
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c96f311-a63f-4ef7-9f51-f0631ebfe799.roa
File: 3c96f311-a63f-4ef7-9f51-f0631ebfe799.roa (raw, json)
Hash identifier: HkO1DV9+oXkilmW0c2qozJCXHxBhYjZiMtDZunHfNfw=
Subject key identifier: 43:7B:9E:90:88:8B:73:16:09:10:24:47:75:C4:09:6C:90:7A:88:5D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0BDAD1B7294156571771A6948752F8F5E342098A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c96f311-a63f-4ef7-9f51-f0631ebfe799.roa
Signing time: Wed 22 Jul 2026 01:01:19 +0000
ROA not before: Wed 22 Jul 2026 01:01:19 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:29f2::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:da:d1:b7:29:41:56:57:17:71:a6:94:87:52:f8:f5:e3:42:09:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 01:01:19 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=2670c2bf55c6339f7ed972a3e8c1d218f3a57db8f2394ae6b05ed7ab384c90a2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:91:a7:04:ab:6f:bb:aa:ee:19:57:0f:ae:
c1:54:71:80:d5:31:47:96:b1:1c:27:87:cf:a2:47:
e4:e2:7e:05:55:ad:2c:a6:23:84:0d:ce:dc:2a:7f:
7a:5e:0c:d8:3c:11:d1:26:ff:c5:a2:66:b6:be:2c:
1e:66:3b:22:e1:48:ee:bb:b3:d1:44:d4:42:e2:3b:
3d:b4:fc:15:54:d3:a3:16:33:d3:21:b8:de:33:83:
84:97:dc:5d:f5:76:cd:4b:74:47:6e:58:24:67:94:
ee:ec:61:42:c8:58:ed:71:14:eb:5d:52:f6:cc:68:
9d:9c:71:4d:0f:21:01:82:e6:4a:bd:fd:5a:5f:74:
13:83:46:fe:68:05:bc:2f:8d:11:55:9e:2c:77:f0:
a2:2d:d5:ee:80:0c:04:69:8f:37:ad:08:52:9b:b3:
f9:a1:fa:0b:93:55:f2:cf:d1:26:eb:6d:c0:a8:8c:
53:fc:77:2e:56:3f:bd:f2:58:90:91:a4:0c:0f:b4:
36:bf:04:b4:57:ff:00:cf:8d:8b:32:c2:77:67:89:
62:15:22:26:2c:bb:f8:6b:da:6e:41:4b:3d:96:b5:
6e:b9:e8:27:ac:2d:fc:2d:d8:96:06:ab:d1:14:a8:
3e:49:a9:f2:98:6d:82:9f:7e:63:9b:2d:f1:61:f2:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7B:9E:90:88:8B:73:16:09:10:24:47:75:C4:09:6C:90:7A:88:5D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c96f311-a63f-4ef7-9f51-f0631ebfe799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:29f2::/47
Signature Algorithm: sha256WithRSAEncryption
5f:a2:a3:a2:e6:a2:fa:68:b6:16:9a:53:7b:69:4a:3d:fc:09:
f8:ad:07:1b:0c:c2:2a:84:e6:c8:47:f5:57:37:6b:f7:7d:e2:
91:d1:22:ef:6f:40:a2:ed:4c:5a:d2:f3:bf:1f:c1:2f:98:69:
08:67:08:cd:4a:ed:d8:c6:78:81:e3:49:1a:92:7f:a1:37:c3:
e3:e4:5c:e9:d8:f2:14:61:6d:4d:bc:38:d4:c5:88:99:1a:45:
21:d4:2a:ba:24:18:32:cb:9a:67:b3:6a:3e:47:03:38:2d:48:
4e:72:d2:44:3d:fa:c4:9e:25:e7:84:e9:bf:94:0e:f6:17:e5:
6a:4a:61:46:80:0d:b4:ae:4a:c1:be:e4:ec:b4:ab:84:21:2c:
1c:9c:53:76:ad:07:e8:36:e3:59:d0:86:5c:eb:18:3d:e2:10:
b1:ff:ae:06:69:9f:77:7c:f3:48:e1:1e:76:81:97:83:f5:5e:
25:28:e0:be:1a:cf:6f:06:a8:31:19:60:11:c4:2b:30:17:9c:
df:be:f1:0c:53:3a:e3:07:2e:47:8e:bc:76:ae:0e:fc:4b:f6:
b7:48:2c:5f:83:71:ef:05:ff:6b:63:55:ef:85:eb:4a:82:17:
8b:93:eb:38:d2:2b:d8:d5:52:22:a8:db:5a:18:0a:09:b5:74:
4b:07:c2:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:36 2026 by rpki-client