
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e03a2ba-8092-4fc6-b569-a017ca83a323.roa
File: 0e03a2ba-8092-4fc6-b569-a017ca83a323.roa (raw, json)
Hash identifier: 88/UDhXa6u5LaiDjJ7e0BIQvI1TPteT2kHMdUwOjdqI=
Subject key identifier: 08:22:6E:BF:E8:D2:94:4E:7A:03:7E:64:09:B6:0A:23:8E:FF:E6:7C
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 7854D401DCC8E822896971C55C9AAAEC4E738AA6
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e03a2ba-8092-4fc6-b569-a017ca83a323.roa
Signing time: Fri 31 Oct 2025 01:30:17 +0000
ROA not before: Fri 31 Oct 2025 01:30:17 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 40045
IP address blocks: 2605:9cc0:c02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:54:d4:01:dc:c8:e8:22:89:69:71:c5:5c:9a:aa:ec:4e:73:8a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 31 01:30:17 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=3afc5253a784af42e05d8a06075f53e0ca57dff025c34c71e92e3bb2354de874, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:92:1d:81:fc:70:89:06:ea:98:70:93:8f:
ff:83:7d:77:ae:ee:06:24:a5:40:8d:80:e4:37:35:
1f:3a:56:0d:85:7d:32:7f:8b:64:32:30:a8:c1:ae:
1a:79:21:ff:6f:a3:1b:19:46:a9:42:c5:7a:7d:46:
fd:6d:58:ec:f8:27:03:87:78:8c:0a:51:5a:fc:8e:
ba:38:7f:c6:e5:12:18:12:74:a4:c8:5b:00:21:33:
ad:be:6d:1c:bb:e2:a8:ad:25:30:35:95:82:5a:3a:
62:76:f9:9a:c9:c3:0c:0c:86:d7:d3:c0:02:bd:93:
a1:f2:f9:d5:12:f5:8b:e4:9e:3d:63:e7:30:63:a0:
62:39:c6:2a:9c:e4:19:ed:e6:ba:8a:a1:88:cf:c3:
2e:2d:be:c3:94:e6:fb:46:88:6d:8b:c6:b9:bb:e9:
ff:71:26:8f:8a:1d:a9:1c:b0:da:a7:68:18:56:13:
e6:9e:28:d9:cc:46:1c:21:33:3a:25:c1:93:0a:4c:
d5:55:0f:92:be:2c:10:31:fd:72:7c:82:46:aa:7b:
19:1f:71:01:b4:ef:7b:ee:a1:00:6c:ed:a3:3f:15:
0a:5b:cd:12:95:e8:b4:66:d5:b5:b8:bb:f3:64:94:
3b:c0:af:32:b8:96:89:a1:3b:0c:3e:61:43:38:19:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:22:6E:BF:E8:D2:94:4E:7A:03:7E:64:09:B6:0A:23:8E:FF:E6:7C
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0e03a2ba-8092-4fc6-b569-a017ca83a323.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c02::/48
Signature Algorithm: sha256WithRSAEncryption
9a:37:dd:50:1e:6f:f5:61:78:ce:16:30:bc:32:f5:e1:b3:62:
ea:b8:c3:7d:73:c7:a3:aa:50:9e:df:55:5b:8d:8a:f3:85:10:
e3:41:d8:64:38:19:37:7f:52:a7:39:ec:e9:41:6d:6e:44:20:
83:6f:f9:bf:5f:72:03:4e:17:0e:ce:6e:e8:02:2a:00:51:62:
43:e5:33:d0:b2:aa:a3:ce:5a:2d:84:02:f4:1d:4e:39:f7:73:
83:12:11:91:fe:64:61:ef:f3:fa:95:21:4c:8f:08:2d:6d:17:
29:f2:ab:90:e7:e7:b9:8c:93:2b:ce:36:5f:b7:a7:83:fa:a4:
f9:9b:90:c1:be:1d:3a:69:36:82:ad:89:46:07:8f:a8:59:cb:
f9:0b:a6:69:fd:0f:6d:84:67:77:88:bd:e7:79:6b:d8:5e:23:
69:07:a2:7c:b0:de:0a:d2:78:a6:96:62:c1:ac:76:b4:14:e8:
3f:7f:32:8d:77:95:0b:cd:38:3d:5b:47:97:5e:6d:56:ce:d3:
ee:33:cf:f1:bd:be:23:c0:d3:82:bf:b2:75:ae:6d:7e:bf:21:
90:cc:69:63:af:5f:2a:e5:99:43:19:56:71:6a:39:89:5a:f2:
3a:6c:32:b8:00:af:70:36:ea:71:42:08:69:a7:5b:e5:ea:4f:
6d:4c:b5:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:18:41 2025 by rpki-client