
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93cb2208-307f-4631-92f8-e2866b214725.roa
File: 93cb2208-307f-4631-92f8-e2866b214725.roa (raw, json)
Hash identifier: WAup94lnSYaOxa9Y2NEiyaFhRLPx8sKB/i9dstFSOvU=
Subject key identifier: 8C:F9:29:DB:53:23:77:D7:9B:D5:FF:5C:C6:58:A0:82:0E:5F:D1:7E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 285B564C767595465FF62282BB97A68B1D3EE2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93cb2208-307f-4631-92f8-e2866b214725.roa
Signing time: Fri 31 Oct 2025 01:21:48 +0000
ROA not before: Fri 31 Oct 2025 01:21:48 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3ac4::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:5b:56:4c:76:75:95:46:5f:f6:22:82:bb:97:a6:8b:1d:3e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 01:21:48 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=71452f3ae81cadb951b0a3141d4bfbea178547385d86e9f5bd5bbbf58195bef4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:ff:3e:16:5c:e6:6c:18:79:e5:82:01:51:
7c:5b:ef:f3:31:45:31:0e:35:59:c3:31:82:2e:df:
fe:2a:a2:19:25:e9:0c:06:b0:b1:fc:dd:a9:bb:43:
09:e8:f2:b0:35:38:7f:94:cd:db:50:1a:80:be:3b:
69:9c:e3:8a:30:49:cb:95:33:0c:0f:60:d8:b3:af:
da:6f:dd:94:bf:06:24:c0:1a:01:1c:4e:9b:6e:33:
89:e1:d7:82:a2:a8:1f:56:49:22:58:dd:ab:74:df:
81:54:ee:38:01:2a:3a:27:ae:b2:b0:9c:e4:c6:f3:
f6:a7:d5:f8:35:6b:b6:e4:92:38:11:00:2c:60:30:
07:6c:4b:eb:33:ba:15:db:53:cd:9b:88:d7:d7:a7:
da:64:a5:c7:bf:17:97:e1:3b:0e:fb:c5:92:92:55:
54:90:7b:81:01:06:44:0d:f3:2d:ab:37:86:c7:e1:
2a:63:d0:74:b7:bf:e2:a0:8d:4c:01:e0:a2:8a:3a:
c6:2c:c8:91:92:0a:6a:c2:60:a3:70:ff:c4:62:43:
74:c2:c6:2f:27:f6:f9:cb:66:47:c2:31:bd:9c:b6:
35:7f:5f:5e:09:75:3e:73:e5:82:7e:cd:6d:a7:56:
95:6a:09:bf:4b:40:6d:0d:2c:8b:28:ab:a0:ca:db:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:29:DB:53:23:77:D7:9B:D5:FF:5C:C6:58:A0:82:0E:5F:D1:7E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93cb2208-307f-4631-92f8-e2866b214725.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3ac4::/47
Signature Algorithm: sha256WithRSAEncryption
62:f5:f9:f1:b6:b1:d6:3b:18:be:b2:fe:b9:3f:2d:db:33:80:
ff:b0:b1:cd:de:e3:2e:a8:22:38:dd:a6:f5:56:43:96:0d:e4:
be:fe:a2:6a:45:5b:a3:29:1a:df:7e:d8:d0:9e:52:90:33:15:
ff:39:05:8c:59:fd:92:4c:97:0c:b0:b1:36:01:3d:89:79:bc:
2b:f1:f3:ef:93:40:bc:b7:3c:31:3c:22:35:35:c5:54:bb:7f:
aa:0f:53:84:37:fd:fb:05:4d:bc:1c:ca:0b:51:75:c9:0c:b0:
0f:3e:14:de:80:ff:8f:2f:f7:c0:71:49:a2:32:22:57:ee:48:
7b:0e:6c:19:35:2a:3e:97:97:ce:2e:cf:46:d5:0e:3a:36:57:
bd:85:56:98:db:42:01:84:f6:e0:fb:6d:fa:c9:47:0d:5e:e8:
02:c8:b2:c2:4d:0f:40:46:65:6c:33:57:b2:d7:88:15:f1:e6:
74:04:77:e0:66:8c:f8:96:bd:b1:b6:dc:e6:78:b0:5a:ae:3d:
6c:3f:a2:1f:d3:51:60:67:57:e1:bf:cc:20:6e:31:73:78:8d:
3e:55:1f:ae:1f:2a:73:fa:4b:e9:5d:7c:47:ba:9c:b1:93:ff:
8b:ce:4f:93:b3:63:11:1a:29:9e:1e:d6:b1:fc:e2:dd:8b:09:
53:f7:65:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:25:27 2025 by rpki-client