
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/efa8ef68-c3f6-4329-bde0-9cbd4d682969.roa
File: efa8ef68-c3f6-4329-bde0-9cbd4d682969.roa (raw, json)
Hash identifier: yH2ovjU5ekTyhJLWp8rtL/Ie9xR4kxwXdJeDwnVSZjI=
Subject key identifier: 95:64:F2:FE:3D:65:3E:6C:20:EF:09:67:E2:04:10:0B:30:92:D3:E6
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0780234CCA0A1BC8E1B133BC7E74F52A939B9C40
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/efa8ef68-c3f6-4329-bde0-9cbd4d682969.roa
Signing time: Fri 31 Oct 2025 00:51:47 +0000
ROA not before: Fri 31 Oct 2025 00:51:47 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:37aa::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:80:23:4c:ca:0a:1b:c8:e1:b1:33:bc:7e:74:f5:2a:93:9b:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:51:47 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=8b169fec96e67c6882a74001dd16c8adc35a0c75569876744c56505bfec68b50, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:5a:ce:a7:6b:9c:59:cd:3f:52:9e:bf:da:
91:33:ef:62:07:b2:b5:07:24:e2:29:2f:80:47:02:
9f:dd:82:cc:75:48:97:cb:9b:ba:20:13:4e:d9:73:
a2:c4:dc:58:0e:e4:ae:d1:82:06:e8:05:6f:c3:15:
5e:14:38:27:7d:ff:e1:f3:16:0d:a3:2f:9d:4a:68:
22:15:5d:3b:95:7f:52:cb:9d:d2:a0:ce:31:b3:38:
82:b3:74:a9:46:01:d4:f3:0f:d6:cd:aa:14:2c:45:
22:6f:ec:1a:60:40:40:65:92:54:1c:0a:3f:17:d3:
d5:66:7b:a3:4b:bf:46:7a:cf:b0:f3:00:05:b1:70:
65:00:81:e4:a5:32:1f:d6:e9:3a:c7:75:f8:a5:ce:
db:4f:4d:51:73:e5:0f:b8:3b:84:89:71:6d:86:af:
59:48:0a:7f:2a:4c:f1:5d:53:25:31:75:d7:b9:cd:
9f:d5:c0:7c:a0:e7:d7:25:a9:19:11:13:92:b9:93:
c0:84:02:cd:f3:f5:0c:1b:ff:b8:38:9f:d8:bb:66:
b4:e2:81:a4:5d:ae:b4:ea:ce:c9:c2:39:23:bf:25:
fb:fb:55:62:e9:d2:83:68:9f:ff:dc:ab:1a:09:66:
0d:1d:7f:3d:5d:d6:f0:50:f1:d6:c9:ad:55:16:3c:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:64:F2:FE:3D:65:3E:6C:20:EF:09:67:E2:04:10:0B:30:92:D3:E6
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/efa8ef68-c3f6-4329-bde0-9cbd4d682969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:37aa::/47
Signature Algorithm: sha256WithRSAEncryption
b4:9a:a8:1a:36:5b:2b:c5:60:62:86:80:4d:6a:cc:da:a4:3b:
ce:3f:67:c1:0d:13:dd:db:2a:40:40:f3:58:1b:cf:13:a5:8f:
b5:45:99:29:77:8e:71:34:92:ae:b1:f5:fe:49:55:0d:63:3d:
e2:a8:67:f3:b8:89:87:f7:c4:6e:e4:a6:42:09:2b:b7:2e:fb:
81:23:97:e5:95:d2:ae:5e:fc:ae:01:d2:b3:3a:1b:5d:8e:4c:
ac:b3:7c:09:4a:48:42:ee:c8:65:b4:01:e6:59:ea:0e:6f:40:
30:58:65:df:ab:f2:3f:49:6a:d7:b0:79:8a:b6:33:03:dd:d6:
37:2f:f1:97:96:9d:44:a5:58:6d:22:80:9e:20:ea:10:67:ce:
1c:68:42:a9:a2:bf:03:76:68:e5:28:c2:c3:66:87:a8:7a:69:
f5:dd:83:2f:0d:0d:c8:0b:ba:0e:4b:8b:81:21:9f:52:22:f6:
c1:f7:f3:8e:22:47:8c:06:33:07:7e:54:23:1a:76:b6:11:96:
03:90:a2:1f:1f:a8:f6:ce:07:a4:5f:3b:a5:98:58:b2:d2:a1:
18:6b:aa:a7:5b:2f:5b:0d:91:8a:80:f0:6c:41:26:16:a9:7c:
e0:a3:a2:a4:ee:2f:32:43:7a:26:97:9b:06:71:bb:79:86:e0:
bf:78:cc:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:30 2025 by rpki-client