
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e421a25d-5e03-465f-be46-b028798f4992.roa
File: e421a25d-5e03-465f-be46-b028798f4992.roa (raw, json)
Hash identifier: u39DsamlJlbfrDVq+p8QJtv+oW8ZDjHkd2NFO0uyzM4=
Subject key identifier: 02:ED:F5:27:94:B7:1B:AA:42:8A:A8:0F:72:65:22:DC:D7:6E:43:15
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3E4335B24151F67536E48B9C195C6F6500ED2A6B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e421a25d-5e03-465f-be46-b028798f4992.roa
Signing time: Fri 31 Oct 2025 03:25:08 +0000
ROA not before: Fri 31 Oct 2025 03:25:08 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:29b4::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:43:35:b2:41:51:f6:75:36:e4:8b:9c:19:5c:6f:65:00:ed:2a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:25:08 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=24410b60e3362d92f81cf3617e3e822418eef6edf9b384b5e1f1664bb23b5123, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:45:bd:0e:49:1b:9b:ba:9b:6f:44:ec:94:
21:8f:30:97:66:b8:b5:6a:9f:4d:c8:0b:88:f7:ac:
5b:39:85:37:12:f7:52:93:ca:9f:f2:78:f0:24:63:
f7:64:87:a2:6a:1f:05:48:d0:c8:4f:8a:bc:61:fc:
31:47:ef:95:a7:79:04:4b:bb:11:74:42:46:b8:58:
3f:99:c4:bc:7b:5a:0e:2a:a3:48:2a:2c:84:82:18:
04:db:e4:4b:95:8d:a5:6e:03:91:96:70:06:b9:7c:
24:69:43:86:d2:a2:92:2e:26:9e:cf:b1:20:60:81:
66:be:fc:e0:70:44:fd:85:f1:05:93:28:0d:4f:6f:
0e:f6:63:5b:38:b3:f3:ea:cf:bc:13:5c:55:dd:d8:
8e:ab:64:75:af:0f:fe:24:a9:3e:4b:0d:8c:31:92:
e5:9d:b9:8d:8e:64:7c:03:42:df:0a:48:fa:09:9f:
44:60:6e:0a:76:af:32:5a:5c:fa:47:59:e7:65:bb:
fb:4a:f6:ba:b8:f3:7f:a7:d7:d5:80:9a:eb:8f:92:
16:b9:8a:9d:70:b5:bf:7d:43:0f:8e:c9:d3:54:c1:
58:0f:c6:52:f5:6c:4d:8e:8b:97:7d:8e:33:db:b9:
8b:35:b9:92:91:51:b6:75:da:e3:6a:ba:b5:a2:67:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:ED:F5:27:94:B7:1B:AA:42:8A:A8:0F:72:65:22:DC:D7:6E:43:15
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e421a25d-5e03-465f-be46-b028798f4992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:29b4::/46
Signature Algorithm: sha256WithRSAEncryption
06:82:3c:26:e9:9d:0f:13:13:8b:a1:80:7f:b7:53:80:d6:ab:
26:e5:55:a3:86:e9:85:3b:35:49:c3:ae:67:0e:33:9e:fc:6e:
ed:d7:65:bd:dc:6d:8b:b0:1d:64:12:ab:af:74:8f:04:28:58:
21:0d:f7:05:0c:d6:8c:10:15:1b:34:bb:ef:60:27:04:67:f6:
7a:02:6f:d0:33:d6:c6:3b:09:6f:9c:82:d7:f6:08:87:84:6a:
21:d7:13:82:3f:67:ea:92:0b:4d:f7:c5:2d:90:ca:f5:e8:ba:
ed:2e:74:f1:75:d3:81:6a:0b:ae:58:67:5a:9f:3c:1d:8e:49:
7e:73:c1:57:4c:cf:45:a8:43:73:4e:1d:d2:cc:85:34:3b:04:
a5:d8:71:34:30:41:2c:8a:03:c8:18:69:cd:06:40:23:f3:3f:
16:c7:0b:0e:ee:a9:3e:fc:55:d2:2a:8d:70:c6:ce:a1:bf:f3:
74:17:1c:55:51:de:50:9a:e0:4a:43:14:69:76:ab:9a:5f:b1:
5c:09:82:1d:46:9c:d9:61:bc:4b:d0:48:fa:a2:27:a4:13:6f:
b5:c1:5e:30:cf:3c:bd:fe:c7:57:38:6b:27:4e:63:e7:a5:ec:
c5:a4:b4:3d:51:9a:1e:8a:b3:8b:d6:15:4b:e6:7f:93:cf:37:
96:c9:be:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:41 2025 by rpki-client