
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4badd862-8aed-43bf-85c5-6efd25c5e8e8.roa
File: 4badd862-8aed-43bf-85c5-6efd25c5e8e8.roa (raw, json)
Hash identifier: u/xBPuvaoiS1x5CY0QvlyMb/aNQQPKOSZ85mmtAgUJI=
Subject key identifier: 48:B2:52:64:EE:FC:A2:7A:67:99:77:A0:F2:2E:EE:99:DD:E2:CB:A2
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4EF9FFF94F3397C4D58BBDE297EF3336444D08
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4badd862-8aed-43bf-85c5-6efd25c5e8e8.roa
Signing time: Mon 04 May 2026 03:21:21 +0000
ROA not before: Mon 04 May 2026 03:21:21 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d76::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f9:ff:f9:4f:33:97:c4:d5:8b:bd:e2:97:ef:33:36:44:4d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 03:21:21 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=15c0615ab16a18ee44ef5d507f191b605787e01176eddb6dc5bfd290f863452f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:ec:13:ce:da:25:93:95:9f:73:24:26:c6:
21:3a:ac:1c:0f:03:0a:46:e0:c1:4c:8d:12:15:3b:
34:0a:b3:93:0d:e3:e8:fb:ed:3f:4c:f9:bb:bd:5f:
15:2f:b2:25:ac:a6:8d:f4:90:9b:48:55:08:f0:a1:
a9:45:0d:65:fe:41:ad:67:79:1d:af:a3:32:af:63:
9e:e6:ac:98:2d:f7:f5:0f:f4:7b:89:85:ea:fc:dd:
4b:81:04:64:c1:44:5e:da:8c:7e:58:88:3a:61:bc:
f2:27:a0:a1:58:e0:11:f3:98:f3:26:79:62:61:8f:
92:74:ce:e1:bb:81:75:01:40:ca:45:29:5f:1d:03:
70:34:d7:71:30:8e:e4:53:25:3a:89:48:6a:bd:b2:
c3:13:4c:4f:76:0c:32:18:9e:1c:de:f1:7f:db:ce:
dc:6b:f9:2b:3a:b4:db:6f:e7:05:b8:c5:70:05:83:
35:0d:b9:38:ac:af:f6:31:94:45:a4:c7:7f:59:92:
b9:09:99:d5:19:9c:8d:62:21:1a:3e:46:33:bc:8b:
a9:d0:c2:0f:c9:bc:a1:30:81:e9:ae:25:ef:c4:15:
ad:ed:9b:46:d8:02:b9:29:97:e4:56:3f:55:68:22:
83:45:dc:5c:6c:a6:b5:d6:57:f4:3b:92:c8:ac:ed:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:52:64:EE:FC:A2:7A:67:99:77:A0:F2:2E:EE:99:DD:E2:CB:A2
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4badd862-8aed-43bf-85c5-6efd25c5e8e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d76::/47
Signature Algorithm: sha256WithRSAEncryption
96:70:4e:41:8c:a2:3a:bd:0d:c3:45:73:82:8f:2a:51:08:fb:
90:6d:33:0e:29:48:5e:77:a5:c5:03:17:22:95:4b:00:d5:90:
63:0e:3e:b4:b3:a6:d1:bb:be:a6:0f:cc:16:45:59:a1:16:55:
06:da:0c:93:32:73:e5:73:89:cc:94:50:61:96:7a:0b:00:8e:
f1:5d:47:0d:6f:fc:31:07:ff:55:da:df:b3:04:00:73:5c:06:
dd:61:d4:70:bb:f7:5f:2e:8e:6c:c5:ac:8b:51:1d:85:b5:f1:
13:27:ce:63:fd:4c:ba:f7:5e:2d:25:25:f8:e6:ae:20:44:46:
43:9d:41:2e:40:b7:3a:8c:c9:f9:e5:72:fa:5b:2b:aa:4b:4e:
8c:50:85:5a:56:74:55:dc:48:84:89:ff:38:f0:5a:e2:4c:a3:
e8:2a:ed:ea:8d:c6:35:a9:cd:4c:b8:d4:bc:d1:72:ad:a9:64:
d4:da:fc:4b:61:6b:f7:9f:a2:fc:b4:4c:47:f7:26:8c:73:b7:
6d:91:36:58:92:d7:29:61:dd:2d:20:b1:b7:95:53:8a:ff:7d:
19:34:12:51:84:39:66:de:8f:c6:84:09:ea:1a:0f:dc:bd:4d:
dd:71:8e:cc:1b:15:7a:77:37:80:91:8f:04:73:5e:37:75:92:
74:55:3b:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:17 2026 by rpki-client