
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/144adad0-7ae0-4e36-b926-a8e0ca825f06.roa
File: 144adad0-7ae0-4e36-b926-a8e0ca825f06.roa (raw, json)
Hash identifier: Gq8JDvUuiJfFmjmV6RD10+uiz6fwk5tsq7Doq9yw5Eg=
Subject key identifier: 28:71:0A:77:61:00:03:0A:26:11:8B:C6:F2:EA:1E:73:F2:9D:FE:E2
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1CE69B594A60CC6F10D8E40B124E5F6383705C1F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/144adad0-7ae0-4e36-b926-a8e0ca825f06.roa
Signing time: Fri 31 Oct 2025 06:38:53 +0000
ROA not before: Fri 31 Oct 2025 06:38:53 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1b80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e6:9b:59:4a:60:cc:6f:10:d8:e4:0b:12:4e:5f:63:83:70:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:38:53 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=d5cdcfe36e70b9708ef855846d161cecaab545455c7ffaee2c7ecdebacf31efa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:55:9b:b1:cb:0d:26:6c:05:2c:4f:42:42:
a6:5b:91:d4:e2:13:85:1c:98:e5:48:47:49:26:44:
bf:8c:ba:fe:8b:36:da:6b:84:dc:ac:82:e4:75:7c:
e5:b5:a9:76:26:ae:38:66:ab:24:1b:9e:05:16:bb:
d3:a6:f4:dc:14:86:d3:69:b2:39:70:e5:18:a4:42:
fe:24:28:e5:29:65:45:2a:64:aa:8e:9e:65:cb:7b:
0b:b0:6f:d6:36:25:73:bd:04:e0:1b:2a:18:1a:f2:
18:3d:16:80:d9:42:9f:11:a7:3b:db:f4:b2:b8:5c:
bd:a9:0f:20:11:ad:81:58:e1:14:51:b0:3c:47:5f:
76:4f:26:24:8e:39:4c:56:c7:26:a5:be:3e:d4:d1:
4b:c2:0e:2a:0c:e1:d7:d3:21:d4:33:25:7a:a5:ca:
33:9d:e9:20:a3:cf:35:95:83:cd:9a:f4:7a:ed:00:
85:7d:a3:80:6b:5d:03:1b:26:f1:a6:32:85:ed:ef:
6f:1e:9a:c0:d7:14:89:16:ae:06:61:83:47:8e:98:
3d:b2:20:4b:f1:2c:21:82:be:4c:db:7f:18:c3:37:
0f:fd:cd:46:ab:df:3d:71:a5:aa:8f:da:bd:12:c9:
50:26:de:18:52:37:29:8e:ed:54:19:64:e1:8e:27:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:0A:77:61:00:03:0A:26:11:8B:C6:F2:EA:1E:73:F2:9D:FE:E2
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/144adad0-7ae0-4e36-b926-a8e0ca825f06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1b80::/44
Signature Algorithm: sha256WithRSAEncryption
1b:3f:a6:92:5e:eb:c3:6b:64:a0:65:4c:86:a0:3c:55:4d:b4:
63:68:35:aa:f2:13:7f:1e:1f:a4:11:cc:bd:e3:9d:e9:a5:6a:
32:9d:a4:3b:da:34:7d:40:ed:14:5d:6b:df:26:4a:32:c5:5e:
35:a0:d8:01:09:75:cf:e8:e5:18:dc:63:14:b6:17:85:e6:4f:
8d:6a:a6:9b:fc:41:22:25:ed:ce:68:9e:39:28:d1:3f:13:cd:
4e:91:6b:75:04:14:64:71:ec:cb:02:d6:5f:5f:5d:b7:b2:05:
db:4e:d4:4d:d3:e7:9d:e1:ba:4d:d1:1e:58:ef:72:3f:27:ca:
42:09:a1:10:f0:d8:4e:13:1f:c2:af:25:5b:b3:50:93:8f:6a:
36:7f:0a:d4:bf:bb:d2:87:e0:44:be:e3:63:2a:72:36:29:d9:
55:79:c6:57:10:8d:99:99:73:a2:53:19:76:0b:4f:ca:10:d6:
4e:82:5f:e6:58:5b:fd:95:80:75:be:0c:fa:a0:06:06:14:ad:
f0:32:2f:78:29:db:79:fc:e9:10:0b:c6:6e:1a:9e:9b:c9:88:
09:93:46:bc:e9:ec:4e:ce:05:61:b5:ed:66:ff:a8:d6:1c:ea:
7b:38:ee:1f:97:71:28:e5:40:0d:2b:23:c8:38:51:34:59:0d:
10:f6:7c:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:45 2025 by rpki-client