
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ba91ca7-9def-4330-98e3-4ad5929315d1.roa
File: 4ba91ca7-9def-4330-98e3-4ad5929315d1.roa (raw, json)
Hash identifier: fCpjlhjcoI8LQFs5aURBrn0Qv42jA1/qA3DQndFcFHc=
Subject key identifier: 50:D1:E4:28:29:C8:AF:16:40:5F:1F:77:E0:13:B6:14:D4:88:61:17
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 26E6336ECCB2A6F5DECB0638B10EBFFC0A63FA2D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ba91ca7-9def-4330-98e3-4ad5929315d1.roa
Signing time: Thu 23 Jul 2026 08:50:08 +0000
ROA not before: Thu 23 Jul 2026 08:50:08 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d28::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e6:33:6e:cc:b2:a6:f5:de:cb:06:38:b1:0e:bf:fc:0a:63:fa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 08:50:08 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=baeeed7a6b573c67031a2fdd78d23d67ae09acba599d27446258f12e80a6836f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:13:f0:da:50:42:3b:d7:1b:2b:10:a7:79:
b8:fd:5c:a4:3f:bd:42:6e:ec:c5:96:ee:f5:2b:4c:
9f:d4:49:8a:a3:ff:ff:f0:2a:c1:84:36:df:34:9a:
75:04:f6:64:b7:e2:ba:f2:f1:a3:dc:21:3f:a5:eb:
c8:ee:f0:f8:9c:3a:47:a2:7a:23:e1:a2:a4:e5:10:
84:28:eb:6d:56:7f:89:f6:f2:20:69:83:18:a2:e1:
22:a7:5d:12:25:bc:42:f0:5a:1f:f2:cd:bb:12:8f:
2e:9f:26:33:2f:7c:00:13:0a:dc:93:7c:8f:60:26:
0f:61:c7:29:c1:35:0c:41:3c:8e:21:29:67:8f:85:
c9:82:12:0c:a4:1e:11:12:b3:b2:21:6b:bb:50:e4:
01:f0:46:e4:97:b0:fa:72:73:53:27:ac:03:70:62:
6f:f6:32:ea:03:6b:13:40:26:a4:55:af:75:f6:9e:
f9:da:81:06:0a:23:54:20:ab:d0:5c:c2:cf:cb:96:
de:8c:74:8f:2c:a2:86:23:c4:1d:ce:b8:05:3d:3a:
90:e1:57:f3:5e:55:12:71:63:38:69:5c:d6:cf:56:
de:9e:98:64:71:b6:e1:7e:12:d6:df:60:b4:a7:55:
8b:06:b0:9d:00:97:ec:8d:5e:ec:ae:0d:f0:2f:f5:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:E4:28:29:C8:AF:16:40:5F:1F:77:E0:13:B6:14:D4:88:61:17
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ba91ca7-9def-4330-98e3-4ad5929315d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d28::/46
Signature Algorithm: sha256WithRSAEncryption
01:0a:b4:aa:e9:71:06:a5:b6:4f:16:ed:67:59:75:23:28:60:
fa:7b:de:ee:ad:95:39:47:56:fa:41:9a:f0:03:13:c8:2d:39:
8e:b9:a8:6c:c7:7e:44:ab:26:cd:1c:f7:b9:a9:ca:1b:fb:aa:
b0:8d:61:49:5e:0a:12:28:db:45:11:3a:c9:8d:a4:fa:ad:ae:
15:ca:a1:46:89:06:8f:85:f0:7b:cd:59:63:d7:ad:ff:46:9a:
af:ff:00:c4:0e:6f:b7:65:c1:e8:1d:7c:a6:82:3f:7a:5a:e3:
14:a9:05:24:16:02:a5:12:60:d9:69:dc:c2:d2:03:e8:61:96:
87:4f:ca:71:d2:c5:7f:6f:d4:c0:95:46:80:db:40:ab:83:b1:
44:b9:d0:f4:66:ec:b8:82:6d:08:ca:aa:fa:ee:bf:ce:67:54:
c8:f6:3a:f4:b9:9e:5f:45:cf:e7:b5:59:8f:4f:96:58:87:27:
c9:e8:2c:ec:63:fc:f7:57:2f:16:40:85:3d:19:8c:7b:2a:0b:
99:7e:b0:70:3e:38:e6:52:69:c2:d5:8b:88:ea:af:de:53:38:
64:cc:3f:08:27:a6:e1:4f:59:4f:53:e1:7e:c1:23:da:38:44:
75:da:f2:8a:08:2a:e3:09:0d:c1:57:c7:52:88:f7:39:b6:46:
2d:df:62:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:47 2026 by rpki-client