
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ab9a09e-d3ea-4215-8f51-ca82e5544d24.roa
File: 2ab9a09e-d3ea-4215-8f51-ca82e5544d24.roa (raw, json)
Hash identifier: BFTMirLe7bi7WatxbpBpgmFcq8z3YTWvEdiqwl6K+HM=
Subject key identifier: E4:10:D3:BB:CA:CA:37:33:D2:AE:3E:95:6D:E4:33:76:81:4E:B6:AF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 618BE043A430D531B06735F7E2090BAA17257139
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ab9a09e-d3ea-4215-8f51-ca82e5544d24.roa
Signing time: Thu 23 Jul 2026 03:31:29 +0000
ROA not before: Thu 23 Jul 2026 03:31:29 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3968::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:8b:e0:43:a4:30:d5:31:b0:67:35:f7:e2:09:0b:aa:17:25:71:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 03:31:29 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=764fe91aa86f81a8dd43258619bae87cebedc5e9bdd79923dca29b73ffc0ded2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:7b:5f:05:ea:65:7d:6e:9d:38:30:e1:64:
09:97:0f:b8:03:7d:0c:32:63:4d:18:06:07:a2:fb:
17:8a:d5:5f:63:15:e8:84:15:f5:62:29:c2:86:e5:
1e:40:44:95:e8:13:93:0d:4d:7c:3d:29:94:92:78:
e7:02:f4:b3:06:07:8b:0d:f7:c3:84:1a:9e:82:64:
4e:ae:c9:3a:13:0a:6e:1b:f7:e4:fa:61:0d:47:e6:
0d:e3:8a:c3:77:d9:c3:f5:a2:0d:4c:6f:e1:6a:a2:
bc:5d:cf:1b:7a:31:f3:ca:94:45:54:0a:01:53:bf:
52:f4:34:c3:86:6c:50:93:55:8a:ea:f9:a1:16:94:
f8:30:83:83:f2:47:08:29:55:c9:8e:34:76:ee:97:
27:03:ba:2f:1d:fc:45:69:3c:e3:fe:96:73:b6:65:
51:ff:e9:d6:3c:67:83:5b:49:4a:96:65:95:ce:2b:
79:e2:a3:58:57:d8:a6:cb:49:07:91:a5:4e:64:05:
aa:c6:ae:db:dc:0c:ec:8b:57:12:78:40:50:7c:b6:
d2:10:ea:ed:65:57:bc:38:d0:8a:36:97:5a:46:bf:
a7:c2:ea:d0:c1:86:75:ca:85:b4:81:10:f9:e8:eb:
7e:07:e9:15:5d:39:80:d6:0d:5a:c8:b7:bd:91:e0:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:10:D3:BB:CA:CA:37:33:D2:AE:3E:95:6D:E4:33:76:81:4E:B6:AF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ab9a09e-d3ea-4215-8f51-ca82e5544d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3968::/46
Signature Algorithm: sha256WithRSAEncryption
8e:53:db:57:ac:f4:1f:35:c0:7d:28:06:8c:7a:42:51:fc:95:
5e:47:3c:dc:67:50:ad:d2:e3:0b:9c:37:e7:f0:67:64:4f:aa:
02:f7:2b:4e:c1:f6:4c:44:5a:6e:7f:12:a0:c0:17:cb:96:64:
da:79:a9:c6:9e:00:e2:df:28:c5:e6:4d:23:05:9f:50:99:d5:
b0:3a:96:05:35:ef:31:0d:0b:6e:72:6f:35:88:44:92:30:a6:
c1:7f:f8:18:5c:33:38:d2:c5:b5:b0:20:c0:f1:ca:fd:5e:65:
b5:91:5d:5c:5d:56:23:8c:3d:1c:bd:d7:8b:6f:d5:5a:43:e4:
65:3c:5c:34:0b:46:81:43:f7:3d:8d:ae:e5:df:fe:1f:60:4e:
99:eb:80:0d:a5:f1:04:29:1c:e8:80:19:3f:77:50:bc:f4:b3:
9b:49:e6:e0:7b:44:12:9b:6d:af:4b:51:15:23:ae:e4:2a:5b:
4d:1e:0b:81:e9:65:69:60:a8:20:29:57:02:5d:d7:94:13:97:
5b:8f:9e:5d:fc:84:82:2c:ac:f9:cd:3f:93:03:67:d0:64:bb:
05:5a:7c:a1:b5:c4:2f:79:4b:67:36:8f:71:da:59:ec:7d:6a:
a1:c6:4e:d6:d0:fb:7d:e9:9c:2f:99:fd:84:85:6d:91:37:cb:
a4:41:54:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:16 2026 by rpki-client