
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/329f8db9-b92e-4041-8390-4beffed72075.roa
File: 329f8db9-b92e-4041-8390-4beffed72075.roa (raw, json)
Hash identifier: EdiDyRa/XjZnkZAHbMf7fvEi9XHQfel2kl/gL1YlJco=
Subject key identifier: FD:D5:33:35:9E:F7:AA:B3:0D:3F:E8:D8:3F:72:EB:76:AD:92:3B:B8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 33C1BBC5D0B4938377DFF3C24E74A96D161A4164
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/329f8db9-b92e-4041-8390-4beffed72075.roa
Signing time: Wed 22 Jul 2026 01:11:58 +0000
ROA not before: Wed 22 Jul 2026 01:11:58 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2db8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c1:bb:c5:d0:b4:93:83:77:df:f3:c2:4e:74:a9:6d:16:1a:41:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 01:11:58 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=99f5926267e8230a6b526ae750e727ec940253e5d2a0b198b79b702ee2046a1e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:5b:ee:fa:02:ef:18:f7:cf:4a:4a:9f:fd:
e3:4b:ae:5e:b5:eb:77:16:bf:85:b0:68:cc:ec:cf:
36:28:f8:75:5a:02:fd:68:26:5e:57:56:be:05:90:
50:77:c8:0e:c6:7f:40:5f:82:91:07:64:81:ab:58:
f3:e4:f5:9a:dc:11:03:3c:78:cc:c6:9b:03:1f:56:
5b:0c:2d:ac:a3:2f:18:f6:0f:14:e9:e1:e3:e1:d6:
f9:74:4b:c7:5f:88:d6:14:27:3f:d7:b8:27:a9:1a:
4c:40:ad:92:25:de:c4:c8:4e:53:44:3e:1b:db:55:
da:86:ef:12:67:96:26:5e:60:c2:ba:89:96:09:e5:
55:07:b0:6d:8a:3f:51:71:61:f1:72:0a:ea:e1:74:
9d:b1:3c:d9:13:7a:e7:92:c0:5c:3e:89:c9:ae:e6:
04:82:71:8c:b4:bf:fc:ab:88:50:f6:83:2c:af:61:
78:6f:50:a5:9b:2e:3f:1a:a1:fa:7e:10:19:dd:c1:
1a:7f:5c:70:81:90:ea:87:3b:8b:6d:13:f8:d4:8d:
d2:91:e1:68:45:6b:35:96:fc:32:55:81:e6:3c:8d:
6d:31:5d:6d:23:68:0c:bc:e1:db:5c:29:3c:d4:9a:
a6:4d:c7:28:6b:58:f7:0f:92:8d:e8:a1:61:3c:de:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D5:33:35:9E:F7:AA:B3:0D:3F:E8:D8:3F:72:EB:76:AD:92:3B:B8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/329f8db9-b92e-4041-8390-4beffed72075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2db8::/47
Signature Algorithm: sha256WithRSAEncryption
11:5c:47:2c:09:c5:90:a3:81:99:10:36:08:c0:19:a1:66:4c:
49:bc:c4:53:b0:29:4a:46:44:16:e6:f3:b6:22:c9:99:82:08:
6c:c9:1c:32:20:33:41:12:26:5d:27:2e:d4:28:db:e1:12:d5:
9d:94:79:0b:aa:38:4f:26:29:41:79:0e:8e:46:f6:3d:f1:44:
8f:b6:1c:27:81:82:33:14:5e:9a:fb:1e:3c:d1:cf:bf:56:8f:
ea:23:00:e9:e2:94:42:b0:ac:32:2a:f8:4f:6c:c8:05:bb:45:
2b:31:db:72:24:61:a0:54:10:61:81:d0:af:06:67:be:db:e8:
f5:df:34:83:a7:ec:15:31:86:df:5c:e9:48:df:55:ec:da:b8:
5d:d3:cd:07:f0:55:2f:27:9d:3b:4c:88:8d:1e:1c:2a:34:ca:
95:93:1f:c5:83:14:f8:1f:ea:39:e0:cb:c1:14:ff:48:1a:c6:
5f:43:8c:f6:de:93:c8:3f:56:13:24:53:73:a7:7c:55:da:7a:
64:f4:a0:90:c2:06:90:a2:10:ca:11:7e:0a:3f:60:52:ee:bc:
f5:ea:fb:b0:b9:59:7f:d3:44:32:40:c0:60:89:b6:ca:77:b6:
d7:71:19:89:de:e0:61:6b:65:ad:e1:45:0e:38:11:66:24:0f:
e4:43:17:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:21 2026 by rpki-client