
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe172f24-edd2-4b92-9873-6cad6c6292c9.roa
File: fe172f24-edd2-4b92-9873-6cad6c6292c9.roa (raw, json)
Hash identifier: KM9sDH9xFzuGMpMiVVmxj8IoDvGdTgY+n7M5aH2and4=
Subject key identifier: 48:4D:A7:E3:74:CB:84:B9:57:51:D7:17:75:F0:78:79:74:19:22:98
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 56CB2F74C7CBF88BCA6A379566C5421F58E57AD0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe172f24-edd2-4b92-9873-6cad6c6292c9.roa
Signing time: Fri 31 Oct 2025 04:55:17 +0000
ROA not before: Fri 31 Oct 2025 04:55:17 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3ebc::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:cb:2f:74:c7:cb:f8:8b:ca:6a:37:95:66:c5:42:1f:58:e5:7a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:55:17 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=bd4ffade5a66c32fc271c84515e53cb4c8a60fed5065aa8ca8957ea2e3781c87, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:dd:ac:0f:d1:35:27:92:52:f6:22:f3:67:
4f:08:a1:41:ce:05:1e:98:80:d1:80:63:5a:2c:94:
f2:3a:17:5b:16:1b:49:bd:70:fc:02:4f:46:4b:66:
91:33:d3:4b:a3:9f:38:2c:a1:3d:e6:5f:3d:91:65:
72:54:7d:83:d4:d3:98:3e:ed:ad:66:19:07:52:9e:
17:2b:b9:0b:5d:a9:5d:f7:e8:27:fb:c6:e1:b0:55:
5d:f1:f2:d1:e3:95:7b:f1:13:25:f3:12:1f:f3:32:
01:0e:9b:59:5f:af:1d:f4:66:95:8b:52:72:85:4b:
6e:40:84:a6:26:4e:41:9b:c6:42:58:29:13:69:d5:
98:1b:a3:64:e5:e2:31:b0:f1:94:f1:79:d5:63:5b:
8c:6f:c8:12:6a:9c:41:6c:16:36:c7:96:50:d1:4e:
86:03:39:16:36:30:0b:bd:94:d2:d7:7f:0b:97:2c:
6a:fb:b0:de:9b:92:41:47:d1:a1:06:75:d8:ee:8a:
d5:40:09:c1:2e:64:d8:e0:43:de:55:cf:6b:e1:1d:
fd:f0:0d:01:07:f6:6a:a8:f3:ab:3f:6f:31:8c:01:
a9:31:ce:fd:fe:9c:29:c0:f2:a9:66:ce:7e:30:31:
94:ee:41:d4:83:46:a1:a7:72:76:76:6e:93:6c:ce:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4D:A7:E3:74:CB:84:B9:57:51:D7:17:75:F0:78:79:74:19:22:98
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fe172f24-edd2-4b92-9873-6cad6c6292c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3ebc::/46
Signature Algorithm: sha256WithRSAEncryption
10:10:11:c5:85:ac:7a:c2:ab:29:3c:83:33:e8:60:9e:bb:14:
e9:38:68:57:ce:f5:38:61:cb:de:85:ff:43:04:cb:1f:37:be:
f0:09:66:49:15:06:c4:73:45:11:50:af:1c:b9:fc:59:a1:f8:
42:32:46:ba:8e:51:a4:47:cb:86:8d:1d:fc:88:0b:4e:15:29:
d0:67:db:62:65:40:74:36:67:39:1f:2e:36:be:24:b7:13:1c:
98:1b:92:1f:0a:c6:28:9d:8d:13:de:8e:2c:79:77:33:4b:f8:
35:4e:56:05:b3:fb:da:ca:3e:bb:4b:dd:c2:42:24:2d:8c:ca:
d3:8a:33:84:dc:8d:24:25:b8:03:1c:bd:50:c0:32:fc:76:ed:
b8:fa:27:61:a6:ca:34:bf:d7:4c:a1:43:78:a5:ef:47:88:c9:
a6:8f:7c:d9:66:21:cb:9d:22:e3:0f:0e:43:e0:e9:e1:a3:65:
d4:53:49:38:ac:65:c8:fb:18:79:d8:4d:4d:8f:7d:47:6e:2d:
ed:d6:fd:fa:b6:84:76:a6:28:18:f7:d1:cb:ff:58:42:4c:57:
e8:dd:8b:c4:70:22:59:9b:1d:65:cb:b6:64:31:b4:89:04:dc:
6b:3b:b1:f2:13:21:cb:4b:87:d3:0f:e3:84:cf:0a:91:9b:17:
92:02:20:e6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVssvdMfL+IvKajeVZsVCH1jletAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1NTE3WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiZDRmZmFkZTVhNjZjMzJmYzI3MWM4NDUxNWU1M2NiNGM4
YTYwZmVkNTA2NWFhOGNhODk1N2VhMmUzNzgxYzg3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1n92sD9E1J5JS9iLzZ08IoUHOBR6YgNGAY1oslPI6F1sW
G0m9cPwCT0ZLZpEz00ujnzgsoT3mXz2RZXJUfYPU05g+7a1mGQdSnhcruQtdqV33
6Cf7xuGwVV3x8tHjlXvxEyXzEh/zMgEOm1lfrx30ZpWLUnKFS25AhKYmTkGbxkJY
KRNp1Zgbo2Tl4jGw8ZTxedVjW4xvyBJqnEFsFjbHllDRToYDORY2MAu9lNLXfwuX
LGr7sN6bkkFH0aEGddjuitVACcEuZNjgQ95Vz2vhHf3wDQEH9mqo86s/bzGMAakx
zv3+nCnA8qlmzn4wMZTuQdSDRqGncnZ2bpNszoIHAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUSE2n43TLhLlXUdcXdfB4eXQZIpgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2ZlMTcyZjI0LWVkZDItNGI5Mi05ODczLTZjYWQ2YzYyOTJjOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAPrwwDQYJKoZIhvcNAQELBQADggEBABAQEcWFrHrCqyk8gzPoYJ67
FOk4aFfO9Thhy96F/0MEyx83vvAJZkkVBsRzRRFQrxy5/Fmh+EIyRrqOUaRHy4aN
HfyIC04VKdBn22JlQHQ2ZzkfLja+JLcTHJgbkh8KxiidjRPejix5dzNL+DVOVgWz
+9rKPrtL3cJCJC2MytOKM4TcjSQluAMcvVDAMvx27bj6J2GmyjS/10yhQ3il70eI
yaaPfNlmIcudIuMPDkPg6eGjZdRTSTisZcj7GHnYTU2PfUduLe3W/fq2hHamKBj3
0cv/WEJMV+jdi8RwIlmbHWXLtmQxtIkE3Gs7sfITIctLh9MP44TPCpGbF5ICIOY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:03 2025 by rpki-client