
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e007a1d-2d87-4e51-870d-b3ee2c9a8494.roa
File: 3e007a1d-2d87-4e51-870d-b3ee2c9a8494.roa (raw, json)
Hash identifier: 8lUOakg6vlkRK2yqpUXQNCGYkTTObMHZfRKxOijf7cg=
Subject key identifier: 43:3F:84:B5:DB:06:26:1B:36:82:1E:0B:B9:DA:D5:DB:6D:EC:9F:0E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 79A1F671CA89FD712322AD31BDF30CAB8DCAE0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e007a1d-2d87-4e51-870d-b3ee2c9a8494.roa
Signing time: Mon 04 May 2026 10:40:44 +0000
ROA not before: Mon 04 May 2026 10:40:44 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2c80::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a1:f6:71:ca:89:fd:71:23:22:ad:31:bd:f3:0c:ab:8d:ca:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 10:40:44 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=3212b7b23a74b2d87f7527e944b7787cf4d4fa20ddb59ee2a4b7e7a62dc02b4e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:b9:5c:6e:0d:67:a6:e9:35:7b:81:5e:51:
01:22:86:ef:c6:ed:82:57:25:00:a2:35:db:9e:1b:
5d:b3:f6:85:63:52:39:57:fb:88:54:4b:23:75:b0:
2d:f0:e5:8d:eb:70:31:f3:ca:ff:b6:58:93:c6:e2:
b5:6c:36:d4:7b:c4:65:02:3a:53:8b:8f:81:1a:6f:
d1:d7:f3:11:d5:69:49:6b:54:07:7f:5e:97:df:f5:
c0:ed:39:c4:78:75:f8:a2:63:50:4d:22:ea:4d:70:
f9:db:09:19:6e:ce:92:fe:0a:8d:ee:af:02:08:0f:
ad:3d:be:24:17:08:56:0e:62:ca:fa:ba:d4:4f:be:
28:46:ed:b5:51:37:97:fe:a1:bc:df:d4:fa:ae:42:
21:6a:c7:3d:c4:c6:db:36:ca:9d:26:fc:03:2f:17:
d2:a1:e0:b1:2e:66:92:48:33:c2:eb:a0:fc:c2:f3:
af:c0:32:82:cd:77:3c:19:bf:e2:75:1e:e2:9a:33:
fb:75:f7:f8:a8:78:ad:f5:5d:8a:10:b1:fe:49:6f:
0c:10:c0:8a:5a:18:90:89:e9:e2:c5:e8:e6:4a:99:
92:b0:8a:2a:8e:22:9c:93:e0:c1:2f:9a:50:47:d2:
33:27:5c:e0:95:78:87:bc:66:38:a5:ef:c6:bc:8b:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3F:84:B5:DB:06:26:1B:36:82:1E:0B:B9:DA:D5:DB:6D:EC:9F:0E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e007a1d-2d87-4e51-870d-b3ee2c9a8494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2c80::/45
Signature Algorithm: sha256WithRSAEncryption
a6:dd:47:ff:8f:9a:c7:a4:d2:a9:77:4c:4b:77:c2:eb:22:e0:
a7:39:06:cf:a0:09:17:53:f1:a7:5c:1c:57:26:72:ed:41:17:
97:dd:49:8b:6d:68:f2:ce:02:37:bd:ae:b2:9b:fe:6b:d6:9d:
2b:99:ee:12:29:06:98:f7:3e:9b:39:84:12:04:11:73:48:38:
85:d6:45:10:0d:53:cc:18:86:c4:97:5b:05:4c:1b:44:18:b9:
c9:93:35:a2:01:f8:3a:09:fd:e4:64:6e:b0:63:da:4a:93:f6:
cc:cb:5e:e3:e4:67:72:9a:0e:f7:b7:3b:88:58:27:9f:22:5d:
06:18:d2:31:35:00:0d:3e:38:ec:29:d4:16:89:59:2f:ad:62:
47:f5:64:ac:5a:a8:af:41:6b:0c:cd:9e:d5:44:91:f9:fa:1b:
60:0a:07:c1:fd:f9:19:dd:08:b8:73:c6:e5:f9:b1:cc:e0:1b:
d4:08:3e:0b:52:b7:af:8e:af:9e:b1:a4:89:1e:8d:67:01:8f:
10:b1:37:39:e7:84:e0:d3:2f:2c:e5:6c:e2:4c:15:7b:94:f0:
2e:2c:43:ab:ec:88:c8:54:c9:c1:d5:08:2c:ab:91:b3:02:fc:
0f:cb:b3:2d:ef:94:21:8b:2f:76:d2:e8:cc:3f:80:34:52:94:
1f:62:f8:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:57 2026 by rpki-client