
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3cca5d6-c3cc-4359-abc5-d234d4d999a8.roa
File: e3cca5d6-c3cc-4359-abc5-d234d4d999a8.roa (raw, json)
Hash identifier: KgtJQcKru/yJ0wUirq7PqiRWin+JrFyb1H12mpT9V8w=
Subject key identifier: 49:13:16:DA:44:E7:CC:1F:84:0F:68:0E:96:A6:BB:E7:7D:00:2D:F5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2A5C0869E6B65569F0D4C62FBC9334FC840382E6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3cca5d6-c3cc-4359-abc5-d234d4d999a8.roa
Signing time: Fri 31 Oct 2025 02:38:48 +0000
ROA not before: Fri 31 Oct 2025 02:38:48 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1654::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5c:08:69:e6:b6:55:69:f0:d4:c6:2f:bc:93:34:fc:84:03:82:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:38:48 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=3b4453ad718225752eda498cc15f3145bfa664f0f64ee57d7ad892dacb66215a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:39:c1:43:7b:c8:c2:d9:cb:37:50:0d:50:
86:ef:a0:f6:06:0c:5e:ac:6f:70:ec:3e:16:b7:14:
a5:90:df:91:1b:7b:c1:43:32:c7:91:c5:59:fe:4b:
ae:f5:60:51:56:a1:d4:e0:3f:49:de:cf:4c:4f:4c:
d1:9c:b0:63:94:b9:b9:be:80:da:f1:c8:87:4c:a6:
9f:e1:f9:32:ec:56:8d:70:41:82:c1:d3:f2:08:24:
8f:ec:6a:37:6b:d9:f9:34:68:29:0f:82:25:00:cb:
52:ee:d0:a7:97:f7:02:84:36:d9:ac:de:b6:7a:4b:
04:25:fc:6a:35:79:1a:84:d2:5e:33:8e:4a:1d:c6:
c2:55:28:5d:fd:3d:ef:8d:c3:90:14:52:92:fa:97:
ee:6f:8b:1c:6e:5e:cb:6c:51:38:d6:25:f9:1d:6f:
a0:95:bb:d5:c6:8e:a9:c1:16:7a:8e:a4:80:d3:5a:
96:aa:9b:1c:61:0e:be:07:c3:fd:fd:8d:6f:e5:db:
1d:bd:98:e4:1f:22:e4:45:be:3c:6e:57:22:39:b5:
b3:2f:01:ec:7e:1f:5c:57:e9:5c:1d:16:e4:c1:e5:
93:17:a3:17:55:bf:b5:e1:ca:e5:1f:d8:3b:41:de:
e3:41:85:0d:c0:30:77:07:26:a7:82:b1:b7:3d:f3:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:13:16:DA:44:E7:CC:1F:84:0F:68:0E:96:A6:BB:E7:7D:00:2D:F5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3cca5d6-c3cc-4359-abc5-d234d4d999a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1654::/46
Signature Algorithm: sha256WithRSAEncryption
7f:c4:12:28:94:c7:d1:99:d3:7d:77:a3:02:8a:63:e9:b4:7a:
64:84:61:97:26:75:56:3e:13:27:40:bb:69:dc:46:b7:d5:19:
e3:99:33:a4:22:b5:9e:bf:51:0e:e5:de:50:60:5f:59:7d:9e:
40:a4:d8:20:33:fb:25:50:56:42:cf:df:f6:5b:e1:ed:66:cf:
75:bc:0d:2e:e7:ed:fc:fb:7f:ee:17:9b:9d:cb:7e:4a:f1:9b:
23:24:bf:56:15:9b:f3:c7:73:66:05:a3:70:c9:c1:8c:ca:19:
31:bf:63:b9:87:bf:69:41:36:df:08:08:33:45:8e:0f:ac:68:
b5:b0:2a:63:41:c6:c0:f7:34:3e:c6:e0:7a:10:07:e5:f2:d2:
70:4c:98:37:00:59:3b:3a:2d:bc:a7:79:47:f9:cc:c1:ee:25:
c6:0e:65:ec:01:3e:19:12:93:21:77:6f:d5:3b:3a:0d:9c:18:
ac:7c:aa:82:80:d0:4a:0e:cb:27:9e:b9:6e:45:a2:ee:c9:85:
98:96:28:5d:cb:1d:98:c4:86:47:d7:f8:e4:f3:c4:58:57:d2:
f3:5d:fa:6f:63:1f:62:1f:8e:e3:05:56:74:58:c9:f9:e4:38:
55:5d:94:43:32:43:eb:24:19:81:28:cf:e1:82:17:b6:24:7b:
c5:e5:de:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:48 2025 by rpki-client