
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef79fe7e-c473-46a8-9270-6afe20c22d60.roa
File: ef79fe7e-c473-46a8-9270-6afe20c22d60.roa (raw, json)
Hash identifier: bZCldvWkxQZLWL85DabIl9ot8OSgdJKIWmI62FWpUEg=
Subject key identifier: 17:BC:C7:52:ED:EC:22:19:DF:AD:B0:85:37:12:2F:4B:94:B6:AE:B3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 76B7C76389F85DD1C92F4EF373DF1BC3CB283D6F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef79fe7e-c473-46a8-9270-6afe20c22d60.roa
Signing time: Fri 31 Oct 2025 07:44:21 +0000
ROA not before: Fri 31 Oct 2025 07:44:21 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1a80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b7:c7:63:89:f8:5d:d1:c9:2f:4e:f3:73:df:1b:c3:cb:28:3d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 07:44:21 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=1350468ef02556a81582a59a9443019a15a33c15454ee0fcf372d14fdad8a388, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:e0:47:25:49:26:38:4b:1e:f9:8a:59:b8:
77:ea:78:26:01:aa:cf:f1:fb:11:b1:27:5d:b3:a9:
9b:22:16:79:ff:2e:de:15:00:fb:7a:59:53:de:c7:
62:38:f0:45:4b:ef:bf:48:49:72:23:da:bc:e1:bb:
c3:a2:75:33:b0:b7:2a:6a:99:4b:c0:3b:ef:9d:bd:
db:40:6d:c9:d5:ed:08:49:28:8b:f9:90:5e:09:8c:
2b:fb:fb:04:8e:d3:fb:8b:3c:00:e4:c4:dc:a3:65:
f6:28:ed:03:d9:08:e0:52:42:06:7b:3b:25:83:89:
ef:6b:a6:c6:4b:11:e5:4a:ee:38:8d:a7:8b:1e:9b:
cd:0a:93:7b:10:46:fc:00:f2:9c:50:39:43:91:48:
d5:57:c1:56:dd:4e:7c:28:7f:66:c4:0c:7a:d1:f8:
97:0d:65:4b:98:59:d1:76:06:22:8b:a6:db:50:25:
c9:46:99:9f:9a:2a:72:7c:b0:83:d2:60:a6:f7:73:
b6:7e:bf:7d:2a:b9:1e:eb:70:f8:67:38:c4:0c:f8:
62:32:55:93:0e:7e:df:e6:71:aa:38:9d:64:99:fd:
e2:dd:58:9e:e4:26:13:c3:5c:46:54:02:4a:6e:c3:
81:b9:f2:66:f8:9c:e0:e4:75:19:c0:da:fb:a7:3d:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:C7:52:ED:EC:22:19:DF:AD:B0:85:37:12:2F:4B:94:B6:AE:B3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef79fe7e-c473-46a8-9270-6afe20c22d60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1a80::/41
Signature Algorithm: sha256WithRSAEncryption
a5:f1:65:93:28:96:1c:eb:df:2e:88:9c:c1:87:9a:5a:95:2a:
2b:15:17:28:ce:8c:30:79:2c:0d:aa:1c:a6:c4:ce:3d:c4:75:
a1:e2:2c:ad:84:4f:31:fc:f4:de:70:43:71:b8:f4:aa:93:46:
63:51:3a:fd:d4:0d:2c:2b:68:34:55:7d:7c:1c:4d:ec:2a:07:
6c:43:71:71:08:5f:56:5c:d4:af:02:f0:c9:5a:21:c8:fc:19:
cd:81:96:f5:d0:a0:a9:78:1d:7d:02:c7:75:94:a3:81:91:cb:
23:e6:f8:0a:12:e9:f9:43:ad:83:59:7b:d9:53:05:e1:e4:6e:
84:eb:6d:4f:33:d9:aa:58:28:52:88:b5:80:95:31:a1:bd:4a:
97:3c:a8:dc:6c:24:4e:e6:d0:ab:89:ab:e7:5a:6a:39:4a:f1:
1e:ef:6e:eb:dc:8f:e0:09:d2:fb:7e:e8:c8:81:3c:3d:3d:43:
b1:f2:9d:2b:79:a4:61:18:ac:c5:32:73:a6:2d:2e:3f:ce:26:
8b:2e:35:f2:29:8c:8d:b3:58:4c:c1:4d:d5:ea:e2:6b:16:e7:
ee:f8:87:6a:72:cb:83:fb:77:8d:2a:ef:42:ed:81:b8:be:86:
09:20:53:36:1b:71:19:ad:08:8b:d1:d9:90:75:fc:1d:1a:9f:
fc:b2:91:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:32 2025 by rpki-client