
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1b57e50-05af-4361-a8a9-e8a737eeb08e.roa
File: f1b57e50-05af-4361-a8a9-e8a737eeb08e.roa (raw, json)
Hash identifier: pb6Y5TAkCat8fYUHLvucOzwJwjRmrn5ftJWQTCiAgQk=
Subject key identifier: 12:29:FF:3C:AE:59:CA:36:78:B6:7E:4F:88:86:09:D9:A2:C9:BC:B8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 136BFFFB0809710C5FF4D23EB0D7F3F8DE1BBB23
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1b57e50-05af-4361-a8a9-e8a737eeb08e.roa
Signing time: Fri 31 Oct 2025 03:08:25 +0000
ROA not before: Fri 31 Oct 2025 03:08:25 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1c4c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6b:ff:fb:08:09:71:0c:5f:f4:d2:3e:b0:d7:f3:f8:de:1b:bb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 03:08:25 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=765d1e74c227d03cf5076da5fc189b8728633eb474eb333772649ad9d12a7888, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:8a:f0:58:54:e9:6b:85:cb:1e:af:75:4b:
bc:b6:63:c6:ce:12:49:bd:f0:53:b0:f4:ef:56:c1:
98:4c:cc:83:cc:03:b1:bb:77:87:58:33:bc:34:56:
a4:08:75:04:4b:b8:88:fc:e1:4c:9b:40:2c:1e:61:
f2:92:8c:42:46:4f:37:1a:5d:35:88:3e:ba:a2:03:
c6:a0:cd:7f:2e:1f:e6:65:ed:ba:fb:1a:6d:1a:d8:
60:2c:24:0b:f3:0f:18:68:5e:d2:96:19:ba:63:5a:
a4:7a:65:8d:5d:e8:6e:f6:d0:bf:e9:47:97:88:f5:
4a:b3:1c:46:05:de:3b:fa:88:50:5b:00:8e:00:97:
f2:bc:e0:59:8e:ed:8b:36:a4:b9:32:c7:04:e1:c1:
76:a6:d8:07:6b:5a:14:30:84:34:34:a3:b2:fb:19:
7b:2d:1e:3e:d2:3b:e5:ed:2c:0b:a8:cd:f3:50:fe:
7f:31:33:30:d4:1c:37:38:63:28:dd:17:ea:1a:8b:
c1:55:aa:2c:35:cb:89:df:74:e3:1b:e4:93:ce:f0:
01:32:60:28:1c:31:4b:82:40:30:34:f4:17:8c:60:
46:2f:cf:5e:cb:8f:70:fc:10:3d:62:2d:95:a2:20:
8f:36:f7:5f:36:50:5e:c2:55:98:fe:25:31:56:df:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:FF:3C:AE:59:CA:36:78:B6:7E:4F:88:86:09:D9:A2:C9:BC:B8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1b57e50-05af-4361-a8a9-e8a737eeb08e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1c4c::/46
Signature Algorithm: sha256WithRSAEncryption
64:f8:a0:30:25:a3:e9:49:61:6a:76:68:d5:97:1d:82:41:fa:
88:c0:20:75:07:82:0d:ad:2f:11:e6:e2:e8:61:62:94:ad:93:
3a:02:bf:49:22:7c:ee:3a:fa:80:41:ce:d7:fa:ad:c5:d2:81:
3b:69:37:ef:71:f5:10:7c:59:77:73:42:97:e8:62:74:ae:ac:
19:57:cd:9e:32:5f:25:34:dc:af:67:96:b5:46:8c:d4:55:47:
76:a7:e8:87:18:98:b8:3d:8a:5a:81:f4:bc:17:cb:ad:c9:13:
84:28:6e:04:3e:fb:e8:a8:1d:58:10:e8:17:0c:71:21:14:5d:
bb:f5:bc:bc:bd:84:8d:4e:b3:94:fb:9d:91:31:0f:4c:99:47:
fd:e3:2b:4e:fc:14:cf:a3:6e:1a:0c:23:8f:34:a9:dc:36:61:
66:ac:ae:db:e1:88:fc:c8:f3:ac:1a:ff:b3:77:1d:b1:af:7f:
4d:07:83:be:90:79:a1:8f:b5:07:b0:19:73:94:8a:30:f3:ee:
da:02:60:d4:33:e0:69:fe:38:55:5e:47:9a:2a:9f:ad:f2:10:
de:49:69:a4:e3:69:b6:e4:93:fc:d9:5e:21:23:a4:63:51:35:
5d:99:95:aa:c9:79:f4:3b:5d:1c:b1:c9:4f:51:93:53:a3:01:
9e:b8:6a:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:11:57 2025 by rpki-client