
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5839defd-cd38-4482-ad37-2969881af993.roa
File: 5839defd-cd38-4482-ad37-2969881af993.roa (raw, json)
Hash identifier: SyIZDe4Ejh6DfRNzbIlSpUO5/urt8dCVilZ0Kxb6H1Y=
Subject key identifier: 68:33:F1:13:6A:62:3E:D7:E2:43:A0:31:41:94:CF:57:7C:E9:99:47
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7688858D82ACE6A2A408200FDE995516BFE11828
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5839defd-cd38-4482-ad37-2969881af993.roa
Signing time: Mon 04 May 2026 13:41:18 +0000
ROA not before: Mon 04 May 2026 13:41:18 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ab0::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:88:85:8d:82:ac:e6:a2:a4:08:20:0f:de:99:55:16:bf:e1:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 13:41:18 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=0b023b4485929a790078ced00a1f9ea447497882c5c0c2a214fe842d394fd65f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:ed:86:7d:82:1b:9e:b1:0e:c5:a3:58:3c:
70:d7:81:de:e2:84:84:a5:a1:b1:85:7b:ba:85:2d:
d9:be:98:52:0b:27:77:a5:7c:43:e2:f4:c2:b2:b6:
64:89:85:7e:8c:2c:e7:66:a5:0a:5e:3b:ce:82:15:
a8:6d:4a:fb:50:86:33:40:77:25:e0:4c:4f:08:c6:
54:39:20:92:a6:ec:36:4d:6a:7e:35:34:34:ea:62:
7a:d5:6b:e8:bc:45:cb:ab:65:e8:19:4e:f4:f1:b0:
35:a5:65:70:94:af:57:38:80:3d:0a:dd:f2:9b:4b:
bd:17:37:00:c8:cd:5e:f0:ba:c8:2f:3d:e3:29:27:
b9:05:60:57:df:a5:07:1f:d8:66:79:4f:80:15:60:
b5:b9:80:24:cb:01:a8:17:3a:d5:5d:1a:c0:5d:0c:
4d:60:3a:69:06:b6:6d:30:51:fe:3c:06:c5:58:40:
75:36:27:1f:58:ac:f5:bc:60:70:50:75:4e:3e:44:
01:90:19:b1:0c:75:e2:e3:6a:5b:98:10:7b:f7:64:
cd:09:c0:87:0c:0a:dd:f3:7e:4c:5c:c8:cd:1f:2b:
55:53:e1:f3:0c:ef:69:c8:49:1d:c4:17:73:02:74:
8f:e0:fb:83:f0:57:4c:2a:ac:e5:67:36:0e:a9:d7:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:33:F1:13:6A:62:3E:D7:E2:43:A0:31:41:94:CF:57:7C:E9:99:47
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5839defd-cd38-4482-ad37-2969881af993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ab0::/46
Signature Algorithm: sha256WithRSAEncryption
7c:06:98:38:b2:42:b0:e9:ef:2c:1e:21:49:e2:54:34:02:bc:
4d:74:aa:5a:c9:35:ad:b4:1f:fc:f1:60:f9:92:01:78:7c:36:
53:63:87:ed:5d:b0:1a:7d:c7:41:59:91:9f:a3:60:1a:ee:45:
4f:96:f1:ea:52:34:32:b2:a8:07:63:d1:60:b9:a4:fa:e1:80:
6c:2c:65:df:7f:65:4a:a5:84:d3:fd:6d:b0:31:0a:7d:8e:bb:
75:28:83:8b:63:ef:ab:73:35:d3:ab:8e:19:80:2f:16:19:cd:
21:3e:a0:ab:ad:bc:43:b9:ff:18:f9:0c:13:2e:78:96:0e:29:
24:3b:b9:a6:4c:ec:c8:f2:e1:fd:29:03:3d:10:5f:fd:d5:e4:
42:03:55:19:d8:fb:18:b3:74:22:53:59:de:27:6d:4d:fb:0e:
29:6a:d7:fd:60:da:7a:23:11:82:0e:44:b7:1f:da:a4:e9:62:
91:09:ee:2d:9e:b5:6e:fb:ad:76:e6:c1:f0:56:95:e0:d8:2c:
66:ff:a0:89:c5:07:8e:6f:dc:08:fc:fb:bd:e9:ed:9d:f7:5d:
22:08:68:8d:17:87:0e:ba:81:d8:36:4f:77:4c:cd:cc:ce:74:
00:b3:a6:01:03:40:80:7f:d6:e9:40:be:b4:b2:c3:4a:6a:84:
4c:25:e3:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:39:01 2026 by rpki-client