
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60a34d26-3383-4928-aa22-a325a80a651a.roa
File: 60a34d26-3383-4928-aa22-a325a80a651a.roa (raw, json)
Hash identifier: 7pvfhgjACwtqmxHw0cYjChDZzU3fLSCJ/Vu895VklyI=
Subject key identifier: 40:36:D5:59:3E:66:26:1B:17:EB:11:97:83:25:D5:E7:B0:62:48:9E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1ECB3E29F10839EA9B0D6E98DE9B367493949B16
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60a34d26-3383-4928-aa22-a325a80a651a.roa
Signing time: Wed 22 Jul 2026 03:41:03 +0000
ROA not before: Wed 22 Jul 2026 03:41:03 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b1c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:cb:3e:29:f1:08:39:ea:9b:0d:6e:98:de:9b:36:74:93:94:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 03:41:03 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=92d928f55f4f424b944173e3702fb0854934a6f71869b06957e931df626ea079, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:85:cc:e9:72:7a:b5:29:5b:09:02:39:50:
18:9d:fa:b1:28:85:d6:87:16:f7:fa:ac:ce:c3:71:
67:1f:72:df:df:ef:b4:dd:ef:0f:6e:55:bd:38:76:
32:9d:07:9e:f8:e6:24:c8:3a:9b:73:e1:b0:a6:26:
e9:63:68:1d:0a:d2:88:9d:27:88:4e:88:ef:0d:85:
f6:52:32:d6:d4:96:68:ac:9f:d3:12:5d:a1:dd:5b:
f3:c3:ea:43:91:82:89:61:41:cc:33:1b:e7:c0:99:
2e:9b:78:c3:01:2d:a6:43:e4:9c:4e:0c:0f:a3:42:
c8:d1:7b:c8:40:32:c2:5d:ab:a2:1b:ad:9b:d8:0c:
b3:f8:0b:e1:ea:45:f7:ae:5c:cd:41:4e:f7:e0:15:
df:59:09:90:b8:21:9f:73:b9:bc:9e:bb:58:a6:09:
24:cb:b1:00:b5:f7:bc:55:c4:f0:be:f2:bb:97:90:
18:4d:3a:05:15:a9:e3:ab:30:f1:ad:b1:76:9a:62:
9a:52:69:88:a0:24:51:38:47:0e:83:e7:7c:d9:13:
67:f0:28:b4:49:f2:e2:13:ab:8e:ea:58:9c:a1:4c:
2c:1f:c3:d9:c7:2a:d4:34:26:77:ec:ca:e4:9b:9b:
db:84:5d:0f:31:7a:75:74:74:ee:26:ee:b8:32:bb:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:36:D5:59:3E:66:26:1B:17:EB:11:97:83:25:D5:E7:B0:62:48:9E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60a34d26-3383-4928-aa22-a325a80a651a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b1c::/47
Signature Algorithm: sha256WithRSAEncryption
35:2f:43:73:ec:55:69:0f:d1:74:eb:0e:fa:ad:aa:89:10:3d:
b4:d9:1c:85:94:76:1e:1c:da:c2:31:06:9c:fe:eb:7e:f8:3d:
a8:40:be:0b:eb:0c:09:c3:8a:2b:1f:22:e7:cb:19:7f:5a:ef:
97:c7:67:b3:d3:95:03:35:5a:eb:44:1a:3f:68:b6:f9:99:bc:
8f:d1:21:9b:2c:14:a6:9b:0f:f4:f7:8d:5b:06:4a:8c:fb:f2:
10:a8:1c:b6:69:82:87:c4:37:27:fd:e8:29:0f:ac:0b:29:55:
e2:ec:b8:b8:a4:db:98:49:3a:c2:ab:6d:6d:94:40:8d:da:82:
f4:9c:de:0d:d3:4e:6b:ea:0f:ff:02:48:c6:bb:77:b3:ed:33:
d5:1d:30:e5:78:f3:d0:64:57:3b:17:da:53:8f:33:eb:a7:fb:
94:71:ff:c7:aa:f9:1f:47:5f:81:50:e0:c6:fa:63:2c:f2:50:
dc:d3:e3:a8:fd:cc:7f:e3:11:08:ec:18:07:8e:0c:6e:2a:a1:
fe:d5:54:86:7e:11:65:2b:b2:e2:bb:2a:2e:9a:5c:cc:f5:b0:
1d:7b:a7:53:f4:e1:53:dc:7c:e0:71:c5:10:c0:d8:bd:8c:34:
a6:3c:97:a6:a2:03:95:d1:9f:5c:89:01:6d:70:4f:ae:a4:61:
d6:78:4b:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:22 2026 by rpki-client