
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0bf931b1-f41e-404e-8640-8bb7c692ca73.roa
File: 0bf931b1-f41e-404e-8640-8bb7c692ca73.roa (raw, json)
Hash identifier: Sra6P2URvx07oiE6pmMmOVTrBvD3vA74dxxEGwOvhX4=
Subject key identifier: 1F:F9:41:45:E7:24:72:55:F3:A2:D3:ED:FF:0A:6A:90:0B:95:D6:02
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4AEDA74E9EF5C5D9CE0FBC45D3DE95D530EB4326
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0bf931b1-f41e-404e-8640-8bb7c692ca73.roa
Signing time: Thu 23 Jul 2026 07:41:51 +0000
ROA not before: Thu 23 Jul 2026 07:41:51 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3640::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ed:a7:4e:9e:f5:c5:d9:ce:0f:bc:45:d3:de:95:d5:30:eb:43:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 07:41:51 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=c1ef0a8487e96a639040d8a6c81c98d80c19a4d4988beef6ab08d140ba805dd0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:7e:f3:f7:29:69:be:eb:01:67:6c:cd:2a:
99:38:23:38:fc:cf:a4:2c:1a:9c:82:28:55:7c:f3:
08:f3:a3:a9:51:ad:0f:e9:b3:be:c9:b2:1b:58:4f:
e2:91:d8:3e:43:9c:5e:5e:b6:2e:8f:f0:b6:79:aa:
7b:56:22:b0:cf:f6:ab:d3:ab:4d:93:34:b7:9e:9f:
0c:90:9b:f6:c5:a4:10:c0:9c:7e:13:77:53:ba:d3:
e8:34:6c:90:9f:41:2a:b2:ea:25:ec:37:4a:09:00:
1b:90:7f:d2:da:12:a5:7a:f2:07:f6:7e:a4:4a:69:
cb:93:dd:a4:92:dc:46:81:ae:aa:4f:22:2f:67:b7:
dc:ce:02:3d:83:51:11:26:5e:5c:97:33:3d:66:e8:
8a:da:17:da:25:bb:fb:cf:a6:49:c9:47:0c:77:38:
4f:87:f7:60:23:dd:e4:ed:45:5c:a8:d0:2e:62:c6:
f3:33:f7:a4:bf:48:a3:a8:a4:0c:e9:43:4e:44:65:
09:a6:d4:7d:d2:1d:66:33:96:95:9e:76:04:ad:64:
b5:53:b5:96:a5:ed:08:86:c8:c3:7e:af:a6:28:36:
6d:23:81:43:f2:6e:5f:7b:d0:b0:a1:e9:be:29:02:
bc:b8:b2:e1:77:11:1f:53:6d:ae:f0:e1:2b:6c:cc:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F9:41:45:E7:24:72:55:F3:A2:D3:ED:FF:0A:6A:90:0B:95:D6:02
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0bf931b1-f41e-404e-8640-8bb7c692ca73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3640::/45
Signature Algorithm: sha256WithRSAEncryption
11:06:c9:50:6a:bc:f8:d2:a4:b9:5f:b8:b8:e4:d7:4f:e3:13:
74:f0:3a:85:5e:52:42:8f:1d:cf:23:aa:e5:54:8a:4e:2c:b6:
88:94:aa:9e:f3:a1:d0:ff:31:3e:0c:fb:cc:18:14:3d:42:3d:
00:85:88:be:dc:e4:4a:54:1b:b4:3b:d4:cf:be:79:e7:bb:f1:
5c:12:ab:92:8c:07:67:ab:30:b0:ae:c2:7f:cf:f4:e2:c8:09:
66:3b:61:b1:8a:b0:57:48:91:64:28:0a:3f:f9:a7:e7:90:af:
3a:69:6e:03:6c:af:8f:c1:e4:43:f4:e1:03:87:5e:2c:5f:3d:
d1:be:a9:a3:3c:5e:59:10:0d:a8:68:3f:b9:4d:de:91:00:41:
78:39:58:fb:5b:90:68:21:2a:80:77:1c:82:fe:df:3e:ce:23:
5e:bb:ab:0b:3f:7a:6a:e1:9c:48:90:50:6b:35:22:f0:bf:81:
80:d4:c8:e7:4e:a9:a3:30:9b:29:75:60:e5:04:97:84:fa:41:
a1:80:a7:c5:11:dc:bc:5f:53:2b:2b:bb:a0:a6:7f:d2:40:32:
39:e1:78:08:51:bf:0d:5b:fe:95:1e:4b:bf:1d:ce:f3:fc:7a:
80:1e:81:f2:2b:a6:59:11:35:ba:15:47:d3:83:08:a0:e0:61:
bf:3c:98:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:21 2026 by rpki-client