
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fd923b7a-1413-47f3-b88a-1d9b207760da.roa
File: fd923b7a-1413-47f3-b88a-1d9b207760da.roa (raw, json)
Hash identifier: 2oa2xkQ96f1vlGcQ8whxPWf0DtprfXpitIExIaDwSR4=
Subject key identifier: BF:8B:2E:B4:57:6E:B6:FA:B9:3F:EC:2D:BB:8A:45:48:B8:17:77:7A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 491371BC5C54C4E8EA06F5DA0A64AF3F480A9AA9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fd923b7a-1413-47f3-b88a-1d9b207760da.roa
Signing time: Fri 31 Oct 2025 00:10:23 +0000
ROA not before: Fri 31 Oct 2025 00:10:23 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3380::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:13:71:bc:5c:54:c4:e8:ea:06:f5:da:0a:64:af:3f:48:0a:9a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:10:23 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=9a1d9db70d0071efb5920ae5b2bc273c93a056bcb32e66c16e73fff47e1800fe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:6b:70:78:26:90:0e:05:15:64:25:1d:32:
55:ee:e1:a1:d1:e7:07:a1:52:c8:db:89:2a:15:5c:
54:06:e2:bf:b1:e1:b5:77:1e:db:7c:07:63:0a:d7:
89:22:41:81:33:49:e2:54:ff:20:9d:a1:b2:f4:24:
67:85:47:16:c0:3e:7d:eb:97:05:57:14:31:f1:b3:
7d:ae:99:69:43:9a:38:4f:2e:28:ce:4c:62:6e:cb:
26:92:80:ac:7a:df:d5:26:70:51:9c:67:8d:24:e9:
5e:a1:d5:d4:f2:90:ea:86:32:c8:c1:0a:9d:1a:5d:
a5:9b:f7:a3:6f:b4:26:0a:68:5a:f6:b6:3e:b8:75:
a8:8b:bb:35:2f:25:68:86:39:45:6c:d8:60:b7:6a:
aa:fe:fb:a3:35:7f:7e:59:2c:2f:5a:b2:35:6b:d7:
22:79:28:c9:02:64:63:fe:84:71:f3:e7:5d:f9:22:
2f:54:a4:ed:38:63:61:93:41:5d:53:41:34:0a:69:
5e:04:4d:f7:7b:de:a6:83:01:15:0a:09:64:dc:21:
80:9e:2f:a6:4a:6d:78:26:cc:89:4f:8e:6c:a7:d5:
a9:82:1d:3d:6f:d5:d4:b5:86:05:b6:38:5a:b5:75:
81:20:30:a1:93:46:89:2b:0a:bb:23:50:30:26:fb:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:2E:B4:57:6E:B6:FA:B9:3F:EC:2D:BB:8A:45:48:B8:17:77:7A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fd923b7a-1413-47f3-b88a-1d9b207760da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3380::/47
Signature Algorithm: sha256WithRSAEncryption
10:df:2d:62:e3:6d:82:01:b8:c8:0d:16:85:17:00:bd:ec:65:
f0:ab:2f:ce:85:35:3b:c0:b9:7f:a2:13:fd:54:d0:91:43:69:
7c:0f:9a:21:ac:e7:63:36:63:fa:bf:4b:4c:cb:05:9b:cf:f7:
34:fb:e8:fc:25:1c:e3:33:4e:77:d6:db:79:2b:f2:f3:bd:5b:
24:99:d2:94:f9:e4:8d:b6:76:a9:f7:72:8f:58:1d:e3:aa:9a:
b4:bd:9f:b1:dc:9e:f6:16:1b:9a:85:7b:00:5e:39:22:ce:00:
8a:13:95:5d:d4:21:ce:16:0b:d9:ef:6a:79:46:87:d8:e3:bc:
15:87:19:02:3e:96:f7:fc:89:99:52:10:82:f8:8a:05:16:e0:
c0:a3:74:6b:09:5a:0c:e7:5c:01:09:1d:2c:39:79:68:81:91:
9b:b0:a8:d6:ee:69:ab:00:2d:48:b2:8b:e8:bf:87:8e:a7:79:
8d:28:9b:1d:b7:2d:b9:7b:d6:30:7b:ea:67:b4:00:5f:17:1a:
92:f8:2f:32:92:4e:ef:43:3e:84:2d:4e:d7:e0:ad:fb:fc:89:
25:3c:de:02:97:2f:62:81:91:70:1d:e1:fa:06:5f:e5:e8:7a:
01:bb:67:00:af:24:e0:29:95:ef:b2:5f:c4:cc:6a:1e:ed:0d:
34:62:84:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:39 2025 by rpki-client