
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a412818-ae54-4427-8149-3cbbdfb5a8a4.roa
File: 4a412818-ae54-4427-8149-3cbbdfb5a8a4.roa (raw, json)
Hash identifier: 7SpO4A47Jd9tNBoHDF8+DYF28rT9vWP5AkY2uEw0c08=
Subject key identifier: 8D:10:F6:BC:FD:35:7A:98:9F:98:AA:2F:BE:28:B5:5D:01:86:55:9A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 35F8E9F1CC4A05E3E3B98E3E91139DF4816DD557
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a412818-ae54-4427-8149-3cbbdfb5a8a4.roa
Signing time: Wed 22 Jul 2026 02:50:52 +0000
ROA not before: Wed 22 Jul 2026 02:50:52 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2fac::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f8:e9:f1:cc:4a:05:e3:e3:b9:8e:3e:91:13:9d:f4:81:6d:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 02:50:52 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=d3fd07c4e785dedd4bc96d0c1e0ae3d48ccd58df909767a20587e06261f82399, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:4d:b3:84:dd:c3:10:7b:ad:33:d4:29:e0:
72:cc:13:e4:1a:a8:f9:6e:14:38:da:18:11:bf:94:
99:88:7d:b6:99:f4:58:5b:52:48:7b:ec:38:04:96:
91:dd:8a:68:ea:23:1a:9f:de:de:b8:fa:f2:6c:ec:
b9:5a:ba:72:c7:c2:6b:91:0f:86:a1:11:31:26:ba:
52:cd:cd:09:d1:41:cd:a6:36:0c:d3:39:b6:1f:50:
bd:ea:1a:fd:50:9e:a3:f2:f0:05:04:47:28:cb:b1:
a7:7a:47:b3:5d:dd:d3:92:ca:56:eb:ba:77:a6:1f:
04:85:ad:69:c0:ed:33:33:10:55:5f:90:43:8e:2c:
85:de:f5:71:ad:eb:62:03:60:c5:da:1b:c9:75:57:
b1:80:68:44:12:ad:ac:36:61:40:e6:f8:19:97:c1:
5b:e8:67:bb:52:88:1a:13:7f:cd:7f:44:3c:26:a2:
e6:98:ed:c1:84:f0:08:46:aa:c7:71:9f:13:c8:c8:
08:e0:48:c3:87:ba:f2:70:29:ee:31:f3:cf:d6:62:
67:d7:71:46:55:2f:42:51:c4:7b:e1:3a:d8:6c:5f:
9c:f8:f6:23:db:60:0e:ee:ba:58:2a:84:2f:14:2b:
47:4c:3a:01:70:45:2d:82:be:80:80:cf:b1:55:b2:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:10:F6:BC:FD:35:7A:98:9F:98:AA:2F:BE:28:B5:5D:01:86:55:9A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a412818-ae54-4427-8149-3cbbdfb5a8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2fac::/47
Signature Algorithm: sha256WithRSAEncryption
10:69:2c:ee:ab:49:52:ac:ec:ea:df:25:a3:e1:dd:43:28:e8:
de:79:ed:70:e8:52:0c:b8:e8:4c:28:53:46:de:7d:4a:8d:41:
0c:16:a3:78:ef:95:9e:21:03:50:f1:a8:6a:96:a0:1e:b7:2e:
87:da:97:ab:25:08:d5:51:84:3f:1e:a1:bd:75:d9:67:68:be:
2f:1d:19:82:51:10:6a:ab:97:13:ef:b7:45:8f:97:f3:d0:94:
41:cb:3e:3c:89:4d:c3:2f:cf:be:22:bb:fc:28:e6:f7:de:6b:
06:8c:bf:32:8f:b2:05:4d:af:17:c7:dd:5e:e0:4c:df:ab:86:
ca:e3:89:be:ab:73:b9:ca:04:a2:5d:ae:a2:75:4a:f3:b3:eb:
fd:2f:bc:55:8b:93:81:c6:3d:2e:40:bf:88:a0:a1:0e:3e:8e:
af:bc:0f:cc:65:61:58:b4:d2:8e:6b:1b:67:6e:81:ba:25:92:
0a:bd:e4:55:24:12:56:38:bd:d4:07:1e:e0:fc:44:0a:c3:41:
77:d5:85:9f:1b:fa:45:a6:2d:33:f3:e6:d5:5a:b4:2e:92:72:
3b:bd:78:b4:b9:ad:20:87:97:da:82:95:e7:1d:b0:06:ee:4a:
0f:76:b3:17:36:5e:1c:a0:91:99:12:c0:ef:74:ff:cf:cf:67:
71:52:17:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:14 2026 by rpki-client