
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41d025ca-3f28-498a-af8b-547fe72cc9ab.roa
File: 41d025ca-3f28-498a-af8b-547fe72cc9ab.roa (raw, json)
Hash identifier: 2Edwkn8Ez6DEZuQlqnqbbW6gyDBJ1/dJAOKPA/uyslM=
Subject key identifier: B0:32:86:89:E6:A6:7C:6E:46:04:12:D4:C8:C2:83:F7:07:08:40:DA
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 22260FC6A5676E98792767070F2B8B02A157A771
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41d025ca-3f28-498a-af8b-547fe72cc9ab.roa
Signing time: Mon 04 May 2026 01:40:45 +0000
ROA not before: Mon 04 May 2026 01:40:45 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ee0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:26:0f:c6:a5:67:6e:98:79:27:67:07:0f:2b:8b:02:a1:57:a7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 01:40:45 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=e7cae989e8278f449105878420850b216cea0db87871b04421bedd6f687d1871, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:80:21:56:9d:27:59:1e:56:14:34:a7:12:
63:80:30:79:66:f6:a2:db:20:14:f7:39:46:16:c2:
bf:44:96:0c:82:56:45:57:2b:53:b5:b7:3f:dc:61:
27:76:6c:38:f1:8d:f3:31:0a:50:dd:73:d3:01:d5:
be:1e:1d:aa:a6:74:a3:b1:39:0d:fa:15:e3:d2:16:
46:74:ac:6b:0f:51:01:41:ce:05:cd:6f:1d:62:ce:
9e:36:92:e8:43:ee:7f:33:a5:2d:0a:13:4b:56:a7:
51:b6:8e:87:0d:8d:4f:3a:a8:6d:f6:a6:e2:f5:48:
94:3d:80:73:ca:51:2a:0b:f2:8d:01:ad:df:58:7f:
82:7b:71:47:f0:6b:d7:4a:4c:61:eb:11:15:e5:f9:
09:79:1c:50:e3:08:6a:ee:c8:d6:c0:a5:4a:1d:c0:
26:93:0a:6f:54:1a:d3:f1:95:bb:3e:71:97:7b:af:
90:6a:fd:ca:6c:57:f3:19:bb:8a:f3:3b:44:8d:62:
b4:16:31:f7:83:d2:ed:4c:ce:d1:79:32:3d:c3:83:
d9:48:53:2b:7b:5a:ca:11:9a:fb:5e:ab:56:35:44:
ad:3d:96:0a:09:f8:51:80:0d:c8:af:2b:9b:64:15:
3e:4d:b5:7f:9b:f2:dc:93:f6:e5:2e:11:85:7c:fb:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:32:86:89:E6:A6:7C:6E:46:04:12:D4:C8:C2:83:F7:07:08:40:DA
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/41d025ca-3f28-498a-af8b-547fe72cc9ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ee0::/43
Signature Algorithm: sha256WithRSAEncryption
28:ba:91:ea:20:a1:8e:dc:16:28:92:81:f1:5a:fd:65:e3:88:
29:f5:5c:c7:e4:9a:f5:b2:07:a0:0b:ea:77:e3:a6:77:b3:e0:
0e:c4:72:71:15:00:bf:4c:b9:0c:a3:c0:ff:13:72:b4:b6:3c:
99:7d:7a:82:ef:43:9e:b4:45:4f:2c:58:72:d7:57:20:42:63:
9e:5b:a5:b0:45:b5:37:6b:32:a9:f8:e1:f6:2a:f3:f5:e4:21:
73:b0:c5:f6:46:30:48:7a:a4:73:4f:cc:26:f7:68:92:90:07:
96:ad:e2:ff:55:7a:fb:54:e6:30:c5:ef:f4:aa:37:ad:ab:43:
93:be:13:a8:53:28:03:c5:a1:1d:08:99:c9:54:33:e7:93:20:
c4:48:1b:f8:3a:f9:4a:5b:0b:32:47:6d:0d:d2:d2:28:1e:b0:
f9:bf:89:62:da:44:70:ac:e3:0d:e1:1a:00:0a:52:29:4a:e3:
94:d5:14:b9:0e:d3:c1:04:aa:38:a6:01:1c:d1:11:b6:13:b4:
d4:74:22:5d:08:65:3d:69:08:85:f1:3f:28:c3:f2:7b:3e:45:
f5:94:df:8f:34:d4:47:d3:93:87:36:6d:25:35:e8:56:5b:cf:
5c:e9:15:e0:25:01:40:3d:19:4d:5f:74:0b:b5:29:53:30:b0:
4b:17:e9:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:41:04 2026 by rpki-client