
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fc34965-2c2d-48e2-b81a-362347a52cb3.roa
File: 8fc34965-2c2d-48e2-b81a-362347a52cb3.roa (raw, json)
Hash identifier: H3BQjJkHLF/ILvkG2n1wv/uUbckREtf/Z8VGXY29Ueg=
Subject key identifier: CE:E8:C8:D5:6A:F7:37:E6:6F:84:E8:82:84:AB:D0:98:9D:16:AC:74
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1E7E2B6ABDCEFDFF033305C3E2473AB218CE8AD1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fc34965-2c2d-48e2-b81a-362347a52cb3.roa
Signing time: Fri 31 Oct 2025 05:43:58 +0000
ROA not before: Fri 31 Oct 2025 05:43:58 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2cd0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7e:2b:6a:bd:ce:fd:ff:03:33:05:c3:e2:47:3a:b2:18:ce:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 05:43:58 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=0e69d493ced819381e5dcdca400f7834f947148e3ce0c2ff06e7027d631f2228, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a1:e9:8d:bf:32:5d:e4:af:65:dd:e6:b9:2e:
a5:44:94:a4:91:2d:cc:2d:a4:d4:22:28:7f:d6:ec:
3e:92:f0:06:8d:63:32:00:90:0a:1c:e2:2a:69:35:
35:ae:7b:69:cd:9d:16:a4:01:83:73:64:85:b8:8b:
0d:75:e1:d0:e0:e9:60:96:a2:ac:3d:95:7e:81:53:
e2:9f:a5:ec:d3:83:91:90:5e:83:02:0c:b4:27:17:
f7:e9:13:e2:9b:77:ce:37:2e:4b:ec:7e:9a:05:e0:
4a:e0:94:de:ad:6e:e6:32:ba:1f:c8:3c:08:65:41:
d3:39:bf:a4:f3:91:cc:f4:3c:0e:3d:55:da:02:39:
13:22:46:28:7d:75:e7:cd:68:ac:ed:a6:ce:32:83:
9e:0a:ce:ce:c4:0f:05:9a:d2:0b:a9:f3:ec:f9:93:
56:6e:ac:3e:96:31:76:85:14:16:bd:da:ae:cf:be:
86:a3:63:1b:be:7f:e2:da:87:ad:a8:9d:ca:90:bf:
83:67:a4:c9:4b:a7:01:6c:9b:f3:07:06:56:7e:7c:
79:05:a5:c3:ee:f9:6c:58:bf:6c:04:e4:02:1f:41:
b9:60:c6:2f:e7:48:d0:8e:6f:6a:8c:de:e2:15:76:
f3:3d:93:a5:5e:0b:8f:18:cc:43:b5:ef:2a:75:84:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:C8:D5:6A:F7:37:E6:6F:84:E8:82:84:AB:D0:98:9D:16:AC:74
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fc34965-2c2d-48e2-b81a-362347a52cb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2cd0::/45
Signature Algorithm: sha256WithRSAEncryption
a1:c7:43:86:3e:3a:5f:4e:ca:86:c7:ec:ee:41:af:3b:33:24:
d9:4b:25:e1:83:e3:9f:07:d4:b7:09:6f:6c:b2:d4:e3:bc:00:
e2:42:f8:56:a0:3e:e4:bf:d2:2a:3e:45:00:03:1a:74:dc:bb:
35:1b:d0:d5:b0:ac:35:65:c7:a6:4f:f2:0d:3d:d0:e9:a1:db:
5f:16:e3:d7:57:b1:df:b0:ca:32:85:df:9c:27:33:4a:79:8e:
39:7f:19:1e:53:9e:6a:35:d3:34:83:80:10:f5:6d:a2:76:6a:
b2:e7:3f:98:a5:61:07:fa:ec:29:94:3b:9b:97:9e:18:ad:c9:
e4:e2:a0:7c:fd:e4:c8:30:84:2c:d4:c3:57:32:88:41:4a:ae:
c1:02:36:73:3a:8b:11:1e:d8:69:7b:b6:48:eb:2e:8c:76:8f:
af:e8:41:57:14:48:fd:5a:81:d1:d3:49:3b:f7:44:d2:9b:64:
8e:c1:35:a1:34:34:98:9b:4b:c9:2c:c4:50:2d:cc:f2:9c:4f:
5b:8d:50:67:33:da:80:9f:3f:34:8d:f7:ad:30:12:7c:f3:5d:
e5:d1:23:6b:91:09:f8:75:80:ca:b9:13:5d:a0:60:f7:9d:4e:
74:4e:ac:2b:bc:76:5c:ef:79:0b:99:57:f3:6e:c3:ba:1b:ad:
8b:78:50:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:42:20 2025 by rpki-client