
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce2cb71a-a250-49c2-a34f-8eec0742aef1.roa
File: ce2cb71a-a250-49c2-a34f-8eec0742aef1.roa (raw, json)
Hash identifier: WGJ1H51PPGAqFnwM7hO+BSO41smV7VNtT5UrnbMBIo8=
Subject key identifier: D1:42:C4:DF:8B:DF:D6:09:AF:9D:CF:41:84:67:28:2A:08:AC:D7:1D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3D2986234AFAE114F05D73622B86FEC6C0975F4F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce2cb71a-a250-49c2-a34f-8eec0742aef1.roa
Signing time: Fri 07 Nov 2025 01:10:07 +0000
ROA not before: Fri 07 Nov 2025 01:10:07 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 205.251.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:29:86:23:4a:fa:e1:14:f0:5d:73:62:2b:86:fe:c6:c0:97:5f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Nov 7 01:10:07 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=57a51304e02f108f5e64b57f5e49894fad28f9333d3da527821ed80539a14907, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:39:cb:cb:58:6c:f4:6b:8f:ef:f0:61:fd:
ef:21:33:30:03:08:41:01:06:de:66:bc:3d:ba:03:
d9:f8:46:7b:af:0c:ca:4c:32:86:55:b3:bb:08:2c:
4a:b4:8a:62:31:23:ab:d9:4f:0b:fc:79:bc:69:0c:
d4:05:80:92:a6:30:9d:9b:41:e6:b4:c7:dd:06:d4:
48:30:e1:06:f2:cb:7f:37:2f:73:fa:82:01:be:d4:
82:41:b0:35:bd:ae:be:7f:b3:74:a2:b7:2f:b4:3c:
a3:27:cc:85:5d:4f:44:2c:b9:f3:13:aa:44:de:6c:
a6:25:13:02:74:cf:9a:a4:60:97:ba:3f:e0:96:c5:
26:bb:ea:50:bb:ad:cb:d1:df:90:a9:5b:33:3b:93:
3d:30:38:21:c3:5d:70:be:33:47:cd:71:f1:7e:1c:
79:2f:d0:0f:2e:ab:c9:b6:4b:b3:00:24:99:5d:6a:
a7:cc:4c:8d:3b:81:56:e8:71:24:dd:fd:65:a4:f7:
cd:7a:fa:78:95:c8:06:ad:16:58:89:42:9b:e6:57:
96:87:4b:1a:ef:ca:ff:98:bc:2f:3c:3e:a3:24:4f:
b7:bb:c9:7e:ef:84:05:76:d6:5c:5b:f7:dd:ad:a5:
ac:a3:36:e1:dd:61:df:ff:c9:a4:29:af:4c:d7:77:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:42:C4:DF:8B:DF:D6:09:AF:9D:CF:41:84:67:28:2A:08:AC:D7:1D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce2cb71a-a250-49c2-a34f-8eec0742aef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.200.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:cd:e6:80:cb:6c:d5:21:0c:45:41:91:fe:79:1a:ac:7c:bc:
db:62:ac:ec:e2:f7:82:e3:ef:a0:c2:2a:70:93:86:d3:f6:61:
60:32:90:bc:fb:c4:ae:2b:20:3e:b2:92:d3:c7:bf:78:08:9b:
0b:2a:0d:74:ff:18:d6:56:c9:dc:91:b7:f1:ce:2f:a3:c8:f3:
fb:93:ab:a3:5f:b1:e4:e2:13:de:4e:84:af:a8:7a:b2:a5:87:
2b:71:5b:e2:e1:8a:1f:3d:9c:48:44:38:a3:be:ca:04:60:ee:
bb:75:a9:14:ea:77:c8:98:6d:73:dc:5c:f9:b7:ab:2c:7e:cf:
97:84:5d:45:54:40:c3:7e:bd:5b:99:7f:da:8f:3e:a8:7f:cb:
e1:9a:c2:b7:af:94:03:e8:9e:fb:d4:34:2a:07:06:23:86:08:
f0:8b:16:ba:ba:9a:99:01:0e:fd:a9:42:95:ec:2e:68:2c:70:
d8:57:e0:3c:8f:8f:3b:82:50:04:dd:2c:62:fb:2e:63:91:18:
fa:40:a9:20:2b:ed:dd:7e:46:fc:aa:56:5f:2d:cf:24:d3:4a:
de:40:ce:62:d1:c2:86:ac:28:c9:81:03:6c:60:3f:2e:5a:d3:
ae:7a:66:83:b8:49:7e:71:7c:4b:75:50:54:59:e4:02:c4:16:
f5:ba:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:40:17 2025 by rpki-client