
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1f38921e-479d-4f3f-80d5-876325f7be0b.roa
File: 1f38921e-479d-4f3f-80d5-876325f7be0b.roa (raw, json)
Hash identifier: RWd3S6WVFGgqjr1smW6c9N+tJgw29xZi6fduHpAxpX0=
Subject key identifier: 5D:77:6F:61:12:FF:4D:D7:0F:8F:D2:9D:41:BD:78:ED:25:60:20:8B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4B381F6462C49C529EEF3F408FD6F86EFBB209D8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1f38921e-479d-4f3f-80d5-876325f7be0b.roa
Signing time: Mon 04 May 2026 02:50:05 +0000
ROA not before: Mon 04 May 2026 02:50:05 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:38e8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:38:1f:64:62:c4:9c:52:9e:ef:3f:40:8f:d6:f8:6e:fb:b2:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 02:50:05 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=e89ca8e29f24d49b99884cb3298fa8e57a67b9f1f4f3059c0b93f3f8bd29b7cc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:0e:4d:13:ff:1f:48:c6:38:9b:d6:a2:06:
42:09:d1:db:9c:68:be:41:83:99:08:e7:e5:2d:69:
0f:46:31:98:eb:d6:b6:e1:ad:42:aa:23:f1:a6:b1:
68:d5:d9:bd:be:36:ef:28:d1:dc:90:bd:a8:fc:c0:
e5:e5:5b:09:e3:5a:7c:2a:30:c7:e5:db:a8:f7:16:
62:2c:5b:e9:68:de:a8:f3:c5:81:d1:b7:12:76:af:
bd:67:2c:c7:bf:40:1a:b5:76:06:91:9c:fc:1e:d6:
06:35:50:7b:6a:5e:56:0a:ce:01:99:d4:8b:de:4d:
85:1a:01:9f:ff:fa:68:ce:3c:a0:86:f3:4e:51:c1:
78:2e:e9:28:dd:1d:95:59:fe:38:87:67:67:1d:da:
b2:11:5d:9b:22:e3:8d:65:33:6a:4f:32:54:7e:13:
d7:10:8d:ed:fb:69:5e:37:92:8b:32:b6:db:21:bf:
99:18:5c:e5:64:88:d2:8c:a9:c1:61:5f:36:de:ca:
a1:50:99:d0:2f:5b:04:a9:e3:6f:d0:24:b3:ec:60:
ec:5b:ef:69:45:0c:76:7e:2f:68:6c:f3:fc:2a:a7:
c4:4f:79:ab:12:30:cc:87:b5:74:f2:dc:83:a7:57:
e3:56:84:e3:d5:fd:34:39:07:ef:9c:f3:50:6f:f6:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:77:6F:61:12:FF:4D:D7:0F:8F:D2:9D:41:BD:78:ED:25:60:20:8B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1f38921e-479d-4f3f-80d5-876325f7be0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:38e8::/45
Signature Algorithm: sha256WithRSAEncryption
77:47:f9:39:0e:2d:15:d3:51:69:e1:c2:aa:cb:d3:2c:5a:d5:
cb:34:e3:3b:c6:44:05:57:16:3e:99:b6:34:e7:a8:eb:d3:ce:
83:6a:df:67:f9:59:c4:f9:31:27:43:db:1e:fb:6e:a2:05:eb:
d6:dd:38:29:a9:91:38:44:67:f3:4a:c1:07:d1:fe:89:fa:8f:
e0:96:cc:28:4d:be:09:8c:30:c5:67:2f:6c:6d:f8:02:42:dc:
14:08:54:53:0f:48:8e:aa:75:b1:a5:95:ab:e1:98:05:4b:e6:
fc:44:b5:29:74:ab:19:b0:84:94:e3:f2:0b:c4:51:d9:44:d5:
95:d8:e7:5c:e9:69:a7:63:c4:21:d5:bb:c3:5a:9e:ac:aa:7b:
da:65:de:c2:7a:7d:92:00:29:ad:05:98:f6:2a:cd:b3:3b:47:
5f:33:e4:72:06:b6:a9:2b:3c:2e:da:50:26:9c:6e:2b:19:6d:
ef:52:3c:ee:2c:ce:d9:ef:85:9b:1b:af:2c:2c:67:26:66:23:
41:b5:62:71:ff:83:58:df:42:a9:11:0b:b6:d9:0c:09:b5:46:
7f:5e:cb:fe:78:58:79:c2:6a:ba:0b:f8:0a:3e:7b:1e:7f:74:
85:84:86:22:bb:9f:32:d0:9e:f5:84:56:b5:4e:8a:c2:ab:bd:
c4:ba:94:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:21:31 2026 by rpki-client