
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15d89f2c-db62-4e1e-8adf-7f680a7418a5.roa
File: 15d89f2c-db62-4e1e-8adf-7f680a7418a5.roa (raw, json)
Hash identifier: Rg3p6i19IzbjjFzmwkhS/DuYv8eo3eNkY5YkTcbgNf0=
Subject key identifier: 52:60:E1:24:9B:06:75:6D:7B:9C:BB:A5:23:17:EF:78:5E:7C:C2:0D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7215EAE587B6B364B474CB11EB7CA458D4389BE5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15d89f2c-db62-4e1e-8adf-7f680a7418a5.roa
Signing time: Thu 23 Jul 2026 02:11:53 +0000
ROA not before: Thu 23 Jul 2026 02:11:53 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:15:ea:e5:87:b6:b3:64:b4:74:cb:11:eb:7c:a4:58:d4:38:9b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 02:11:53 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=5313a407ec33be8b1fec49a9834bc017e8ecdadf5a810ba4c353ace6ed3a7b8b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:14:1c:a1:22:49:f6:58:89:72:1e:db:55:
75:61:98:c4:d6:05:f0:b1:cd:1e:54:e2:dc:bb:fc:
ed:d8:dd:a9:4a:9e:10:28:64:40:a9:b2:4e:3d:3e:
60:e1:31:52:af:03:0e:06:0f:c5:c6:e8:67:be:9d:
1a:91:d1:ff:ec:2d:79:42:c5:a2:2e:3b:09:ba:d6:
97:3f:27:46:1e:6d:e5:81:89:b6:27:41:57:a7:09:
05:cd:c5:fc:53:77:de:5f:e2:9f:93:c5:d6:9f:13:
72:72:8a:05:10:b7:7b:ed:6c:fb:c8:bd:dd:1a:73:
93:33:c3:b2:95:d7:5d:0e:78:7f:dd:05:67:5e:b8:
35:71:97:1a:40:aa:03:82:c3:3e:18:09:05:d6:c6:
a0:48:79:64:f3:47:2b:4e:5d:7d:79:1f:2f:a4:f1:
51:08:fc:50:29:b5:66:0e:06:16:74:82:51:b7:24:
ea:77:6a:d9:df:5d:91:dc:a2:1c:00:d7:29:72:df:
59:80:9b:29:8c:d9:53:9d:d5:e2:9a:dd:da:50:92:
3b:db:56:e7:85:5a:57:82:49:71:26:6a:60:48:09:
88:e1:4a:5d:50:e2:77:30:e9:15:46:3b:f4:09:0e:
3a:62:60:ac:7e:db:14:72:05:92:57:e0:bb:06:3d:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:60:E1:24:9B:06:75:6D:7B:9C:BB:A5:23:17:EF:78:5E:7C:C2:0D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15d89f2c-db62-4e1e-8adf-7f680a7418a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f60::/44
Signature Algorithm: sha256WithRSAEncryption
71:9f:be:7e:0a:6b:56:ed:cf:42:9a:7f:87:8a:56:95:b5:01:
58:ee:43:c2:be:3d:d8:25:30:4a:2c:17:e8:fc:30:cc:a5:b6:
d4:15:e3:9c:06:5c:a5:b7:c9:49:75:7d:b0:c0:2f:ea:e5:ed:
f6:35:10:0f:71:e6:f0:6f:09:7a:66:6e:72:21:db:7a:b4:f5:
dd:db:ea:7d:fd:92:88:8f:a1:a9:47:9d:ed:bb:9a:1a:bb:d8:
4f:53:8b:c5:16:19:f2:25:42:93:71:33:6e:36:3f:e0:25:f6:
cb:d3:f0:36:f3:a2:8f:6f:96:e7:a1:67:13:5a:86:29:60:6a:
e8:ed:13:f2:d7:fe:31:18:0e:21:3e:af:0e:53:a1:32:07:4a:
83:5a:cc:aa:80:49:99:19:f2:47:f7:7b:72:3a:48:41:a0:ab:
d4:4e:77:f9:13:32:f2:2f:60:f2:f1:e9:a8:64:89:23:ef:b1:
12:c6:cc:6b:65:6d:78:83:be:e0:f3:6a:b2:3e:1a:f6:c1:ef:
68:29:9c:5b:77:6e:89:f8:d7:36:ec:85:ff:e2:94:e9:ef:e5:
7d:ce:62:25:ee:06:81:43:fa:18:7c:6c:e6:d2:13:f0:f2:15:
84:ad:a7:60:56:2e:c7:a5:6e:a5:d7:98:c4:e5:84:fb:e0:5b:
67:20:a3:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:05:47 2026 by rpki-client