
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ec50c3a2-34b1-44ea-adfa-60755a075788.roa
File: ec50c3a2-34b1-44ea-adfa-60755a075788.roa (raw, json)
Hash identifier: 4icZUU8m+7BbKTU4JbvxEBMKBIiBYtubVNhRpXAv79Q=
Subject key identifier: E7:ED:C1:0A:19:6A:F0:1B:3B:25:CE:6D:74:FD:A4:C0:3A:1D:BB:1C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 29029A0CC7A8FEAC59906EBA5DC882D5D98937EC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ec50c3a2-34b1-44ea-adfa-60755a075788.roa
Signing time: Thu 30 Oct 2025 20:38:57 +0000
ROA not before: Thu 30 Oct 2025 20:38:57 +0000
ROA not after: Thu 04 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1280::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:02:9a:0c:c7:a8:fe:ac:59:90:6e:ba:5d:c8:82:d5:d9:89:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 30 20:38:57 2025 GMT
Not After : Dec 4 23:59:59 2025 GMT
Subject: serialNumber=bc752a7a09ab644f536e1b6a117c79bfcd60d9b22c098f988e268884822fdfd4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:af:ce:8b:8c:00:c1:fc:f1:71:57:65:49:
c4:8d:8d:50:91:fd:f3:cc:eb:7d:24:e5:53:99:8f:
fa:af:9d:a3:b4:98:03:87:16:ea:fe:56:fc:e8:c9:
2c:c5:0a:a5:a8:c7:b7:05:4b:b1:4d:e1:6c:1e:78:
2d:22:11:f4:fa:c8:32:db:63:2e:fa:be:3d:bb:b1:
61:6d:5d:35:3e:1b:bc:4a:49:6d:09:c7:62:ed:d9:
58:91:48:44:b1:1d:12:e9:a2:77:49:40:ec:01:43:
5e:66:f1:d1:24:91:8d:1f:26:ee:5d:87:04:b9:19:
c2:2c:c1:f7:2f:09:dc:65:74:35:76:fa:71:ec:3d:
ae:cc:bd:92:c5:2b:6c:cf:d7:6a:88:bf:44:a9:e9:
e4:c2:07:fa:f1:01:f8:8e:ca:6f:6f:94:fe:36:21:
52:a8:9c:25:b3:b5:27:56:88:45:4f:cc:9b:60:74:
ce:9f:29:83:0b:99:79:2b:8a:00:52:90:19:87:ad:
ae:23:43:62:1a:6e:1e:7c:a0:9b:a1:fd:f4:5a:f5:
5b:c9:36:fa:ce:0b:cc:0a:72:70:5b:7a:d1:39:3f:
14:85:03:68:61:c8:87:83:b6:c1:cf:a7:0f:3a:f6:
4a:ca:ac:06:47:41:cf:a6:53:d4:b1:7e:1a:9d:75:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:C1:0A:19:6A:F0:1B:3B:25:CE:6D:74:FD:A4:C0:3A:1D:BB:1C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ec50c3a2-34b1-44ea-adfa-60755a075788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1280::/47
Signature Algorithm: sha256WithRSAEncryption
51:76:2a:c9:6e:78:6d:2b:b4:32:a8:e2:b9:c1:04:1a:1a:e8:
5a:43:f9:9a:0c:34:38:11:63:b0:fd:a7:bf:14:0d:ba:0e:6b:
01:e5:4e:6d:d7:1f:8a:b4:ee:91:0d:a4:14:7c:72:8a:24:bc:
0b:93:8f:ad:76:0e:b8:3f:3c:fa:75:b0:09:39:1d:dc:96:da:
b8:65:8a:06:2a:c3:fd:78:7c:2e:ad:3e:a5:92:11:f7:67:fa:
94:79:21:f9:11:72:b2:52:6c:a0:86:97:ea:5e:7f:eb:ba:5d:
24:9c:b5:52:f2:07:55:e5:e4:b0:7d:3a:82:32:70:9a:55:5e:
28:2f:c8:c5:7e:61:52:0b:3e:8d:e0:e4:5e:96:d7:32:a0:9c:
d7:15:0c:81:b5:a8:a1:38:60:26:7d:1f:f4:00:56:87:c1:22:
d7:d9:57:60:17:b4:f1:47:6b:b2:11:d8:82:69:ab:f2:34:02:
95:4d:b8:bf:d6:4e:c8:27:dd:70:e4:d8:87:20:70:80:ac:b6:
ce:db:98:34:cd:01:a5:8c:1e:a7:c0:87:c2:6e:56:bf:97:bf:
da:44:5b:fa:8e:5b:15:eb:cd:18:b2:0d:30:36:c5:8d:c8:2b:
7e:97:8c:8f:0a:26:25:88:1b:b5:92:0b:b6:3d:0c:08:e5:46:
7c:25:6f:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:07:35 2025 by rpki-client