
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f6b29951-fb1d-4027-9f11-3688db44bcfb.roa
File: f6b29951-fb1d-4027-9f11-3688db44bcfb.roa (raw, json)
Hash identifier: bfAXB8ZQCAHntoEUKB/Wy1kMXcpNyPLPuiaOW1iyo10=
Subject key identifier: 50:51:DA:48:C9:2A:BF:76:F1:0C:69:48:0C:2C:18:CB:20:4C:12:F8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 70CC61A3079822D3A46FE6F7EADD2948D6DA7482
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f6b29951-fb1d-4027-9f11-3688db44bcfb.roa
Signing time: Fri 31 Oct 2025 00:06:56 +0000
ROA not before: Fri 31 Oct 2025 00:06:56 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:32dc::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cc:61:a3:07:98:22:d3:a4:6f:e6:f7:ea:dd:29:48:d6:da:74:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:06:56 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=9c0a8616e5bd8fabe820d4da3759df489f6ddc269d44a106b43a71bdbd2eee6c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:a1:37:57:02:d4:5b:5c:7c:c4:29:4c:48:
86:67:71:92:50:cb:77:86:de:f2:62:37:0d:9b:6b:
6f:68:9e:07:a4:b7:d9:be:f8:3e:fe:4c:66:e4:36:
07:c9:25:00:31:4f:3e:ab:30:5d:19:34:49:11:87:
3b:48:95:2c:73:4f:9a:fe:b7:24:a8:b5:4e:0b:72:
2a:95:85:bc:b9:d4:2c:d7:5f:92:df:a9:28:6d:ad:
ca:a1:24:ed:a7:ad:e9:48:14:68:f4:eb:e9:26:d5:
3d:74:46:6b:d2:65:41:e1:d7:e9:34:84:7a:f5:7b:
a6:21:fe:d9:bd:c5:7d:47:cd:0a:1e:3b:21:47:6b:
08:60:76:a9:b2:b8:af:c6:8f:2a:a8:50:4a:88:6b:
42:66:22:b9:86:8d:dc:25:be:2f:62:f2:44:74:b0:
6e:4b:81:9e:21:f9:dd:22:f8:b7:e7:6a:87:b2:e7:
f4:e8:0f:e2:36:df:7a:e8:04:31:7b:9f:0b:fc:ca:
a8:d1:1f:de:af:aa:01:ea:1f:3e:65:76:8a:6e:32:
15:e7:64:39:77:33:f9:ef:65:34:22:c2:cf:1d:25:
23:40:90:4c:c2:81:a1:37:b4:58:2e:06:07:97:8a:
a1:3d:2c:69:74:63:a4:98:97:82:09:73:cc:1c:21:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:51:DA:48:C9:2A:BF:76:F1:0C:69:48:0C:2C:18:CB:20:4C:12:F8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f6b29951-fb1d-4027-9f11-3688db44bcfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:32dc::/47
Signature Algorithm: sha256WithRSAEncryption
60:dc:2f:d4:02:9f:18:ce:5f:15:c1:16:ea:4c:6d:2d:1a:69:
f5:6e:3f:18:70:96:b8:e6:f7:a8:db:a1:86:54:30:d2:38:19:
a3:be:42:9e:5f:18:71:a3:36:b9:1c:d5:64:26:87:9c:f3:2d:
b9:72:cb:52:b4:ff:45:22:4f:33:bf:45:ae:72:d5:85:50:be:
98:81:9b:44:94:83:17:ab:e1:5a:91:d9:a7:c9:aa:e0:18:a6:
e6:17:77:2d:c9:a7:4d:5b:06:da:e4:fa:38:d5:40:07:64:0e:
69:7c:96:bc:29:a3:f6:04:b8:2f:40:2c:2a:0a:f1:b6:1a:14:
f7:94:03:78:07:e2:79:96:59:1d:20:e2:f0:37:bb:57:1f:b2:
67:0d:04:1a:05:89:a7:bd:dd:f7:d1:bb:d2:a7:ee:c9:21:f9:
56:d8:ed:86:a7:26:c1:08:ac:3b:d0:0b:c0:6a:43:95:ff:0b:
28:e0:67:fd:a5:cf:c5:d1:9f:f3:bc:e8:bd:d6:f4:82:b8:7f:
40:94:c4:64:eb:a2:ac:46:2f:dd:68:62:c6:5d:62:9c:af:23:
77:a0:b3:f2:23:c6:d6:aa:46:f2:30:5d:5a:e3:d2:00:f0:7f:
8d:b2:00:2e:9a:a4:78:0e:e7:33:bc:e7:78:00:6a:33:6b:ff:
cf:1f:69:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:24 2025 by rpki-client