
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5496525-f12b-48a0-9aae-8ab575c7f719.roa
File: e5496525-f12b-48a0-9aae-8ab575c7f719.roa (raw, json)
Hash identifier: LKbb1WcOP/HCulVvBN2X4PgBYir9CVX/CoMlwQ9LY2U=
Subject key identifier: D5:93:7D:90:44:44:50:91:65:CB:41:4F:55:52:AB:53:22:CC:41:B3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 55D035D1E297169A7E13A688B30C34643D565BF7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5496525-f12b-48a0-9aae-8ab575c7f719.roa
Signing time: Thu 30 Oct 2025 22:29:00 +0000
ROA not before: Thu 30 Oct 2025 22:29:00 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1dae::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d0:35:d1:e2:97:16:9a:7e:13:a6:88:b3:0c:34:64:3d:56:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 22:29:00 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=b3bc85906fe61c93b699af8ca1c10b2cbf939b80b94224ffed3f608edd9d7c91, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:2b:d0:b0:b9:79:8e:f1:af:05:de:68:c9:
9d:9a:4c:44:15:6e:86:c0:ac:1f:62:bb:27:56:c0:
30:27:d8:c7:cd:4f:b0:12:79:91:d9:81:ac:48:83:
c3:0b:de:f8:bd:13:1e:23:49:c8:ec:25:dc:fa:6b:
f6:be:02:a3:1d:07:59:b9:3b:10:cf:52:76:c7:9a:
56:e7:93:7e:04:07:c9:c6:ae:ea:1a:3a:63:44:41:
8f:6c:04:d7:4e:c4:82:02:1a:ee:12:48:35:c8:61:
ea:cd:76:99:0a:b9:55:7e:bf:f7:bb:fd:c3:1b:de:
75:b9:a9:b7:27:72:df:e5:6a:e0:70:2f:1b:e6:f9:
75:76:b1:f8:be:d9:38:18:b1:dc:fa:00:86:c6:d9:
e0:6d:88:98:d6:73:db:95:a9:2b:4d:cc:00:2c:0b:
c6:d3:68:c6:69:94:27:87:a8:3b:91:f7:73:aa:07:
8d:6b:f0:c4:f2:15:ab:d4:2a:22:37:a9:ca:40:04:
c2:d9:e2:63:f1:da:a9:89:00:2e:f3:4f:76:c2:db:
be:d9:60:7c:a2:f8:ab:0d:b2:b6:5e:fa:2d:35:0b:
64:28:80:7d:cc:88:84:f7:56:da:56:62:a0:a3:25:
20:8e:ec:3e:3b:90:cd:b0:a3:fa:58:b6:02:b1:80:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:7D:90:44:44:50:91:65:CB:41:4F:55:52:AB:53:22:CC:41:B3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e5496525-f12b-48a0-9aae-8ab575c7f719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1dae::/47
Signature Algorithm: sha256WithRSAEncryption
75:c4:e7:94:5d:85:1b:3b:c4:58:b7:4a:f8:61:49:91:ba:fc:
ad:69:42:1e:a7:db:b9:81:9e:47:a2:37:96:93:d2:61:04:37:
c3:da:e3:4c:79:38:04:69:3a:cb:81:4b:03:c6:93:d4:27:41:
98:a9:4a:ce:d9:5a:a3:87:fe:31:0f:96:cd:d6:33:43:42:09:
43:09:78:ad:9e:6c:9b:58:94:c2:a7:06:30:71:d6:f2:af:fa:
24:d6:e4:ce:35:7b:50:20:ff:d2:66:64:85:bb:93:27:73:cb:
c0:5e:d0:c8:d8:7a:a2:f7:94:04:9b:01:55:00:a4:28:32:6e:
06:19:10:76:67:43:bc:d5:74:d3:04:63:ab:c7:e9:ce:12:30:
d0:76:fe:01:21:12:ed:1c:52:bb:0a:ed:19:1c:a5:45:5e:6a:
1c:e2:a3:cd:78:98:46:00:06:80:52:14:a6:81:d6:05:78:ef:
0a:64:f4:8f:36:b1:f8:9c:29:37:ff:0c:e2:de:0c:9e:e6:df:
eb:bf:84:8b:e5:c8:ad:c2:fd:ad:b7:90:48:50:95:21:ae:01:
9e:08:fc:08:62:70:04:41:af:a6:40:60:aa:7a:75:bf:9e:82:
dc:1f:c2:44:d8:8c:96:42:90:8e:02:cf:3b:c0:5d:03:63:2c:
cb:c6:cc:72
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVdA10eKXFpp+E6aIsww0ZD1WW/cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIyOTAwWhcNMjUxMjA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiM2JjODU5MDZmZTYxYzkzYjY5OWFmOGNhMWMxMGIyY2Jm
OTM5YjgwYjk0MjI0ZmZlZDNmNjA4ZWRkOWQ3YzkxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVDCvQsLl5jvGvBd5oyZ2aTEQVbobArB9iuydWwDAn2MfN
T7ASeZHZgaxIg8ML3vi9Ex4jScjsJdz6a/a+AqMdB1m5OxDPUnbHmlbnk34EB8nG
ruoaOmNEQY9sBNdOxIICGu4SSDXIYerNdpkKuVV+v/e7/cMb3nW5qbcnct/lauBw
Lxvm+XV2sfi+2TgYsdz6AIbG2eBtiJjWc9uVqStNzAAsC8bTaMZplCeHqDuR93Oq
B41r8MTyFavUKiI3qcpABMLZ4mPx2qmJAC7zT3bC277ZYHyi+KsNsrZe+i01C2Qo
gH3MiIT3VtpWYqCjJSCO7D47kM2wo/pYtgKxgKpxAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU1ZN9kEREUJFly0FPVVKrUyLMQbMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2U1NDk2NTI1LWYxMmItNDhhMC05YWFlLThhYjU3NWM3ZjcxOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAHa4wDQYJKoZIhvcNAQELBQADggEBAHXE55RdhRs7xFi3SvhhSZG6
/K1pQh6n27mBnkeiN5aT0mEEN8Pa40x5OARpOsuBSwPGk9QnQZipSs7ZWqOH/jEP
ls3WM0NCCUMJeK2ebJtYlMKnBjBx1vKv+iTW5M41e1Ag/9JmZIW7kydzy8Be0MjY
eqL3lASbAVUApCgybgYZEHZnQ7zVdNMEY6vH6c4SMNB2/gEhEu0cUrsK7RkcpUVe
ahzio814mEYABoBSFKaB1gV47wpk9I82sficKTf/DOLeDJ7m3+u/hIvlyK3C/a23
kEhQlSGuAZ4I/AhicARBr6ZAYKp6db+egtwfwkTYjJZCkI4CzzvAXQNjLMvGzHI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:14 2025 by rpki-client