
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/064e0916-913e-426f-aa94-8f76ecf43520.roa
File: 064e0916-913e-426f-aa94-8f76ecf43520.roa (raw, json)
Hash identifier: +WdzP/XWsJ+8CdBOJjpDSbMejrS1rCkfRgPYunYuHvQ=
Subject key identifier: A6:FA:36:9B:44:2C:8F:BE:CD:EA:FA:27:DA:2E:BD:B4:FC:FB:D7:97
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1EF556CFC66DEE13B170DD533340E764603E52FE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/064e0916-913e-426f-aa94-8f76ecf43520.roa
Signing time: Fri 31 Oct 2025 06:10:19 +0000
ROA not before: Fri 31 Oct 2025 06:10:19 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3948::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f5:56:cf:c6:6d:ee:13:b1:70:dd:53:33:40:e7:64:60:3e:52:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:10:19 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=dff8d07b4e6c566ae0ec443a38874c5b84156ba774a799b9c7e6db2f29fa0735, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:ca:bf:ae:67:7a:94:97:bf:38:f3:88:f2:
65:35:37:89:dd:c3:2c:a8:f7:14:b7:89:7e:8a:c0:
05:23:0b:cb:c3:67:7a:eb:a5:82:10:17:9d:d0:54:
c4:7f:d9:0f:f3:89:1e:25:fb:0c:9c:f1:99:56:54:
a1:5c:af:1f:de:48:1d:0e:25:52:0c:98:b1:8d:48:
62:3e:51:47:09:6b:0b:f2:28:40:cd:c9:0f:7c:02:
30:7f:b2:90:ce:ca:ec:b3:6a:4f:3c:4f:87:bb:3d:
55:d1:06:dc:a7:e2:31:19:c6:38:fc:65:78:a6:f9:
38:8a:c1:d9:85:1d:01:41:82:ec:7a:62:1a:23:40:
c5:1c:a7:b1:ac:d5:ea:58:30:b9:40:f9:46:f5:8e:
1b:82:db:e0:81:cf:1a:54:fa:63:d0:46:e6:e6:8d:
af:8d:0c:10:47:d2:9b:ed:03:2b:ab:6b:b4:f7:8c:
92:fa:29:d7:17:5a:f2:2e:87:98:61:47:96:b3:46:
86:a1:87:8e:67:a0:af:ca:5f:f8:5a:a2:55:fc:db:
f5:ec:4d:b0:ec:6c:6a:18:14:e6:65:7a:38:68:78:
f7:65:a8:0c:d2:9a:23:6d:54:7b:b9:1e:bd:03:ab:
5e:8c:4e:c4:b6:01:72:8b:fe:f3:b1:de:8c:22:73:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FA:36:9B:44:2C:8F:BE:CD:EA:FA:27:DA:2E:BD:B4:FC:FB:D7:97
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/064e0916-913e-426f-aa94-8f76ecf43520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3948::/45
Signature Algorithm: sha256WithRSAEncryption
96:56:99:69:ae:52:c3:ff:72:68:21:e3:bb:97:0a:51:8d:cf:
1c:1b:e8:46:07:66:df:e7:a7:47:14:88:05:2f:cf:6c:6d:9a:
64:5d:2f:dd:55:a6:32:cb:c8:16:3d:c7:b0:80:33:5e:e2:29:
d9:f1:2c:0e:bf:74:c9:3e:05:c9:31:71:69:00:52:8f:a8:ed:
d4:d0:7d:3d:48:5c:e6:f1:8c:f8:a1:04:6d:b8:1b:00:01:f6:
5a:2e:9c:2d:9b:63:b2:a1:27:94:f4:62:f9:7f:cb:83:9d:a3:
3a:19:44:8d:b9:1a:f2:8c:a8:14:b7:06:93:27:0a:28:96:be:
98:43:23:fd:13:94:ae:fd:d9:9d:e7:af:63:f6:8d:5e:90:60:
af:49:e7:2c:58:cd:50:3c:dd:69:dc:1e:3d:30:7c:bf:1b:02:
c3:76:dd:35:16:e7:86:ff:9c:d3:6e:4a:52:f1:e3:f0:af:84:
59:73:a2:ab:f1:5e:05:fc:e5:8f:f2:f9:68:ba:87:72:64:1a:
30:d2:39:ef:fa:d1:aa:f6:c5:38:bc:03:e8:d5:f0:5c:0d:b9:
25:eb:c3:b6:eb:ac:84:3d:4c:c9:f7:95:1d:9e:22:10:2a:68:
01:54:51:29:b0:59:25:60:7c:c6:d3:59:92:f1:22:8e:f2:e4:
11:a5:e6:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:26 2025 by rpki-client