
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21432dda-6a83-4719-ae81-009538b33b88.roa
File: 21432dda-6a83-4719-ae81-009538b33b88.roa (raw, json)
Hash identifier: Qrn17rJUjo5LH5ciaJYpzpRQ4Y2jS4uM3nalYqsoocg=
Subject key identifier: 18:29:DA:CB:89:63:45:3B:F0:5F:C9:E2:91:D4:DE:76:60:48:95:C8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2EFBEEA8D8B097D50587B24E214A05DF017F0D43
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21432dda-6a83-4719-ae81-009538b33b88.roa
Signing time: Thu 23 Jul 2026 02:31:44 +0000
ROA not before: Thu 23 Jul 2026 02:31:44 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d16::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fb:ee:a8:d8:b0:97:d5:05:87:b2:4e:21:4a:05:df:01:7f:0d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 02:31:44 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=3c866c166d3f3d27118958df3e2a261f4517279701c054e1b65f87645f2900e3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:e8:0a:aa:d8:af:d7:01:d5:e3:a9:37:d1:
82:bd:e8:21:42:af:bf:f1:d3:c6:c9:ac:69:24:02:
b5:67:ed:cc:9b:e9:02:f4:02:dc:ca:ce:e5:18:b1:
f5:4b:e6:10:79:56:2f:17:37:9c:41:76:7c:74:b0:
47:fd:fe:70:01:1d:bd:b5:65:32:31:ab:13:81:c7:
30:7e:79:51:3e:4b:b8:38:d0:38:c7:05:79:b1:b3:
9f:61:dc:e7:da:73:3f:90:f6:9a:ed:20:61:a7:96:
d9:72:64:14:3f:dd:24:cd:43:d0:0a:b5:d4:e0:67:
f7:8a:53:7c:f3:57:da:44:7c:2b:3e:19:bc:2e:d5:
0b:9f:47:d0:22:07:e9:6d:5e:eb:bd:c2:41:54:cc:
c3:cb:76:d3:b7:1b:f0:8a:0f:cc:52:57:a3:9e:68:
54:42:63:2f:2b:10:93:ed:4d:d2:de:ab:c3:2f:a0:
be:6a:b0:fe:82:2f:ce:e7:7a:a5:68:87:05:c5:2b:
16:fb:d4:5c:0c:20:84:1c:b4:49:ec:14:3d:3b:bc:
38:30:b1:d4:83:05:52:c4:5d:4b:4f:45:86:d7:ef:
8a:5b:cc:0e:76:22:96:b3:ea:a8:ec:e0:52:a9:2d:
09:ea:8c:38:8c:e8:30:88:1c:6f:08:cb:75:a5:03:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:29:DA:CB:89:63:45:3B:F0:5F:C9:E2:91:D4:DE:76:60:48:95:C8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21432dda-6a83-4719-ae81-009538b33b88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d16::/47
Signature Algorithm: sha256WithRSAEncryption
14:bb:03:d2:1a:b6:1d:bb:f2:4c:56:54:62:e9:39:50:2d:60:
0b:d2:96:61:a0:3a:42:91:19:45:5d:e5:fb:73:c7:33:c6:b9:
c2:f5:93:1f:15:f6:44:f6:ab:38:37:49:08:0a:66:84:25:8a:
2c:1c:06:de:80:ea:f3:4f:e5:ae:a7:cf:98:9b:e8:a5:0e:b3:
ef:3c:3c:de:af:b1:31:73:42:7b:16:76:53:ac:06:b4:4b:a3:
11:fc:3c:40:38:17:77:12:be:d9:6d:94:53:c1:7c:df:4e:20:
e2:d5:03:01:b8:4b:ba:b4:54:17:6b:0a:52:4c:6b:df:65:42:
10:25:7a:b6:c1:ba:74:1b:59:34:1b:97:2f:41:68:43:de:9e:
d6:54:1f:ad:f4:68:3d:92:69:80:f5:4a:32:5c:06:da:fe:bf:
57:a3:57:b2:17:27:31:fb:3e:db:44:7f:58:a4:a5:a7:5d:50:
64:06:9b:75:02:12:d6:89:f4:5f:f9:01:af:5d:e5:74:8f:94:
43:1c:5a:a8:54:a6:1e:c2:de:2b:72:1d:ef:39:93:8d:10:c4:
02:8a:03:65:b5:38:2c:bd:b8:c9:41:d7:43:c4:fa:40:7d:bc:
ff:d7:67:fb:e0:09:b0:3d:c4:37:d8:49:76:2c:b5:b1:3e:d2:
f0:1f:8b:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:14 2026 by rpki-client