
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ba363cc-1fd2-4739-b5db-5c03009db314.roa
File: 3ba363cc-1fd2-4739-b5db-5c03009db314.roa (raw, json)
Hash identifier: jdXxSQVuls3H5vznY3usDORyDaVZoIGw3X0qKPUqeJ4=
Subject key identifier: D6:49:B1:54:83:A3:E4:D8:4C:DB:C7:F9:15:23:30:22:5D:A4:1C:FB
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0F8B7364BA891B55065469B00E569DFDEBF7B362
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ba363cc-1fd2-4739-b5db-5c03009db314.roa
Signing time: Thu 23 Jul 2026 06:00:08 +0000
ROA not before: Thu 23 Jul 2026 06:00:08 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3208::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8b:73:64:ba:89:1b:55:06:54:69:b0:0e:56:9d:fd:eb:f7:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 06:00:08 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=67e2ae82ef90cc9b211f2a138e6c7e1bd5424e048f30d26f87662b69eedf1b94, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:a3:43:2f:3d:0d:6c:96:22:c9:29:a0:19:
dd:bc:18:0e:54:07:d8:c8:8b:a1:2d:af:09:b7:8c:
63:15:7e:dd:82:13:09:98:4a:7d:4d:5d:4b:26:a1:
ac:e5:dc:df:4e:78:04:f3:6f:54:21:09:43:87:74:
38:ff:b0:c4:5d:bf:22:5d:1a:b7:43:09:ff:bf:40:
66:41:31:5a:68:6e:b7:7b:60:aa:8a:74:8b:1f:e2:
3c:5d:64:1d:07:06:bb:b2:0b:74:0f:75:1d:1e:81:
5f:70:37:d5:03:6f:df:9c:98:b6:93:f8:4f:ca:69:
02:46:49:3b:02:1e:43:cb:cd:1b:3f:ab:dd:48:a7:
91:e5:95:8b:7e:11:3f:56:3a:e9:ac:38:4c:c9:46:
b4:b8:13:69:a3:5a:d9:03:d2:39:f4:22:ba:eb:a1:
c9:af:49:c1:19:e0:39:98:88:05:6f:f5:81:b3:f8:
46:f1:4a:04:01:1d:1e:ac:47:13:a4:34:23:3b:63:
8c:22:47:27:b1:16:06:e4:f3:9b:26:84:bc:44:b9:
bb:9e:b2:be:28:11:4f:7a:d4:16:98:f6:b8:00:15:
5d:79:4f:a7:2a:10:57:a4:43:37:0e:3a:d6:c5:04:
92:89:55:39:a6:af:84:e6:d3:8b:a1:5f:00:cb:45:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:B1:54:83:A3:E4:D8:4C:DB:C7:F9:15:23:30:22:5D:A4:1C:FB
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ba363cc-1fd2-4739-b5db-5c03009db314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3208::/46
Signature Algorithm: sha256WithRSAEncryption
2d:4b:5b:17:b2:44:6c:40:21:a6:16:e7:bc:86:5c:50:67:2a:
d0:d0:7e:24:3f:84:e4:d5:9a:03:2a:42:79:27:a0:d9:1a:1f:
57:07:a9:af:dc:80:77:6e:48:9a:c8:53:68:65:ea:8f:77:b7:
55:22:02:03:6d:e8:c7:25:6c:57:30:d1:47:9a:76:fc:cd:27:
58:18:45:bf:e6:fe:e2:5e:0c:5f:41:c0:e5:d6:a0:13:23:7c:
a8:7b:07:80:83:f2:d1:c3:af:52:85:ae:26:b9:61:6c:a5:a1:
d1:a6:8f:3a:95:c2:47:7c:bf:a8:16:1d:49:4d:da:a7:20:93:
c0:0d:15:ed:f1:b1:3c:7b:7f:35:e4:bd:75:7f:4c:c8:f5:b7:
68:3a:a4:d4:18:97:42:5a:51:5d:1f:26:9c:ee:b8:22:79:57:
9f:8a:c9:98:96:65:30:f6:0f:35:58:3d:fd:8a:be:ff:4f:1c:
4f:21:46:01:e3:82:13:e1:21:d4:95:53:17:22:ec:4e:8f:80:
6d:b2:c6:1a:be:69:2a:a5:ae:5b:4d:cb:08:8c:c3:02:92:d6:
e0:88:09:e9:22:1f:3c:8b:55:dd:bb:82:40:08:53:f6:dd:bb:
b9:21:2d:4c:a6:8c:b5:df:02:b0:ea:99:20:77:eb:8a:ef:9c:
a0:fb:b3:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:12 2026 by rpki-client