
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e08fd305-5ea1-4464-9b95-c3399cbf7131.roa
File: e08fd305-5ea1-4464-9b95-c3399cbf7131.roa (raw, json)
Hash identifier: tGmylz5aOZRKWTGX9m5UxgqaPysWYW8fkx18gKEYUCQ=
Subject key identifier: BA:05:13:CD:7F:48:9B:36:6F:2E:60:7D:25:BC:86:2A:53:15:9D:04
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 32EC2E5E91D6FDFCB285DC9B00E711E896AB08FE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e08fd305-5ea1-4464-9b95-c3399cbf7131.roa
Signing time: Fri 31 Oct 2025 06:25:35 +0000
ROA not before: Fri 31 Oct 2025 06:25:35 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3fa0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ec:2e:5e:91:d6:fd:fc:b2:85:dc:9b:00:e7:11:e8:96:ab:08:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 06:25:35 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=033ef0d65cf3ebebeb831b07478b917be65aa88b8c560e14f67807b4439eedd1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:8a:13:d9:98:e3:12:e8:20:f4:47:09:3b:
5a:31:ad:9c:44:c4:d5:33:07:90:d6:43:80:bb:bb:
34:2f:15:8c:48:17:41:61:60:73:64:69:21:3d:c0:
dc:bf:6f:31:78:7b:01:a3:a3:ad:18:88:9d:88:a4:
00:7e:a0:98:07:12:7e:ce:26:37:01:68:1e:2a:57:
ae:d3:c3:6c:a2:d4:5c:18:1d:f6:b3:9e:8f:35:bd:
e2:c9:ad:da:b2:54:b9:9a:c0:18:9c:52:ea:fd:4c:
97:c6:39:90:b0:1d:13:d9:55:26:1c:ac:5c:b1:d8:
7f:2e:82:2e:ec:3b:bf:b1:96:37:fe:ae:f6:82:94:
c8:54:ef:df:55:49:c4:f3:88:2e:d6:0f:0f:55:e8:
32:fd:b6:20:64:cd:e5:5e:cf:3f:24:aa:90:48:d9:
7f:99:1f:a7:e5:94:90:5c:bb:b9:41:a4:96:9d:29:
d9:a0:3e:40:79:29:ca:ef:fb:e2:d3:33:0d:42:97:
8f:88:e5:e5:8c:55:21:f6:00:de:b4:ff:70:b8:57:
35:6e:36:b6:5a:64:28:c6:1c:09:09:9d:31:7a:e9:
25:76:57:e0:ce:07:70:92:22:f6:11:92:89:7f:45:
e2:05:ee:af:07:11:18:e2:0e:5e:5b:82:15:0b:0c:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:05:13:CD:7F:48:9B:36:6F:2E:60:7D:25:BC:86:2A:53:15:9D:04
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e08fd305-5ea1-4464-9b95-c3399cbf7131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3fa0::/45
Signature Algorithm: sha256WithRSAEncryption
8d:75:9c:a5:8c:92:b2:0b:75:91:ff:7d:95:e4:76:ae:3d:e5:
17:a2:ef:eb:f2:c6:10:64:62:9a:bb:b9:a6:9e:5b:85:4d:8f:
fa:d8:fb:22:c2:9b:78:39:8a:7e:63:83:a3:a0:ca:77:a8:78:
3a:f1:d3:f5:dc:9a:df:ba:7e:4d:c0:94:b1:60:b0:f8:86:17:
94:52:3c:ee:76:99:1a:dc:bb:37:38:e9:58:5d:c5:5c:23:7f:
85:f3:66:c0:2a:ab:9c:4e:74:57:32:ee:4a:e8:55:53:f5:24:
e2:3c:95:0e:28:c9:97:5a:2a:09:f4:12:bd:d1:29:3e:eb:73:
d1:0a:d1:89:7c:16:5d:cf:6f:56:93:3b:d4:3e:79:85:22:5e:
ef:86:39:46:3f:d4:0f:3b:ce:73:56:55:bb:d8:f3:39:76:57:
86:bd:35:2e:8c:9a:d7:60:e2:50:cf:14:b7:f6:61:62:61:f2:
7b:36:fc:df:30:b9:a3:3c:0b:71:ea:c8:d7:4f:98:bd:8b:29:
17:ec:ba:3a:73:7a:9e:da:87:2a:fd:fc:19:e3:f3:94:66:53:
33:a5:b4:af:12:4a:0f:19:75:1a:c0:49:7d:8f:94:82:a7:36:
5b:03:a2:0a:2d:94:63:47:d1:fd:1b:3d:30:54:84:f0:83:47:
41:2a:2e:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:56 2025 by rpki-client