91:57:04:
81:83:56:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:48 2025 by rpki-client