
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0d88c13e-24df-4121-82a5-5494fa549af1.roa
File: 0d88c13e-24df-4121-82a5-5494fa549af1.roa (raw, json)
Hash identifier: bVPFD5Q+yd3wvnO7IDVdPYhIs2TzrHJTkHtmQic+91c=
Subject key identifier: 12:1E:4F:AE:B8:B4:AA:A6:11:02:3D:82:39:3D:C2:11:79:21:5A:85
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3D625C70D2D1208BCB4F89E3FEE3D6A5C92A0E99
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0d88c13e-24df-4121-82a5-5494fa549af1.roa
Signing time: Thu 23 Jul 2026 09:00:45 +0000
ROA not before: Thu 23 Jul 2026 09:00:45 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3460::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:62:5c:70:d2:d1:20:8b:cb:4f:89:e3:fe:e3:d6:a5:c9:2a:0e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 09:00:45 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=0e8d6e5d33744e40300d23da5543af8d508da36e4bf635489fead6d412b323e4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:9d:78:dc:b0:b0:3e:96:cd:22:94:7e:46:
10:67:7c:68:d9:2f:c3:c8:d3:84:f0:d7:ea:0f:52:
13:b3:9f:b8:a0:a2:ce:68:e5:2d:0c:0d:d6:d5:2d:
fc:2b:f1:72:64:b9:64:90:62:80:f5:4d:cf:54:70:
d9:b7:4f:c7:27:3b:90:03:c7:b6:f3:b1:12:57:5d:
3b:51:2d:15:5c:5c:54:86:ad:55:7f:77:f7:9e:dc:
49:91:94:fe:5c:07:10:3f:f1:e1:49:24:4a:79:11:
71:ca:bf:1a:64:a8:53:79:0a:b9:62:97:22:da:f5:
42:31:bb:2d:f8:d8:51:ea:72:a0:ab:2c:fe:5a:04:
0f:7c:e1:fe:60:9e:7d:c7:81:df:2a:62:69:93:b8:
9f:e4:b4:50:e6:05:79:c7:14:e6:f2:1d:f9:9e:cf:
61:26:0b:88:bb:c6:4d:26:c5:ba:85:42:f2:1e:68:
dc:70:45:0a:ab:f9:f5:0e:27:f5:83:92:be:34:da:
70:8b:57:cd:68:a2:c2:cf:8e:e1:6e:9a:2f:5a:e7:
58:b8:ac:9f:d7:b9:39:22:da:f3:30:68:4c:ad:02:
46:b6:85:ac:ee:14:02:61:5e:77:de:f1:8f:ac:d0:
a8:e1:7d:bf:31:ee:34:d1:b7:7b:4e:f2:02:42:e8:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:4F:AE:B8:B4:AA:A6:11:02:3D:82:39:3D:C2:11:79:21:5A:85
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0d88c13e-24df-4121-82a5-5494fa549af1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3460::/44
Signature Algorithm: sha256WithRSAEncryption
4f:bb:f6:41:5b:8c:18:35:54:0e:78:65:ba:f0:33:7d:c4:cf:
28:4b:3a:20:a1:f1:87:bb:31:79:60:2e:8a:0e:9b:c3:8d:f2:
ff:b0:b1:73:4b:26:cf:3f:04:c6:a0:9e:bc:53:73:28:de:1b:
2f:34:05:8e:25:1a:d1:99:86:84:c0:a4:32:74:88:2c:43:b3:
9a:ad:f5:aa:62:21:eb:4f:34:34:9e:07:d9:08:49:4a:75:fc:
48:9c:e0:f7:22:7c:35:3b:19:ba:5e:98:c5:ba:65:27:a0:a5:
01:39:3e:aa:68:f9:87:a7:93:b5:53:a4:ef:0e:18:2a:63:ec:
9e:85:15:84:90:4c:eb:51:2f:b5:cf:ee:68:f1:74:56:00:8a:
6b:4d:0b:2e:89:bc:a7:8a:47:6c:19:d2:73:98:13:e6:21:60:
1f:8f:0e:48:e3:7e:25:49:dd:cb:13:18:40:26:f7:2e:44:2d:
a8:c7:e4:4b:68:c2:56:83:8f:46:18:98:c0:4f:47:e3:a4:8b:
16:c3:1f:49:f2:15:50:87:43:a8:19:93:3e:f5:47:59:0f:a9:
e2:b3:06:78:97:5f:2f:85:1d:b4:a5:d6:7d:42:30:ee:69:10:
23:b1:a4:cc:26:1c:1a:5c:ca:f8:e7:73:21:6a:3b:9e:f1:c1:
60:f2:67:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:36 2026 by rpki-client