
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57d2eac5-6435-46d6-b474-466c67d04c18.roa
File: 57d2eac5-6435-46d6-b474-466c67d04c18.roa (raw, json)
Hash identifier: Zguau6dICfjTBmqkr0MrJzqoSJUdnyieaFMpqW5ZHMQ=
Subject key identifier: 7F:B6:47:F7:9E:31:BE:56:01:48:36:A9:5B:17:2C:EC:5A:E0:2E:31
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3D5A25DA3E599E0D4C4A6792037C56D51FA9F351
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57d2eac5-6435-46d6-b474-466c67d04c18.roa
Signing time: Fri 31 Oct 2025 06:37:01 +0000
ROA not before: Fri 31 Oct 2025 06:37:01 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1850::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5a:25:da:3e:59:9e:0d:4c:4a:67:92:03:7c:56:d5:1f:a9:f3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:37:01 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=bdc16b1ba7c69974dc2b728d11784c4993f376c1c29b8d88f2793979c3bf3c62, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:f6:ef:02:2f:d8:e1:3e:58:db:89:8f:9d:
99:02:b0:f9:66:fd:5a:94:8b:52:d2:f3:e9:e4:2a:
27:27:6c:44:d7:95:d7:2a:58:14:42:34:77:b9:9f:
d3:88:50:93:45:c3:8c:aa:14:f4:f1:3c:2e:42:49:
7d:d6:c9:43:f4:df:05:e3:40:8b:72:1e:bd:a7:39:
02:78:43:20:b3:94:a8:1f:8f:14:33:98:00:a1:c3:
d5:bf:f4:c4:1f:91:88:4c:c7:b8:81:f7:f4:26:91:
81:9d:f1:49:3d:9e:56:0e:ce:18:f2:4f:36:c6:4a:
d6:ef:f7:ef:fd:a7:e1:e1:89:31:ef:fc:8e:cb:07:
0b:07:3c:6a:db:32:0b:dc:0e:89:39:e5:1c:79:fb:
39:18:12:65:53:9a:cd:c8:f0:e4:a4:8d:cb:79:7f:
57:3c:d7:a3:96:60:8a:d8:b9:86:eb:3c:10:37:9f:
c9:17:a0:f0:80:8d:12:c3:19:47:65:c8:59:63:47:
94:5c:ab:1c:c7:e2:10:f3:6b:ad:37:2a:67:13:a8:
d2:62:d4:df:2e:ab:ef:cd:ca:4f:66:32:ab:88:04:
ae:ba:ab:5a:af:4b:2a:e1:24:8f:62:19:0c:23:a4:
f2:58:61:fa:2d:bb:8e:ce:66:cc:50:f8:68:f2:4e:
d9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:47:F7:9E:31:BE:56:01:48:36:A9:5B:17:2C:EC:5A:E0:2E:31
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57d2eac5-6435-46d6-b474-466c67d04c18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1850::/44
Signature Algorithm: sha256WithRSAEncryption
87:be:00:38:ae:9b:17:51:1e:7a:74:dc:06:d1:f2:2c:02:f5:
ad:be:2b:39:74:24:da:4a:47:1c:96:cf:b5:0e:82:ac:83:65:
b1:67:26:50:a1:c5:03:a1:33:61:2e:a5:86:c4:b8:bc:56:35:
07:26:ff:bc:ba:4a:57:1a:8c:69:35:c6:2e:b5:fa:f3:a6:1a:
70:19:fa:7e:14:b5:97:59:cb:5a:e4:9b:ed:26:73:42:bb:4a:
98:c1:a7:21:54:71:00:0f:ba:0b:65:49:9d:b8:8e:f9:56:b9:
5e:40:dd:5e:69:5d:51:c3:8a:c7:28:16:e5:bf:10:d1:c6:cc:
c6:be:0b:06:a0:5f:30:01:be:ba:29:54:c5:72:f6:dd:4c:61:
e9:c9:fb:72:a4:c3:e2:36:f7:7f:a9:b7:01:85:1a:06:17:25:
a5:0b:e2:ac:65:e3:b2:92:0d:5b:5a:8f:13:e1:33:9b:49:2d:
3c:c1:1b:a6:2b:e4:1a:f6:47:85:29:d2:37:41:85:f0:2a:32:
49:1c:11:1d:34:6c:5f:62:b8:57:5b:f7:bf:6b:42:d8:d7:6d:
bf:07:4a:4a:d3:4e:82:3b:4c:f4:99:79:aa:a4:ff:82:40:86:
0b:ee:95:dc:a1:70:77:73:72:77:2e:d9:e7:ee:65:87:22:a1:
2b:d6:6f:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:41:37 2025 by rpki-client