
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108593c5-6d6d-4e44-b589-cbf5c661a884.roa
File: 108593c5-6d6d-4e44-b589-cbf5c661a884.roa (raw, json)
Hash identifier: Sb8yFwWXc5Gyysin0kHbARdAy1F9Q8GVhtAOooHD2ws=
Subject key identifier: FD:90:B8:AE:C2:F7:8D:20:5D:9A:FB:B1:80:5D:AF:17:B1:EC:C2:93
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1B8C7ACB1614D3211AE1E07FD8AAB73072C6B4F1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108593c5-6d6d-4e44-b589-cbf5c661a884.roa
Signing time: Mon 04 May 2026 00:20:05 +0000
ROA not before: Mon 04 May 2026 00:20:05 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d88::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8c:7a:cb:16:14:d3:21:1a:e1:e0:7f:d8:aa:b7:30:72:c6:b4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 00:20:05 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=b2bce2fcfb1b4588baebc2bde92faae2c69a7488b9bcda0935f4abb698935e9a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:de:a4:03:54:52:80:12:09:6f:2a:a2:11:
10:a9:7d:c4:6d:29:16:e6:c3:4d:7c:7d:85:fe:6a:
7c:f6:70:00:d5:5d:4f:95:4f:0c:b5:a3:1f:e9:4e:
59:fe:84:81:d2:92:b9:f0:22:b9:17:80:45:15:44:
57:33:74:4a:af:31:35:9c:b7:b5:81:62:d5:66:6d:
1b:99:f2:f3:38:e5:7a:2b:77:a8:8e:c9:c9:70:8e:
5d:51:3a:b7:28:87:9f:04:b6:4d:fd:2d:07:8f:1f:
96:15:45:18:79:47:c4:87:19:f8:7f:4b:68:97:6b:
97:3e:94:fd:48:10:92:0f:0b:84:45:5b:91:bf:d9:
92:47:47:27:18:d1:0b:3b:9f:a8:58:b1:2d:fb:fd:
f3:7e:87:4b:68:6f:bf:f4:c4:83:71:f3:26:3f:af:
f9:e8:fe:5d:7c:ff:bb:c0:24:49:4d:57:e7:59:24:
2f:bc:4b:53:00:8e:7d:19:52:c4:38:2e:49:c3:9f:
93:be:8c:ea:c0:c5:05:60:3e:b9:c2:03:b7:96:3d:
35:15:5a:5e:20:63:be:ff:2b:8e:29:f8:56:6b:ee:
f2:35:41:05:b6:fe:52:c1:35:22:b9:89:4d:db:61:
3e:85:49:c4:f9:7d:c2:0e:21:bc:aa:b5:16:d4:96:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:90:B8:AE:C2:F7:8D:20:5D:9A:FB:B1:80:5D:AF:17:B1:EC:C2:93
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/108593c5-6d6d-4e44-b589-cbf5c661a884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d88::/45
Signature Algorithm: sha256WithRSAEncryption
1e:e4:9b:ed:85:d3:e8:20:bf:1d:3a:65:96:35:fa:18:ee:89:
de:ec:2e:90:eb:83:06:01:1f:22:6c:42:69:f4:82:dd:98:1d:
b2:c4:1f:19:7c:fe:c8:ca:8a:8d:fa:ba:70:21:b8:31:29:3c:
02:36:97:d0:d7:90:9a:f7:d8:f2:a5:06:e4:dd:18:74:d3:67:
23:3f:c3:0d:fd:b1:2f:e8:6f:f3:d1:27:2e:96:53:eb:46:e9:
99:c1:7f:f5:e4:bc:2b:0b:4b:f5:ac:bc:ea:de:c5:aa:65:16:
ad:d1:56:c3:18:13:33:89:31:63:3b:4a:8e:a3:83:91:56:c3:
79:58:dd:bd:74:60:2d:5e:6b:4f:a8:9d:31:08:c0:7d:00:31:
6c:c2:87:8f:58:be:23:4a:c5:11:04:82:1b:af:0c:2d:92:51:
03:e7:16:47:38:db:70:f8:3a:a8:2a:ac:45:0a:f9:56:c7:59:
9d:96:c8:4f:8c:32:6d:c0:0e:4c:ee:81:f7:c2:d9:f6:52:95:
22:3a:af:91:e2:07:a5:28:16:dd:f4:49:93:b9:7d:43:54:41:
50:e9:09:96:8f:fa:9b:60:2d:36:72:f5:3c:7a:cb:cb:d7:7d:
ea:f9:5b:27:17:48:d7:e1:f5:06:b6:b5:fb:0b:30:0c:59:a8:
25:ff:2a:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:30:50 2026 by rpki-client