
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16d8fcb4-296b-4d95-b9a2-76e921514c67.roa
File: 16d8fcb4-296b-4d95-b9a2-76e921514c67.roa (raw, json)
Hash identifier: JJO82ha4bWwJKRUdvlwlbFoPjyHtR6b8ZYjoziXRl5I=
Subject key identifier: DF:EF:D1:31:25:91:F9:B7:7C:94:5B:69:7D:06:F1:89:DC:E6:92:BD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 052EEFDA7FA5377AB0AFE6F6AEB74C5421A025D3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16d8fcb4-296b-4d95-b9a2-76e921514c67.roa
Signing time: Thu 23 Jul 2026 11:20:47 +0000
ROA not before: Thu 23 Jul 2026 11:20:47 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2d30::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2e:ef:da:7f:a5:37:7a:b0:af:e6:f6:ae:b7:4c:54:21:a0:25:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 11:20:47 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=8e921e16aa7175f22ec60b0519e704c73c65981eea5c15c02d390777170c5fe3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:9c:8f:59:be:69:e0:eb:55:45:55:c6:65:
7b:dd:99:3e:55:ad:73:e5:8a:74:fd:5c:a8:92:46:
7b:5c:5e:d2:bd:f4:97:0c:02:5a:95:e5:53:75:90:
d4:a7:65:ec:a1:2a:b9:d1:ed:50:10:23:1e:10:4d:
12:ec:7f:b7:38:46:12:49:e0:dd:10:72:cc:3c:26:
4f:e0:e2:0e:5b:5d:da:cf:d7:c8:53:69:4d:dc:0f:
2d:b1:49:7b:cc:33:b3:42:0e:09:8b:e1:72:b8:65:
9f:63:a1:96:c7:93:2d:e9:d7:04:72:e2:51:a9:ef:
04:de:4f:f7:b8:e7:ac:8c:25:74:3b:7a:11:4a:8f:
0f:05:e9:20:24:93:7c:24:ad:e8:39:a2:e0:6e:57:
c0:00:b0:9c:b2:36:71:e7:02:82:df:7e:c2:4b:be:
dc:d0:b4:fd:bc:3b:83:f8:ce:ab:36:86:81:04:10:
0e:39:f2:d7:68:21:5e:7c:d1:d8:95:e0:b5:4a:e7:
16:87:02:7f:09:79:9d:9e:18:7a:63:2b:77:96:94:
99:24:8d:de:c9:ca:d3:6e:df:5f:bf:8d:6c:ea:af:
55:84:06:cd:d2:e3:8a:77:7a:36:bb:03:4f:0f:a8:
2a:3a:91:05:fa:e6:ac:e3:ce:49:6d:ff:c6:a4:5f:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:D1:31:25:91:F9:B7:7C:94:5B:69:7D:06:F1:89:DC:E6:92:BD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/16d8fcb4-296b-4d95-b9a2-76e921514c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2d30::/45
Signature Algorithm: sha256WithRSAEncryption
88:49:b7:4a:f3:33:64:fb:f0:39:55:47:db:a9:f5:b8:c1:0b:
ea:19:94:72:4a:77:4f:0b:fe:bb:aa:3a:41:4d:dc:ae:6e:69:
b9:c1:cc:48:6a:81:c4:34:89:aa:14:84:f8:68:8d:66:67:1c:
78:73:a1:55:a8:bc:08:09:b8:3b:46:3a:33:dd:ec:98:4e:89:
27:d8:7e:26:19:13:b9:7c:7f:0a:f2:7d:94:ff:5d:c6:84:c6:
0f:e5:29:91:09:5c:fc:50:92:47:50:fd:bf:38:ef:96:82:c5:
50:e0:56:39:7f:e9:0d:2f:3c:9f:48:f3:8b:38:d9:43:9a:b3:
45:6b:ef:ec:c1:13:51:ab:13:55:2e:91:dd:d4:bb:85:c1:8f:
a3:23:f0:76:4f:a8:6a:e4:ba:68:5b:25:3d:58:aa:fd:40:e9:
7c:14:1c:4f:cf:50:36:45:b4:fa:5e:cb:2a:8b:81:8b:cb:fe:
00:5b:d9:17:51:ed:60:46:df:a6:48:d2:1d:e2:fb:a4:8c:ff:
a1:49:cb:ae:ba:0e:54:35:45:3d:00:e0:76:d2:c2:7b:b2:bd:
84:dc:eb:ae:75:67:50:49:b7:30:24:66:06:d3:e7:63:b6:af:
ef:7b:6c:b6:cc:9a:c8:41:f4:d7:39:e9:fa:2f:d6:15:58:68:
e7:c0:c0:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:45 2026 by rpki-client