
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7a3fe76f-294c-4c53-8738-0c6f901d6a1d.roa
File: 7a3fe76f-294c-4c53-8738-0c6f901d6a1d.roa (raw, json)
Hash identifier: viwjblmYkOhM0VXlaTTvBJCSk1O+oyOujDD1TQKI7hI=
Subject key identifier: 8C:70:19:36:1C:90:F3:CE:EE:F0:9C:5B:6C:C6:2E:03:CF:82:EA:7C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5F9918DB31704CF2644989EDFA290B399C00DA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7a3fe76f-294c-4c53-8738-0c6f901d6a1d.roa
Signing time: Fri 07 Nov 2025 01:00:48 +0000
ROA not before: Fri 07 Nov 2025 01:00:48 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 205.251.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:99:18:db:31:70:4c:f2:64:49:89:ed:fa:29:0b:39:9c:00:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Nov 7 01:00:48 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=a7481cedfa7f647e27072ea580e19c65b10be2e876c6a45b47d39bd499c71f6a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:e1:54:b4:09:22:37:3c:07:3b:4a:4f:7d:
7f:73:07:bb:eb:0a:b0:cc:aa:e7:e2:7b:73:7d:7a:
f8:5f:81:e6:4b:3c:bb:b4:e9:10:d6:c6:19:2a:59:
c3:55:cb:85:8f:f6:7d:19:d5:22:eb:15:ad:b6:c4:
6e:e7:4f:40:6d:3d:a7:66:ba:7d:4f:8d:84:cf:4c:
6f:08:67:e2:6a:f9:7f:03:3a:87:22:10:e2:b9:19:
27:32:ab:c1:69:c9:ce:5d:d9:38:96:16:d1:68:95:
21:f7:22:da:20:89:91:08:57:da:5d:d8:fe:df:dc:
18:92:5e:ee:cf:ee:1b:5f:39:bb:9a:f5:b8:a8:5d:
06:ec:71:08:67:f8:36:d2:62:be:ce:a5:50:f9:02:
1a:0c:88:40:88:fe:22:64:07:52:01:cf:be:32:ba:
0d:65:02:a0:11:9d:00:81:75:2c:f6:1d:30:e3:e9:
7b:5a:47:b0:4c:79:ff:a7:02:ad:c0:33:f4:b8:55:
80:67:81:54:fb:2a:23:0a:8d:32:6c:3d:96:b8:61:
48:f6:82:a5:92:cb:1f:3e:5f:18:30:01:11:ef:60:
b0:97:55:d9:01:ea:44:dc:4a:05:c7:c5:01:9c:1a:
cf:b1:ee:16:eb:ff:0c:e3:7f:57:49:1f:a9:5f:d3:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:70:19:36:1C:90:F3:CE:EE:F0:9C:5B:6C:C6:2E:03:CF:82:EA:7C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7a3fe76f-294c-4c53-8738-0c6f901d6a1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2e:2b:4c:a6:8d:02:cb:02:8c:a0:48:26:ec:0e:56:44:6f:
80:d4:43:be:bd:df:1c:f6:3f:2d:0c:9f:18:34:32:df:4d:3a:
d6:ea:8d:eb:49:52:fe:10:ad:62:68:d6:c3:3e:4a:1a:09:7c:
ec:37:88:a6:86:82:a0:7b:f6:c1:e3:41:50:90:89:9d:68:c9:
1a:5a:b4:66:c7:8b:e1:08:29:08:37:8d:b6:ed:cc:82:fd:03:
5e:85:35:de:f8:bb:7d:af:a4:8b:d8:e7:e1:0b:f0:84:44:14:
92:ef:dc:3f:41:3c:0c:14:b2:3e:d6:3d:98:80:5c:34:66:32:
ba:16:97:80:7e:94:b7:ce:09:7e:2c:08:a9:69:bf:c9:6e:4b:
96:0c:01:cd:1e:da:44:ac:ed:29:43:4a:7e:4e:bf:28:1c:59:
35:39:f7:bc:1f:56:61:b2:cb:6b:49:b2:7d:39:90:88:6a:74:
2b:02:1a:20:cf:2f:15:53:c8:fe:43:5d:f2:42:14:b8:d4:1b:
ff:2a:be:ff:30:9d:b8:14:d8:5f:ca:8b:b0:60:76:bf:75:4b:
9f:bc:df:b7:a4:b4:1e:74:ce:e5:e3:9d:69:b6:3f:ec:1a:0b:
c4:31:65:05:e0:3d:00:36:e1:d1:38:46:11:5a:7a:fa:c6:30:
be:47:c6:8a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITX5kY2zFwTPJkSYnt+ikLOZwA2jANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTExMDcwMTAwNDhaFw0yNTEyMTIyMzU5NTla
MHoxSTBHBgNVBAUTQGE3NDgxY2VkZmE3ZjY0N2UyNzA3MmVhNTgwZTE5YzY1YjEw
YmUyZTg3NmM2YTQ1YjQ3ZDM5YmQ0OTljNzFmNmExLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKPw4VS0CSI3PAc7Sk99f3MHu+sKsMyq5+J7c316+F+B5ks8
u7TpENbGGSpZw1XLhY/2fRnVIusVrbbEbudPQG09p2a6fU+NhM9Mbwhn4mr5fwM6
hyIQ4rkZJzKrwWnJzl3ZOJYW0WiVIfci2iCJkQhX2l3Y/t/cGJJe7s/uG185u5r1
uKhdBuxxCGf4NtJivs6lUPkCGgyIQIj+ImQHUgHPvjK6DWUCoBGdAIF1LPYdMOPp
e1pHsEx5/6cCrcAz9LhVgGeBVPsqIwqNMmw9lrhhSPaCpZLLHz5fGDABEe9gsJdV
2QHqRNxKBcfFAZwaz7HuFuv/DON/V0kfqV/TbhcCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBSMcBk2HJDzzu7wnFtsxi4Dz4LqfDAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvN2EzZmU3NmYtMjk0Yy00YzUzLTg3MzgtMGM2ZjkwMWQ2YTFkLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAM37/zANBgkqhkiG9w0BAQsFAAOCAQEASy4rTKaNAssCjKBIJuwOVkRvgNRD
vr3fHPY/LQyfGDQy30061uqN60lS/hCtYmjWwz5KGgl87DeIpoaCoHv2weNBUJCJ
nWjJGlq0ZseL4QgpCDeNtu3Mgv0DXoU13vi7fa+ki9jn4QvwhEQUku/cP0E8DBSy
PtY9mIBcNGYyuhaXgH6Ut84JfiwIqWm/yW5LlgwBzR7aRKztKUNKfk6/KBxZNTn3
vB9WYbLLa0myfTmQiGp0KwIaIM8vFVPI/kNd8kIUuNQb/yq+/zCduBTYX8qLsGB2
v3VLn7zft6S0HnTO5eOdabY/7BoLxDFlBeA9ADbh0ThGEVp6+sYwvkfGig==
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:40:25 2025 by rpki-client