
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d98e847-6fcb-42d9-b25d-3171e41c5ed5.roa
File: 3d98e847-6fcb-42d9-b25d-3171e41c5ed5.roa (raw, json)
Hash identifier: 1sk3BEbM1GGbufc5hnWrMDtxLSttGu0KO5qU+g736U4=
Subject key identifier: 75:1A:A4:BF:6F:DC:DB:49:B3:37:DF:72:AF:1B:2F:82:4F:99:7B:31
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1660BF9BB8E49B0E5CED53A2288F2D066524F673
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d98e847-6fcb-42d9-b25d-3171e41c5ed5.roa
Signing time: Thu 23 Jul 2026 07:11:51 +0000
ROA not before: Thu 23 Jul 2026 07:11:51 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2aac::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:60:bf:9b:b8:e4:9b:0e:5c:ed:53:a2:28:8f:2d:06:65:24:f6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 07:11:51 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=27674193b4006a070699010da669a446e6a2aeecd728d68e72a32e3395eb8290, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:48:9e:1d:66:ad:45:d3:b7:e8:21:71:e0:
ff:bb:bf:50:98:11:36:fd:e5:87:97:c2:5b:36:2e:
76:bf:ac:eb:04:46:e5:68:e9:c0:1b:b3:a4:dd:ce:
be:8f:95:4f:4d:e6:06:b5:a5:ba:fb:99:50:ea:a1:
1a:ea:be:30:0b:b2:b4:76:96:e7:29:f7:54:a5:e9:
f8:ad:ed:84:31:6c:23:4d:ad:8f:be:46:18:4e:af:
0f:fa:dd:c5:c5:33:8d:cd:94:85:27:0e:6a:8e:a8:
c3:03:17:91:02:41:65:98:43:ec:e3:66:c0:42:70:
55:02:93:9f:d3:99:cd:18:d2:21:df:11:62:d4:c5:
8b:32:1c:e0:95:3e:1c:2d:b8:f8:01:21:30:72:b6:
ca:86:f2:75:b2:d9:1b:bf:1e:11:ba:2f:6a:c7:7d:
88:56:35:1d:16:cd:ae:ef:c6:31:18:20:c0:47:48:
b7:d3:f7:0d:b0:d1:8d:c5:20:cb:eb:ca:5f:74:3b:
02:3f:97:c0:f0:46:a8:df:ad:f3:df:f4:f9:10:90:
71:61:f0:ac:3b:62:b7:d4:67:c2:24:7e:56:5c:ad:
c1:67:e3:5e:02:5c:ec:80:1f:6a:03:d3:b1:f2:3e:
fc:61:88:ce:7a:37:f9:00:dc:1e:ff:e1:47:f5:c9:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1A:A4:BF:6F:DC:DB:49:B3:37:DF:72:AF:1B:2F:82:4F:99:7B:31
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d98e847-6fcb-42d9-b25d-3171e41c5ed5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2aac::/46
Signature Algorithm: sha256WithRSAEncryption
12:da:66:e2:76:98:f3:d4:67:96:cd:ef:8b:05:2d:2d:86:8f:
54:b7:c9:e0:68:74:46:9d:cd:d1:1a:79:bc:a9:c0:47:41:01:
b8:4e:38:9a:51:a5:17:ca:72:50:28:c4:9b:2f:a0:fd:28:e5:
18:bf:b6:ad:63:9d:43:2e:ae:4a:25:03:92:b9:39:35:d6:26:
28:f0:73:4d:d9:4f:23:2f:2b:ed:83:6b:20:8b:81:50:93:cf:
ca:63:9c:d2:b3:b7:4e:7c:ea:ec:72:dd:5f:6c:e0:c6:53:93:
63:21:68:8b:a5:54:12:6a:bd:73:d0:06:71:a6:60:82:4d:92:
36:40:e3:e3:4e:b9:5f:06:76:54:4a:f4:f6:e4:eb:ab:90:ff:
9c:0f:bc:10:ed:d7:57:60:45:9f:86:ac:63:76:8d:c0:34:97:
dd:01:aa:77:fb:00:2f:f6:1d:50:37:2b:7c:86:fc:e9:07:0c:
fe:26:39:79:6a:42:aa:a7:4d:d4:f5:8f:90:21:b1:ee:59:98:
a1:77:1e:22:04:54:7c:f7:ca:96:bd:3f:10:79:7f:26:48:47:
f5:ea:3b:08:4d:c3:17:b9:88:3a:d0:6c:e6:c8:17:32:27:d6:
5a:ce:86:f7:ec:0f:45:a8:b8:88:05:84:b8:98:a3:8b:17:8f:
ca:de:21:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:09 2026 by rpki-client