
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3593b939-e290-4ff1-9c34-28b014e3c779.roa
File: 3593b939-e290-4ff1-9c34-28b014e3c779.roa (raw, json)
Hash identifier: Y+gj+Y0lJew0ryMZz4WPyGoTGBvQ0KiHt4AIZff8p9g=
Subject key identifier: 4C:D0:4C:70:CC:EB:E1:FB:90:14:EB:5F:37:57:23:0D:67:FB:3C:F6
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 611FB587DC436EC75C030BF1A4CB1F4612BAFCB6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3593b939-e290-4ff1-9c34-28b014e3c779.roa
Signing time: Mon 04 May 2026 06:42:09 +0000
ROA not before: Mon 04 May 2026 06:42:09 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:387a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:1f:b5:87:dc:43:6e:c7:5c:03:0b:f1:a4:cb:1f:46:12:ba:fc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 06:42:09 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=715b94bdd62cc7ecadd73f10208e85a4791b42ef10238a84cb41ae88e5ad2e90, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:8f:5b:fb:d5:9f:86:e2:78:83:29:28:6a:
6e:f0:a8:cf:f2:f9:a4:1a:ca:c8:ce:33:85:cf:fd:
17:5e:ac:c4:41:2f:2d:ae:8c:48:79:07:56:58:72:
6f:0a:e2:e2:ce:3d:55:a1:47:13:4e:08:f4:2b:31:
a1:9c:f0:13:de:7f:ab:f7:19:58:b7:12:f0:89:c3:
74:2d:e9:be:95:6f:8f:81:7a:8e:45:d6:f6:e8:0f:
7a:d0:59:33:60:0e:d8:7d:92:29:ea:61:4e:05:29:
25:c7:a9:ea:33:92:54:96:67:e1:46:2a:a8:ba:05:
44:a0:4a:e8:e9:be:92:25:c1:c8:4d:18:1c:58:a7:
5e:a5:c6:50:23:fe:d1:ea:7c:9f:6a:86:75:c6:ca:
fc:9a:ed:c0:cc:aa:9f:e8:ee:67:a3:08:63:aa:1e:
95:c2:e1:93:51:52:d3:da:66:ea:e1:c6:b1:a0:55:
a9:dc:1d:7a:66:85:d8:4a:55:78:8e:68:33:a3:5e:
d0:f1:6a:d8:c8:8e:52:f0:1a:5e:54:4b:8b:e1:0e:
67:e4:64:59:57:d4:a4:79:d1:07:db:f5:df:24:54:
a6:a4:3b:9f:4d:4d:c5:c8:cd:20:aa:6e:d1:4d:31:
c5:4b:fd:e8:f3:64:99:68:ff:22:e5:28:21:33:ef:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:4C:70:CC:EB:E1:FB:90:14:EB:5F:37:57:23:0D:67:FB:3C:F6
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3593b939-e290-4ff1-9c34-28b014e3c779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:387a::/47
Signature Algorithm: sha256WithRSAEncryption
8f:91:43:a0:a2:ab:e0:1a:89:dd:d0:c8:88:09:68:47:ff:76:
db:f1:a7:fe:02:75:5b:38:1c:ab:89:ec:a1:a8:d5:76:b8:68:
0b:4b:de:ea:68:d6:f0:5e:d5:2a:f9:7a:f5:a1:82:f4:08:e5:
14:ee:f3:47:23:43:66:76:29:1e:fc:0a:e8:08:2e:8b:15:af:
87:2c:3f:b1:3c:8b:8c:54:24:cb:24:d4:ec:0a:4d:ce:3d:63:
3f:3c:d1:e0:a1:d6:5a:41:e9:45:82:6e:86:54:bf:95:12:92:
2e:db:3d:2d:7d:81:84:89:70:47:98:b6:1a:1e:02:bc:aa:4c:
97:77:03:57:ad:83:03:b5:b8:21:71:c8:fe:8f:b0:8e:06:97:
13:dd:b6:b5:7c:ab:0d:da:e3:93:02:5e:07:16:01:4e:70:5c:
99:81:0a:51:ac:f1:b1:da:e7:84:73:24:62:b6:27:b4:82:68:
c7:d0:7b:69:16:6e:90:37:fd:a9:17:15:95:34:67:47:4a:b4:
7a:24:46:68:ea:10:3d:2c:20:f9:6c:ad:49:f5:c5:5c:72:9a:
7f:8d:a4:af:1f:ec:05:9a:5c:4a:08:34:4c:f2:7b:d6:eb:e0:
ea:0a:c8:c7:6d:dc:b1:c5:a2:23:c2:fe:3b:46:81:4a:40:d6:
e5:76:bc:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:48:02 2026 by rpki-client