
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff3455b5-ead9-4027-b8b6-b7ed43ca5209.roa
File: ff3455b5-ead9-4027-b8b6-b7ed43ca5209.roa (raw, json)
Hash identifier: KwK5O1hcaz3NbRpBDtlFW+DgLxCBVUnmAUaPrUG4A/s=
Subject key identifier: DB:83:06:47:18:D0:8D:F3:FC:AA:3C:83:A7:F3:A6:9B:A7:78:6C:C1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1DBC4DBD99BF927C84357CED2DC4E342AA9B3679
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff3455b5-ead9-4027-b8b6-b7ed43ca5209.roa
Signing time: Fri 31 Oct 2025 00:57:56 +0000
ROA not before: Fri 31 Oct 2025 00:57:56 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:38d6::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bc:4d:bd:99:bf:92:7c:84:35:7c:ed:2d:c4:e3:42:aa:9b:36:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 00:57:56 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=78a13db12d98c34742097c5e7b9b332694552ac59a571526950e592aab6af934, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:5e:a1:aa:c5:fa:66:09:bc:05:30:5d:bb:
b2:be:c7:57:55:d6:36:c8:98:3d:00:4a:8d:d1:f3:
55:74:4d:98:9f:0d:cf:85:a0:a7:0d:de:7d:75:7c:
d9:97:7e:9b:c1:b1:53:ee:4a:15:12:28:21:66:76:
28:8d:e5:49:ab:a2:a8:62:3e:11:2a:be:9d:61:df:
2a:24:ce:80:57:ff:8b:8a:78:cc:99:36:e7:c8:bd:
8d:09:74:0f:9b:cd:e4:6d:15:8c:6a:3e:b0:15:b3:
8d:b0:31:e1:42:5a:9f:42:3b:33:d9:df:83:5d:78:
df:9f:45:27:e9:88:30:8e:3a:21:e4:8b:13:7f:d9:
bb:f6:94:17:9c:83:0d:e8:99:d1:68:f1:92:47:6d:
8f:27:7d:ef:3f:92:8e:82:bf:e8:48:65:b2:03:f0:
1f:a5:f0:de:e9:55:3d:94:6b:21:67:4b:60:ba:d6:
54:df:33:18:d3:b5:af:75:ae:5b:f4:d6:60:28:25:
9c:4c:c4:50:ea:d0:a3:7b:39:9f:da:1a:95:ca:0f:
37:8c:e3:52:71:2f:41:66:57:3b:5f:ee:a2:13:33:
43:90:96:05:61:d1:a0:0a:b2:9a:e6:56:93:0a:7b:
51:76:92:fd:bd:fb:c1:05:5e:33:31:23:b5:ad:fb:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:83:06:47:18:D0:8D:F3:FC:AA:3C:83:A7:F3:A6:9B:A7:78:6C:C1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff3455b5-ead9-4027-b8b6-b7ed43ca5209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:38d6::/47
Signature Algorithm: sha256WithRSAEncryption
1d:1d:82:8f:f0:b4:49:60:bf:c6:49:83:a9:e0:9e:d3:d1:71:
b8:fd:75:57:31:96:43:5a:4c:57:4f:24:df:85:9c:ef:49:b8:
42:73:23:71:71:1e:5b:58:b8:39:e5:96:d9:92:a1:6b:9b:bf:
17:a1:80:6d:d4:68:49:42:2d:c2:ff:56:ea:4f:9b:dc:81:21:
5f:3d:d2:e3:96:94:dd:81:f3:4b:64:fb:90:f6:d3:8f:45:7d:
1a:cf:6a:9e:9b:65:20:f9:23:b5:8b:86:55:42:5a:6b:d9:4d:
70:f4:d0:36:b5:2e:ad:24:dc:7c:98:2d:41:1b:9f:95:ca:18:
06:23:2f:44:5e:3a:de:d9:f4:b0:30:0a:8d:fe:5a:d2:d9:88:
9d:2b:54:51:c2:19:87:42:6d:b9:9f:d9:41:a3:65:25:bd:f8:
bc:af:15:d3:4e:87:64:00:73:6f:f9:55:02:7b:23:06:69:53:
ee:34:08:2a:0a:13:9e:db:25:d3:54:3a:3f:bd:6c:b7:aa:89:
60:44:6e:7f:a8:88:97:0f:24:5b:95:f9:cd:bf:44:aa:f2:57:
a6:e1:e5:b9:bb:22:dc:cf:b2:1c:ac:09:4a:9c:de:f8:2e:2f:
36:13:fb:09:39:be:05:61:01:4c:5f:f0:84:31:23:20:bc:da:
96:cf:a0:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:27:52 2025 by rpki-client