
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa138bf7-4a2d-4bf8-aac4-a61dad4a7edf.roa
File: fa138bf7-4a2d-4bf8-aac4-a61dad4a7edf.roa (raw, json)
Hash identifier: tlAKG+5QLxCiUkcejKq4ZQOC+rjvSCszwYjn8PioZlY=
Subject key identifier: 86:24:8D:AA:46:3D:46:2D:B6:B9:04:72:28:DA:A4:00:07:BA:B4:67
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6A3420ECCF7416B17291429615154BBAD6AA1B92
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa138bf7-4a2d-4bf8-aac4-a61dad4a7edf.roa
Signing time: Fri 31 Oct 2025 05:12:27 +0000
ROA not before: Fri 31 Oct 2025 05:12:27 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:16c0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:34:20:ec:cf:74:16:b1:72:91:42:96:15:15:4b:ba:d6:aa:1b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:12:27 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=235760b286ceb83e996b6cd2efd9a983e6c395a550960505fa3f85708c4ac54a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:20:76:82:d5:1e:86:74:99:ce:a2:70:22:
66:92:71:65:29:2b:ba:3e:7d:a2:f4:67:04:7f:ff:
f9:b3:39:e7:a2:a5:75:1c:12:40:75:44:65:0d:0f:
72:06:c5:83:fe:02:4d:e6:44:63:b0:e7:14:1e:fa:
5a:00:0b:71:67:5a:e2:06:7a:a4:26:77:70:a3:6c:
69:f5:51:57:b7:b8:b6:13:a6:df:c4:b4:2f:58:f6:
48:98:fc:5c:73:d6:ff:63:7b:a2:92:a2:f4:93:1b:
f1:7b:40:1a:e0:53:2b:80:a1:6c:88:51:a4:69:bd:
a6:29:dc:af:94:03:a5:3a:60:a6:a4:af:17:14:0e:
eb:f4:dd:29:92:bc:3c:e9:56:c9:99:d1:a4:6b:d0:
8c:5d:47:fb:d9:01:58:f8:0f:b6:ca:ab:d1:0a:12:
d2:d4:6d:2c:23:a6:ca:05:34:a6:7f:9f:5a:03:ed:
eb:db:ed:06:47:f4:41:18:0a:e9:e8:dd:ee:43:15:
3f:7f:1e:ea:54:b2:7c:4a:87:33:3f:60:21:45:e8:
c0:3a:a1:7c:6a:02:ab:0a:cb:e6:87:3c:59:06:21:
3f:96:78:07:ae:74:17:ac:74:52:4f:75:7f:2c:a9:
fc:24:8c:8c:79:47:28:4d:8a:3c:f2:8d:6c:1d:38:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:24:8D:AA:46:3D:46:2D:B6:B9:04:72:28:DA:A4:00:07:BA:B4:67
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa138bf7-4a2d-4bf8-aac4-a61dad4a7edf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:16c0::/45
Signature Algorithm: sha256WithRSAEncryption
2c:00:a0:94:a4:90:3b:ba:ef:98:ed:d1:94:b7:d9:1f:c0:45:
46:7e:a9:1d:fb:be:99:ba:e1:4b:6f:d5:14:8a:ce:b4:0d:eb:
d3:54:c5:97:ce:70:b5:06:cf:84:ab:9f:25:ea:75:26:8b:06:
06:b4:9f:e4:bf:4e:74:f0:37:77:cb:08:e9:8d:aa:2c:56:73:
4f:d3:38:08:cc:82:c6:80:9f:be:38:2c:05:65:40:ae:83:7d:
3e:eb:ab:e4:2a:1e:3c:de:3d:26:07:f6:79:51:55:d9:74:65:
ac:77:7b:76:c0:40:d4:35:64:f4:ec:24:81:24:f4:0e:3c:ba:
a8:b2:a2:f6:61:f5:d8:f6:03:cc:71:b6:a0:35:22:35:6a:94:
55:2d:0f:4b:98:f0:f1:57:6c:4d:a9:c6:ff:b3:12:c3:a6:c8:
05:02:5c:02:bd:8b:21:5a:cd:81:62:d7:c1:f9:d9:c9:69:85:
ad:46:b3:a0:5d:b0:87:6a:61:18:dd:fd:56:a1:2c:4a:9e:0e:
93:3a:e5:d6:a5:45:41:fc:4b:dd:44:16:4d:81:35:0c:42:92:
b8:ca:0c:a5:16:88:be:6a:c7:df:1b:c1:f6:08:f8:6f:5d:c5:
3a:02:cc:1f:fc:4c:11:78:8b:b1:8f:aa:69:8b:b5:ae:b3:5c:
d8:96:2b:4e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUajQg7M90FrFykUKWFRVLutaqG5IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUxMjI3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMzU3NjBiMjg2Y2ViODNlOTk2YjZjZDJlZmQ5YTk4M2U2
YzM5NWE1NTA5NjA1MDVmYTNmODU3MDhjNGFjNTRhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCX2iB2gtUehnSZzqJwImaScWUpK7o+faL0ZwR///mzOeei
pXUcEkB1RGUND3IGxYP+Ak3mRGOw5xQe+loAC3FnWuIGeqQmd3CjbGn1UVe3uLYT
pt/EtC9Y9kiY/Fxz1v9je6KSovSTG/F7QBrgUyuAoWyIUaRpvaYp3K+UA6U6YKak
rxcUDuv03SmSvDzpVsmZ0aRr0IxdR/vZAVj4D7bKq9EKEtLUbSwjpsoFNKZ/n1oD
7evb7QZH9EEYCuno3e5DFT9/HupUsnxKhzM/YCFF6MA6oXxqAqsKy+aHPFkGIT+W
eAeudBesdFJPdX8sqfwkjIx5RyhNijzyjWwdOLRbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUhiSNqkY9Ri22uQRyKNqkAAe6tGcwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2ZhMTM4YmY3LTRhMmQtNGJmOC1hYWM0LWE2MWRhZDRhN2VkZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAFsAwDQYJKoZIhvcNAQELBQADggEBACwAoJSkkDu675jt0ZS32R/A
RUZ+qR37vpm64Utv1RSKzrQN69NUxZfOcLUGz4SrnyXqdSaLBga0n+S/TnTwN3fL
COmNqixWc0/TOAjMgsaAn744LAVlQK6DfT7rq+QqHjzePSYH9nlRVdl0Zax3e3bA
QNQ1ZPTsJIEk9A48uqiyovZh9dj2A8xxtqA1IjVqlFUtD0uY8PFXbE2pxv+zEsOm
yAUCXAK9iyFazYFi18H52clpha1Gs6BdsIdqYRjd/VahLEqeDpM65dalRUH8S91E
Fk2BNQxCkrjKDKUWiL5qx98bwfYI+G9dxToCzB/8TBF4i7GPqmmLta6zXNiWK04=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:26 2025 by rpki-client