
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ebfd1b1e-3272-4788-9afc-c78e1d982754.roa
File: ebfd1b1e-3272-4788-9afc-c78e1d982754.roa (raw, json)
Hash identifier: uE/NgkS2gL6pz+7BBPrxm4w1m8pnD/XOAN8DvWAGwWk=
Subject key identifier: A5:23:F5:A2:75:6F:D3:EC:7B:0F:24:CE:D3:B9:06:CB:C1:D2:21:77
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4DEB53ADFB3D00DEB158A5EA9C0B07319046923B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ebfd1b1e-3272-4788-9afc-c78e1d982754.roa
Signing time: Fri 31 Oct 2025 05:08:54 +0000
ROA not before: Fri 31 Oct 2025 05:08:54 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:13d0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:eb:53:ad:fb:3d:00:de:b1:58:a5:ea:9c:0b:07:31:90:46:92:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:08:54 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=33d7fe28fe8f51e7a28ceda9704bd80e042309ee9f228c8218d5140c4150ad80, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:85:17:06:43:5c:37:c0:bb:a4:0b:9e:5e:
82:42:32:eb:a1:2c:95:8e:3b:ef:e9:5b:c6:11:03:
5c:bf:5f:b9:dc:62:65:fa:d2:0b:93:2c:f5:42:db:
d3:a9:80:91:28:f4:5a:fd:cf:b5:f5:e2:65:b1:ad:
f1:4c:5e:61:78:85:16:09:a0:83:e6:64:95:14:15:
e3:41:16:1c:c2:03:84:a8:63:d6:24:98:25:c0:c3:
ac:52:55:a3:84:9f:e4:19:7c:78:e0:94:d1:cf:ba:
e8:0a:53:62:82:93:6f:e0:d4:fc:e3:f8:49:9e:02:
2c:5f:64:64:9c:28:a4:e0:58:80:63:d8:da:c9:4f:
37:a5:b2:cb:c4:99:7b:d0:11:c3:9b:d7:5e:d7:4b:
46:9f:88:e4:68:77:40:43:24:ae:8b:5b:c8:ab:aa:
44:d5:40:8e:6f:f3:4a:ab:88:f8:fe:78:d5:9f:da:
8e:97:00:b0:0f:8f:09:f5:b0:02:21:35:6f:96:5e:
92:23:4e:bb:0a:ab:27:96:a4:e4:b0:97:24:55:e7:
ff:4b:49:dc:65:8d:b0:95:a2:ad:53:17:89:fc:64:
dd:3f:b5:ea:c3:00:86:32:8e:0e:09:ce:12:1d:af:
ec:80:02:df:3d:d1:cc:00:1f:b5:ae:c8:a2:91:63:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:23:F5:A2:75:6F:D3:EC:7B:0F:24:CE:D3:B9:06:CB:C1:D2:21:77
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ebfd1b1e-3272-4788-9afc-c78e1d982754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:13d0::/45
Signature Algorithm: sha256WithRSAEncryption
a4:e6:ef:a6:96:79:a3:0b:84:6f:34:df:0a:a8:6c:54:5d:ff:
aa:b0:2d:35:a6:2c:85:cf:a4:20:0b:17:64:aa:df:80:bc:f4:
9f:c5:dc:2f:d2:1e:4f:76:4f:04:fb:0a:ef:d9:7f:45:33:d6:
a9:20:1b:a9:c7:e5:cf:87:ba:f0:e0:0a:f4:80:73:78:79:fb:
e8:3f:4e:3d:98:a7:94:c3:ab:cb:e7:77:8e:56:c9:ec:e7:43:
a2:e9:86:da:d5:19:3f:d3:ce:8e:b8:5d:99:3d:aa:60:52:6c:
9e:51:08:0f:a7:12:04:a1:a6:7e:ff:30:e2:00:d7:7d:17:12:
1e:c5:46:05:aa:e9:22:8d:b0:4b:81:27:a0:7e:f8:d5:47:09:
d9:f8:04:c5:c9:36:04:5a:2c:a8:c2:a2:51:21:d7:d1:7d:33:
06:21:0a:a6:14:44:84:2a:17:6c:50:42:46:4f:46:3a:0a:f5:
02:71:31:a0:c3:5f:30:54:e8:ed:43:bf:38:fb:31:0c:2c:0d:
c3:38:e2:2f:dd:69:38:32:c8:85:57:1c:e1:d4:aa:63:eb:dc:
22:b1:19:25:2d:39:4e:12:cb:22:48:6b:e5:95:da:e5:e5:ce:
15:7a:09:1f:5c:46:8a:0b:83:8b:a9:b3:dc:5b:ad:9f:34:a1:
9e:13:56:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:59 2025 by rpki-client