
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3c8a646-3bbf-4524-bf47-3e9864fc3b29.roa
File: f3c8a646-3bbf-4524-bf47-3e9864fc3b29.roa (raw, json)
Hash identifier: nu5hXDqDsrZnsoaXTpL+ffKCLNe1FMrHPocmdDkwhbY=
Subject key identifier: B0:59:39:98:D8:40:7E:85:88:62:87:68:80:7B:4C:52:BD:BA:77:91
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 70A7C8830FC8434049FE5DF05459D94C359B8A73
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3c8a646-3bbf-4524-bf47-3e9864fc3b29.roa
Signing time: Fri 31 Oct 2025 01:53:33 +0000
ROA not before: Fri 31 Oct 2025 01:53:33 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3e42::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a7:c8:83:0f:c8:43:40:49:fe:5d:f0:54:59:d9:4c:35:9b:8a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:53:33 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=677dffcf8be5c4ccf2a5da5d16fb7269222367a24940bbbae9070ffc60602a6b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:cf:6b:44:47:de:f8:62:f6:a9:13:d6:e3:
0d:0f:77:d9:62:f1:e9:bd:e9:11:04:13:77:7d:fa:
98:a6:52:e8:fd:95:96:7a:7d:6b:be:01:7e:85:fa:
1d:8d:57:a1:64:58:cf:57:0f:b6:9d:22:25:dd:99:
9e:39:4e:16:87:ea:53:f9:30:a7:40:4f:9e:0f:ff:
62:df:3c:d6:42:d5:0b:18:d1:29:19:cf:96:d7:7c:
1d:1a:6f:88:ce:fd:ab:25:83:39:58:a2:00:6c:44:
46:09:64:66:2c:ca:e9:fb:d7:6b:54:5d:f0:33:9b:
6f:da:73:02:2a:a9:85:1b:99:bb:a1:16:2e:4a:68:
cf:2e:3b:fe:68:76:4a:68:9d:c5:e2:38:1d:3c:31:
f7:32:d4:b9:e6:42:2e:37:e7:14:95:d2:b7:01:62:
f7:bb:cf:63:2d:0d:97:ba:b7:9b:68:9d:82:c5:88:
4a:86:32:92:53:b2:e8:38:22:b1:c9:7e:0c:97:6a:
60:a1:66:73:1a:98:32:08:8e:9f:88:9f:d5:28:dd:
0c:ce:b8:44:b2:41:41:a2:1a:4a:25:17:f8:f2:bb:
a3:39:e4:2d:27:9d:11:81:7e:d4:eb:57:f4:09:13:
eb:b2:e9:9f:df:94:02:04:45:a0:1f:54:3b:72:bf:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:59:39:98:D8:40:7E:85:88:62:87:68:80:7B:4C:52:BD:BA:77:91
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3c8a646-3bbf-4524-bf47-3e9864fc3b29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3e42::/47
Signature Algorithm: sha256WithRSAEncryption
8b:37:f7:ab:d9:78:75:d6:f8:0b:a9:32:e9:a3:8e:cd:e4:24:
a8:b6:50:df:a5:ad:ee:c0:d8:0f:2d:a3:7a:63:08:34:d9:c0:
c3:fd:d6:03:56:1b:ed:0e:90:4d:f3:83:66:6b:d7:0b:d7:8d:
c5:cf:91:69:f5:b9:c1:e3:a2:a1:df:81:31:f0:1c:65:36:eb:
c2:62:95:da:69:84:c0:06:a7:20:72:48:da:f0:ab:8a:2a:8c:
58:67:04:63:56:ca:b1:ff:3a:86:80:39:83:95:6d:49:24:fb:
f6:e4:7d:e7:0b:bd:ad:57:c2:04:46:9d:29:9b:5a:55:59:6d:
d6:73:70:fe:ce:99:75:ba:08:9a:1e:9b:05:63:89:2c:a6:f4:
64:7a:08:3e:b9:21:0e:92:fe:b6:8c:23:e9:20:14:3d:06:50:
61:03:1e:ad:5f:21:98:ab:29:31:17:3d:06:49:14:5d:eb:d8:
6a:fa:6f:7d:51:36:32:30:2a:03:ee:58:ae:d5:73:b2:cb:8c:
83:34:31:96:3f:a0:82:c0:db:2d:fe:21:6f:f1:6d:89:2b:89:
de:a1:0f:9d:7e:68:f7:5c:ee:a4:a0:ea:bb:31:df:c3:0a:09:
e6:61:e7:c3:39:26:42:27:dd:a5:c6:ca:35:87:be:d9:99:b2:
5d:e2:ff:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:34:18 2025 by rpki-client