
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ec61e2f4-120e-4263-a672-5ecc8bd8c223.roa
File: ec61e2f4-120e-4263-a672-5ecc8bd8c223.roa (raw, json)
Hash identifier: ap5K52L40js90s8lH+8Zke5yirli2ycWlgcyr1kyiN8=
Subject key identifier: 68:5D:C1:70:ED:B2:36:B2:AB:AF:A7:27:C1:19:4F:25:71:05:ED:6A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 561230D17C5FEBCB1F289912AD5EA4C0DBC0920F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ec61e2f4-120e-4263-a672-5ecc8bd8c223.roa
Signing time: Fri 31 Oct 2025 03:06:51 +0000
ROA not before: Fri 31 Oct 2025 03:06:51 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1bac::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:12:30:d1:7c:5f:eb:cb:1f:28:99:12:ad:5e:a4:c0:db:c0:92:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:06:51 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=605515943d50d2482f94e14702b1aefe7788eec75052b702fb82478c9498973d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:79:20:fa:09:f1:18:92:28:43:a1:90:a8:
4a:94:83:6a:e6:92:41:22:52:ce:13:34:ba:cc:13:
44:0f:58:1b:14:39:a9:9e:8a:5d:2e:9d:7f:8e:d9:
96:63:50:2f:67:6e:a3:ba:21:c7:bf:a3:13:8e:e7:
ec:f7:4c:4e:1a:0a:31:d4:c1:64:29:b0:77:3d:e9:
0b:7b:a8:14:4c:13:ea:20:90:ae:19:70:34:22:53:
30:88:4b:30:ec:30:59:c3:13:19:cd:d2:7f:e4:d0:
58:4c:3d:01:f4:4b:fb:93:b4:c1:ab:39:8e:bb:7c:
a5:e9:44:f4:df:df:d2:c0:03:6d:2b:88:b0:fc:97:
84:71:af:d3:06:f6:bd:9d:1a:81:84:5f:4c:ad:d4:
c5:6e:ee:bd:e4:0f:4c:5e:bb:60:c5:0d:6c:57:ee:
9a:81:19:ba:74:96:43:1d:37:77:d3:89:04:9b:ac:
85:74:84:19:45:7f:aa:05:3b:28:48:d8:9f:54:7b:
65:b8:32:b7:3a:21:4a:3d:c1:3b:53:70:00:01:73:
28:ba:dc:80:2b:bc:41:ba:3e:62:11:99:53:fe:13:
4a:5c:a2:b9:1d:05:f5:00:4a:6f:ab:66:36:a1:a6:
55:71:58:2b:90:c4:e7:e3:f5:cd:05:05:27:5f:0e:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:C1:70:ED:B2:36:B2:AB:AF:A7:27:C1:19:4F:25:71:05:ED:6A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ec61e2f4-120e-4263-a672-5ecc8bd8c223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1bac::/46
Signature Algorithm: sha256WithRSAEncryption
25:c0:61:8b:81:cc:28:9e:7c:91:00:74:69:60:1d:5f:94:55:
27:c6:9a:0f:a1:f6:e3:e6:08:2b:96:fa:d4:8d:1c:c5:eb:f9:
7c:47:a5:52:80:57:a3:9c:3e:b9:4f:24:0c:18:e9:2c:dc:83:
9f:76:50:8e:6b:6f:83:e5:4f:31:2a:90:7e:f4:70:5a:0b:76:
38:26:f1:c2:cb:5b:7c:ff:ae:d6:fe:83:13:a3:56:2a:07:7c:
bf:5d:de:1d:31:53:88:eb:dc:50:a4:b9:ce:88:2d:11:5e:88:
7e:eb:27:20:fd:77:2b:f6:d7:63:8c:c2:e3:b5:60:63:62:f2:
6e:15:0c:f1:40:da:7e:42:33:24:e0:db:7d:c4:ad:85:e6:20:
d9:ec:64:8c:bc:77:08:f3:27:7f:33:5c:18:cf:fe:d5:e3:a8:
4a:06:b6:71:de:7f:05:d7:5b:eb:2a:e3:d2:e1:19:b6:3d:9f:
10:7a:00:56:a4:b1:3c:4e:51:db:b2:f9:a2:cc:74:35:4b:40:
5a:24:53:72:10:b9:e3:93:56:da:78:93:43:63:b3:34:cb:40:
bd:ab:ed:0c:2f:75:77:da:18:fb:ec:dc:4c:0d:e2:7b:fd:3a:
8f:6e:30:25:29:f7:51:58:a0:cc:4f:ab:1e:11:e6:9c:48:28:
04:07:7a:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:47 2025 by rpki-client