
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6989eb47-fcca-4e28-b694-63dbfa2fc3d6.roa
File: 6989eb47-fcca-4e28-b694-63dbfa2fc3d6.roa (raw, json)
Hash identifier: 1AuGv6r4jaXW/LVa7UWKngj9K+BCJdmxWYq8RAF75SU=
Subject key identifier: 23:7E:F4:46:76:66:B5:E6:F1:2A:7B:93:36:D6:EB:1F:98:13:28:70
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 335E9B8CC0EE63EB584166D1C0E9A2C16D0D535D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6989eb47-fcca-4e28-b694-63dbfa2fc3d6.roa
Signing time: Fri 31 Oct 2025 04:06:52 +0000
ROA not before: Fri 31 Oct 2025 04:06:52 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:335c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5e:9b:8c:c0:ee:63:eb:58:41:66:d1:c0:e9:a2:c1:6d:0d:53:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 04:06:52 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=740b02b4011776df872f9d9b962457b01d4afb57fc8e8b2231731a7a7f6f95e8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:a9:b2:37:4f:fa:27:33:a2:3f:0a:e6:7b:
b4:93:a7:dd:da:3f:70:cb:b4:58:92:5f:67:f0:3c:
f4:2a:f5:91:18:80:6c:ea:fe:36:76:8a:4d:e5:c9:
a0:2b:5f:e8:08:2d:52:41:84:8d:9a:00:3a:e8:95:
9c:88:d8:aa:36:85:eb:76:de:cc:87:48:fd:80:1a:
96:0c:cf:06:d1:12:fa:6c:5a:f9:9c:ef:97:e0:0f:
38:2e:f6:d7:e8:a1:de:70:e5:fb:9c:0a:ff:2a:60:
91:6c:df:43:c5:13:0b:7c:cd:97:ba:c0:9d:11:4e:
bc:44:df:7c:be:43:15:a0:c1:4c:92:2c:48:3f:af:
6a:f4:40:54:e4:cc:db:24:69:0f:1d:5b:81:d0:1c:
41:73:90:49:fc:96:34:2e:b1:4f:a4:ab:84:55:d7:
d7:ae:47:78:f2:b3:57:e4:2a:27:0d:fd:d7:0f:8d:
93:46:2b:34:f7:eb:50:16:16:fc:56:5d:5e:eb:e5:
05:81:6c:4a:a2:e4:6b:4b:c5:f7:43:34:63:cd:ca:
96:25:6d:66:e3:e1:e4:e6:fe:9c:84:17:2c:22:06:
22:e2:89:67:36:10:d4:96:80:9e:72:97:3d:24:9d:
5f:b8:b7:70:60:24:02:5e:fd:27:58:fc:22:19:4c:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7E:F4:46:76:66:B5:E6:F1:2A:7B:93:36:D6:EB:1F:98:13:28:70
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6989eb47-fcca-4e28-b694-63dbfa2fc3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:335c::/46
Signature Algorithm: sha256WithRSAEncryption
a6:0b:99:28:03:12:57:23:7b:b6:a1:18:0d:4b:f5:10:ed:e5:
43:b7:f8:6d:c0:ec:a7:7a:a7:8a:ad:bc:10:72:c8:5f:84:c2:
4a:b4:75:67:be:c9:3b:c6:7e:7c:ef:44:c5:03:a8:da:05:ad:
d7:18:00:9a:d0:d6:c1:0e:db:42:89:c3:3c:92:c7:2a:a0:5b:
a3:41:67:54:37:de:d3:c6:95:30:25:32:02:3c:29:55:4e:48:
b7:9d:63:04:d8:82:db:23:9e:70:c3:38:eb:e2:4e:49:ce:34:
b4:84:ee:74:bf:bb:b3:4f:05:74:42:ae:a8:95:6b:f3:15:3f:
f9:5a:7a:dc:1c:40:e6:2d:fb:d3:c5:14:2f:5b:78:76:42:a3:
20:b4:b5:0e:ed:bb:c8:4a:13:85:96:40:6a:42:f3:8e:8c:6f:
fc:26:ea:96:53:d4:04:56:57:2a:d3:39:38:d8:38:1d:b4:df:
0b:d4:ec:34:90:48:99:08:eb:af:8a:7e:39:0c:df:0b:2b:9d:
6b:e5:0f:f1:5e:27:76:32:4a:8c:55:7d:a4:bd:ec:d2:31:06:
70:e3:bc:7e:a7:8d:bc:96:6f:cf:77:0d:4e:22:f6:42:0e:7c:
2e:ae:27:f6:49:1c:a8:e1:6f:af:01:58:a6:81:51:aa:2c:d8:
df:0e:2d:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:51 2025 by rpki-client