
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0447d04d-de30-4630-8e84-24b99544f35a.roa
File: 0447d04d-de30-4630-8e84-24b99544f35a.roa (raw, json)
Hash identifier: f0QYRpPQ6knPb4RF3ONx1yZe0o+ykyZa3e4aDnJ1GQU=
Subject key identifier: 21:3A:72:F3:69:E2:BD:DD:18:32:30:47:C6:AD:5F:1E:12:E6:28:87
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3C485C318C235D333F252163068D6E5324C3527B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0447d04d-de30-4630-8e84-24b99544f35a.roa
Signing time: Wed 22 Jul 2026 03:31:25 +0000
ROA not before: Wed 22 Jul 2026 03:31:25 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2484::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:48:5c:31:8c:23:5d:33:3f:25:21:63:06:8d:6e:53:24:c3:52:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 03:31:25 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=f346c0214d6e0a2bd017eb54aa636953cd5934f3462547e7ae5157265e8cf871, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:cd:08:f5:0d:c7:ac:61:7a:1e:2b:44:98:
9a:83:27:6f:3e:ac:dc:2d:b3:12:4c:ee:00:19:ef:
f7:70:3d:57:eb:c4:30:64:5a:ac:84:19:33:79:0a:
53:66:7b:8c:2e:02:48:4f:7c:92:c2:d2:45:05:43:
2a:3e:5f:23:5a:0a:02:d8:00:e7:00:79:3c:53:a0:
68:f7:d3:38:63:76:ca:9b:f2:7c:be:85:ac:05:6b:
88:d2:a0:9e:fe:78:7d:28:c1:18:e0:d6:3b:2f:8d:
07:64:1e:81:ca:6a:a2:8d:b2:af:06:77:6f:11:5c:
53:12:d0:02:b2:fe:5d:46:b6:28:17:6a:53:fb:ad:
27:84:1f:93:a0:51:f8:68:28:a3:83:b2:36:b2:26:
b1:a9:89:3d:e8:db:5c:e8:e4:b5:96:cf:d8:8d:07:
4b:58:af:16:a1:57:0b:31:18:8d:d1:4e:1d:04:33:
5c:07:ac:87:da:a4:36:51:84:89:7c:aa:1c:8c:a3:
4e:37:0c:0d:65:73:2e:02:e8:d7:87:69:4a:ac:4f:
45:14:b8:d7:a9:7c:22:1c:4c:8a:20:93:ca:05:35:
5a:52:89:d8:2a:5a:af:2b:5f:07:2f:e8:d0:5c:00:
e2:d4:e3:e1:c0:6c:7b:99:87:b2:ff:73:8a:b7:47:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3A:72:F3:69:E2:BD:DD:18:32:30:47:C6:AD:5F:1E:12:E6:28:87
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0447d04d-de30-4630-8e84-24b99544f35a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2484::/48
Signature Algorithm: sha256WithRSAEncryption
21:e8:31:cf:2e:6e:8b:46:41:ae:f4:3c:a4:a9:ee:c6:a3:62:
67:23:f3:4c:2b:f6:e9:94:74:59:de:39:06:40:3c:d0:7c:9d:
12:2f:26:05:bc:a7:8a:a8:2b:74:cd:d5:7d:9a:41:a0:57:02:
01:4f:43:17:48:ed:a5:a7:25:09:47:45:04:75:4a:1e:f0:c4:
94:e7:58:0b:a7:28:3e:93:ee:a6:41:41:98:48:f4:4f:8a:40:
e3:9c:c9:01:1a:ae:f0:89:4a:1b:a7:ad:c5:7a:d9:e0:5e:50:
8a:3d:32:7d:5f:2c:32:7c:b8:a9:07:4e:fc:ba:c4:66:0f:52:
c0:8a:46:cd:8c:20:6e:91:14:2b:6f:a0:18:bd:bb:5b:7a:a4:
9a:d8:77:65:49:ca:58:19:75:e0:f2:08:ff:81:d4:37:a8:a9:
a2:7a:76:c6:60:2c:0e:e7:7f:af:81:a2:15:73:97:c1:9d:fc:
d6:c7:2a:2e:db:72:3b:c9:59:a9:af:a3:d3:45:aa:34:76:cb:
08:99:53:27:5f:f5:fe:85:16:b8:f7:a5:b5:ce:29:7c:75:73:
51:ea:9c:1c:60:fa:42:b6:ee:9c:ae:db:76:ee:9d:f7:77:da:
16:6d:8c:bc:76:ec:76:4a:44:0d:4c:ce:6d:1f:be:f4:f2:28:
c8:ec:cf:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:42 2026 by rpki-client