
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0c115e9d-b0f1-4548-97d3-623227defd98.roa
File: 0c115e9d-b0f1-4548-97d3-623227defd98.roa (raw, json)
Hash identifier: bgrY1V7aKp14gvJ4XpVzCwFg5yLGvY5cUzEplzMCuIs=
Subject key identifier: B6:8B:CD:52:66:69:93:2A:01:81:1F:B6:1E:78:D4:A5:7B:89:1E:BB
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5656D57E4C43A326B7A09F182DC117AE93525FF0
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0c115e9d-b0f1-4548-97d3-623227defd98.roa
Signing time: Thu 13 Nov 2025 01:50:41 +0000
ROA not before: Thu 13 Nov 2025 01:50:41 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2631::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:56:d5:7e:4c:43:a3:26:b7:a0:9f:18:2d:c1:17:ae:93:52:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 13 01:50:41 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=11af3eac441fb093bbe43f300ea441f37524d6e1d5bf5b9278aef7452561276a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:31:c1:38:d2:ee:ba:84:16:7b:dd:20:25:
13:94:26:5c:7f:fc:4c:b9:9a:20:86:ef:b2:fe:ef:
d9:18:e1:f5:7c:35:4d:80:06:03:d8:20:b9:2f:ce:
8e:25:56:a4:28:0c:17:04:26:d8:f6:c7:54:b6:4a:
1a:60:10:d9:88:42:f1:79:27:22:32:3f:08:e8:a2:
48:77:8a:f6:86:7d:b2:23:da:8b:db:8c:f2:cb:70:
bf:81:63:c6:05:00:07:d2:55:69:99:46:d8:c7:20:
46:58:ce:8e:ba:c5:13:8c:bf:4c:9b:f0:3c:3d:32:
e2:59:81:7e:9a:65:5e:78:c7:8a:93:47:de:cd:f6:
5c:e0:38:08:83:0a:de:c6:4e:4d:1b:c6:44:e9:05:
51:60:40:a4:ba:85:9c:ca:dd:ce:84:63:76:a9:51:
be:7c:d2:2d:63:21:e1:26:29:f9:69:e4:17:1e:1f:
b2:79:4c:53:85:d2:a8:23:bd:da:bc:07:ec:16:b5:
85:7e:39:25:77:36:45:40:61:b8:00:77:a4:24:eb:
3b:5d:23:5d:16:93:78:c5:e4:93:ae:59:c2:bc:ab:
4d:12:a6:b9:46:b5:7a:a1:86:9e:da:da:74:52:33:
0e:a0:1f:3e:8b:1f:7f:4b:5b:2a:d9:48:00:de:04:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:CD:52:66:69:93:2A:01:81:1F:B6:1E:78:D4:A5:7B:89:1E:BB
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0c115e9d-b0f1-4548-97d3-623227defd98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2631::/48
Signature Algorithm: sha256WithRSAEncryption
94:5a:8f:3f:89:3f:4d:e8:2d:00:5b:13:0a:3f:8d:87:ee:39:
dd:15:4b:ba:a3:2b:c1:8c:43:24:da:3c:3d:51:ce:3f:66:d4:
f2:06:c2:56:0d:9e:54:0d:b2:23:5f:11:5e:d8:40:6f:5d:96:
ca:30:b6:97:7b:2a:bc:fc:21:9d:2c:70:46:7f:c1:db:17:b4:
a2:08:30:75:3a:56:8b:6c:a2:fc:1a:a8:81:cf:1b:a3:1c:32:
fb:99:d2:d4:2a:62:f4:ff:56:01:7d:9f:cd:9e:76:44:eb:3a:
c3:7c:04:a0:e4:04:9a:c6:78:54:e9:be:cc:ed:ed:fe:7c:1d:
d1:c4:18:d8:fd:7b:d2:5d:84:8d:ac:b4:62:f2:d4:75:b2:d2:
cb:14:dd:2e:9b:62:9e:3f:e1:6d:a5:f2:da:3e:87:cf:cf:44:
05:06:cd:88:54:da:0d:43:40:59:d0:f8:25:0c:5d:7b:3c:18:
a5:c1:d9:4b:2c:c8:11:49:82:f7:7c:af:db:03:95:b9:b4:da:
bf:bd:7a:89:5b:a6:8a:88:68:07:35:6f:6c:12:ac:61:bd:71:
8c:7e:78:6d:21:57:fb:fb:49:4b:a3:5d:7a:5f:c8:d1:20:5e:
3f:45:e7:3e:b5:b8:27:9b:54:61:9f:66:cd:8e:e0:f6:e5:d9:
c6:f8:3e:81
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUVlbVfkxDoya3oJ8YLcEXrpNSX/AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTEzMDE1MDQxWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMWFmM2VhYzQ0MWZiMDkzYmJlNDNmMzAwZWE0NDFmMzc1
MjRkNmUxZDViZjViOTI3OGFlZjc0NTI1NjEyNzZhMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwXjHBONLuuoQWe90gJROUJlx//Ey5miCG77L+79kY4fV8
NU2ABgPYILkvzo4lVqQoDBcEJtj2x1S2ShpgENmIQvF5JyIyPwjookh3ivaGfbIj
2ovbjPLLcL+BY8YFAAfSVWmZRtjHIEZYzo66xROMv0yb8Dw9MuJZgX6aZV54x4qT
R97N9lzgOAiDCt7GTk0bxkTpBVFgQKS6hZzK3c6EY3apUb580i1jIeEmKflp5Bce
H7J5TFOF0qgjvdq8B+wWtYV+OSV3NkVAYbgAd6Qk6ztdI10Wk3jF5JOuWcK8q00S
prlGtXqhhp7a2nRSMw6gHz6LH39LWyrZSADeBKJBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUtovNUmZpkyoBgR+2HnjUpXuJHrswHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzBjMTE1ZTlkLWIwZjEtNDU0OC05N2QzLTYyMzIyN2RlZmQ5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmMQAAAAAwDQYJKoZIhvcNAQELBQADggEBAJRajz+JP03oLQBbEwo/jYfu
Od0VS7qjK8GMQyTaPD1Rzj9m1PIGwlYNnlQNsiNfEV7YQG9dlsowtpd7Krz8IZ0s
cEZ/wdsXtKIIMHU6VotsovwaqIHPG6McMvuZ0tQqYvT/VgF9n82edkTrOsN8BKDk
BJrGeFTpvszt7f58HdHEGNj9e9JdhI2stGLy1HWy0ssU3S6bYp4/4W2l8to+h8/P
RAUGzYhU2g1DQFnQ+CUMXXs8GKXB2UssyBFJgvd8r9sDlbm02r+9eolbpoqIaAc1
b2wSrGG9cYx+eG0hV/v7SUujXXpfyNEgXj9F5z61uCebVGGfZs2O4Pbl2cb4PoE=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:47:55 2025 by rpki-client