
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f07128ba-26cd-4425-b681-fc366b69129f.roa
File: f07128ba-26cd-4425-b681-fc366b69129f.roa (raw, json)
Hash identifier: IsPZgYCQYpSYedcECHw7l7y6L+OCfj+XTfMDJEqLpxE=
Subject key identifier: BA:1E:59:11:4C:C3:8C:A7:65:F4:8F:8B:06:F7:93:32:80:96:CB:8A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 046E4160A95780702874EE0FFC668997941A36E3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f07128ba-26cd-4425-b681-fc366b69129f.roa
Signing time: Fri 31 Oct 2025 01:55:07 +0000
ROA not before: Fri 31 Oct 2025 01:55:07 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3e90::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6e:41:60:a9:57:80:70:28:74:ee:0f:fc:66:89:97:94:1a:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:55:07 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=cb2f0e811fcd98389972f67a258498c0f18806c6e5e3fe5dac58dbe2054e8c74, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:8e:70:53:1e:2f:93:d2:38:35:aa:92:ef:
d3:48:86:64:ed:60:9b:5b:0d:7a:00:f9:95:23:e3:
db:56:d3:80:30:4d:29:05:ff:1b:1b:be:69:89:24:
3a:da:dc:49:0a:8a:08:6c:b1:29:d8:cd:da:b0:cb:
93:f6:4a:94:60:92:61:14:90:ac:ad:9a:35:a2:e7:
fe:96:93:3b:8b:dc:90:c9:36:18:9f:f7:81:89:7b:
17:34:e9:2f:c1:47:86:e2:47:ee:7a:e4:69:03:b7:
68:57:01:b3:38:1f:44:91:13:2d:00:a7:86:9c:9d:
44:d1:30:02:26:f4:5f:27:9d:70:39:fd:0b:63:6d:
fd:54:4a:11:2a:ba:60:df:ac:0f:96:08:e0:9c:bd:
1a:9f:1b:12:c4:58:32:41:d4:8b:8b:61:66:10:8d:
42:22:85:11:95:28:22:d2:5d:e4:0a:81:9a:6c:51:
80:1c:3a:42:1a:8a:00:e3:30:4f:70:f0:6b:b6:0d:
24:43:5d:10:cf:27:4b:22:0a:02:6d:5a:66:42:b9:
c8:d4:58:29:48:4b:34:5c:e6:d4:ca:ec:5f:52:88:
dc:6e:fe:86:c7:46:65:9d:3b:80:2e:29:10:fa:58:
e8:ba:8e:1c:b6:5c:c7:94:70:bc:d5:99:a6:84:5c:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1E:59:11:4C:C3:8C:A7:65:F4:8F:8B:06:F7:93:32:80:96:CB:8A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f07128ba-26cd-4425-b681-fc366b69129f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3e90::/47
Signature Algorithm: sha256WithRSAEncryption
5b:05:37:82:ff:5a:ee:0b:61:aa:5c:c8:1e:56:b6:34:95:9b:
52:be:77:55:50:72:d6:66:16:b2:76:fe:ac:22:92:a4:f8:58:
5d:03:a2:62:bb:c5:7e:2c:5d:2f:ac:52:a0:f5:35:1e:f6:ff:
c4:a8:b9:85:7a:21:af:ea:3f:db:49:43:81:9e:3d:6e:51:75:
3f:06:ca:16:1e:70:d9:b3:fa:10:31:79:18:05:39:b1:5e:7b:
7a:a3:b7:cc:2f:83:fd:64:c3:3e:24:c2:36:25:b7:8a:52:e5:
30:b6:84:9b:c8:af:12:48:1a:57:df:03:52:ea:5a:9c:c9:5d:
fb:29:ba:10:64:7a:25:6a:2d:fa:37:a8:65:a7:06:0a:c9:d8:
97:9a:68:c4:a1:67:16:b8:1a:81:88:fd:19:a2:4d:99:ec:02:
91:8a:e8:f2:0a:6e:5d:bc:bf:ce:f9:6e:e0:f2:7f:e6:a1:24:
1e:be:b9:57:c4:1c:db:c1:48:4d:93:23:8a:0c:06:60:76:da:
1b:50:1e:f9:d3:89:7e:02:83:e5:e8:8b:b5:a0:3d:6d:f9:38:
56:c4:da:7c:92:73:fc:86:e7:cf:d0:ef:6c:45:30:20:2d:0f:
46:c2:05:69:50:a6:8b:c6:58:df:ed:ce:05:e6:bf:d4:92:0d:
94:c0:0e:c0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBG5BYKlXgHAodO4P/GaJl5QaNuMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE1NTA3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYjJmMGU4MTFmY2Q5ODM4OTk3MmY2N2EyNTg0OThjMGYx
ODgwNmM2ZTVlM2ZlNWRhYzU4ZGJlMjA1NGU4Yzc0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpJI5wUx4vk9I4NaqS79NIhmTtYJtbDXoA+ZUj49tW04Aw
TSkF/xsbvmmJJDra3EkKighssSnYzdqwy5P2SpRgkmEUkKytmjWi5/6WkzuL3JDJ
Nhif94GJexc06S/BR4biR+565GkDt2hXAbM4H0SREy0Ap4acnUTRMAIm9F8nnXA5
/Qtjbf1UShEqumDfrA+WCOCcvRqfGxLEWDJB1IuLYWYQjUIihRGVKCLSXeQKgZps
UYAcOkIaigDjME9w8Gu2DSRDXRDPJ0siCgJtWmZCucjUWClISzRc5tTK7F9SiNxu
/obHRmWdO4AuKRD6WOi6jhy2XMeUcLzVmaaEXJRXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUuh5ZEUzDjKdl9I+LBveTMoCWy4owHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2YwNzEyOGJhLTI2Y2QtNDQyNS1iNjgxLWZjMzY2YjY5MTI5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAPpAwDQYJKoZIhvcNAQELBQADggEBAFsFN4L/Wu4LYapcyB5WtjSV
m1K+d1VQctZmFrJ2/qwikqT4WF0DomK7xX4sXS+sUqD1NR72/8SouYV6Ia/qP9tJ
Q4GePW5RdT8GyhYecNmz+hAxeRgFObFee3qjt8wvg/1kwz4kwjYlt4pS5TC2hJvI
rxJIGlffA1LqWpzJXfspuhBkeiVqLfo3qGWnBgrJ2JeaaMShZxa4GoGI/RmiTZns
ApGK6PIKbl28v875buDyf+ahJB6+uVfEHNvBSE2TI4oMBmB22htQHvnTiX4Cg+Xo
i7WgPW35OFbE2nySc/yG58/Q72xFMCAtD0bCBWlQpovGWN/tzgXmv9SSDZTADsA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:14 2025 by rpki-client