
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/63d6823f-031b-4d66-87e8-b24bdeab0396.roa
File: 63d6823f-031b-4d66-87e8-b24bdeab0396.roa (raw, json)
Hash identifier: s9j+w2vjoBT0IYxocmHl1p9uBO8pVNTvW0nxOghbfjM=
Subject key identifier: 6B:90:96:33:18:E2:FD:C5:CB:D2:D0:E7:D0:BA:56:94:4C:93:93:F7
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 997FB6A762A1FEA618B99ECDD72EB3AB5CB2B7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/63d6823f-031b-4d66-87e8-b24bdeab0396.roa
Signing time: Mon 04 May 2026 08:00:39 +0000
ROA not before: Mon 04 May 2026 08:00:39 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:35c8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
99:7f:b6:a7:62:a1:fe:a6:18:b9:9e:cd:d7:2e:b3:ab:5c:b2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 08:00:39 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=61ae6007472525803e779ed22c95d0272c63dfa708289dc4906fab019ff7efda, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:22:32:b6:60:cc:51:4c:09:7f:4e:5b:e6:
f1:f5:66:87:07:f9:c7:d1:1f:86:8d:20:13:3b:3e:
e5:98:24:6b:7e:b7:e6:e5:3d:ba:2d:9d:47:7f:d3:
c4:51:97:1d:0f:28:7e:01:41:c9:b3:62:af:02:bb:
f4:33:19:69:5c:88:e5:5b:91:24:ba:66:05:0a:2b:
f2:30:0c:df:9c:8a:ce:04:94:dd:bf:34:1b:4f:ac:
94:3f:8a:64:76:aa:6e:ef:d5:91:65:51:5b:db:5c:
9a:8c:18:76:bf:37:0f:5f:5e:f8:aa:06:58:16:b9:
48:f4:1c:f9:94:2c:88:56:f1:fb:37:1e:90:54:fc:
23:a9:76:58:ed:a3:d2:60:f8:4a:d7:11:d6:a5:37:
66:3c:56:7a:33:0e:f1:f6:da:bc:4c:91:78:24:c7:
79:1e:a3:46:b0:bc:21:ba:9f:52:78:c6:4b:46:9d:
ca:aa:74:3e:7d:3d:8e:2b:d7:a2:21:d1:d7:f7:6b:
f7:5a:20:c0:4e:8d:b0:a5:97:85:8a:9f:4b:4e:91:
97:04:a4:e1:85:ab:9d:ae:75:5f:11:4b:ba:81:25:
ee:9e:8a:8c:d5:36:20:63:84:69:1f:65:98:f8:e6:
4c:61:1b:b3:90:39:f8:6d:b0:45:4b:1e:94:a3:02:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:96:33:18:E2:FD:C5:CB:D2:D0:E7:D0:BA:56:94:4C:93:93:F7
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/63d6823f-031b-4d66-87e8-b24bdeab0396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:35c8::/45
Signature Algorithm: sha256WithRSAEncryption
4b:c8:17:d1:83:8d:c5:9e:44:ae:3b:9d:74:db:22:86:93:db:
d5:3f:0b:ec:58:63:8d:34:76:15:1c:48:b4:80:e7:b5:63:76:
02:f8:9b:c8:96:1a:a0:79:56:0e:17:16:dd:2b:c8:ad:b7:3e:
c2:f6:c6:60:d5:25:1e:e6:06:ae:12:9f:3f:04:51:18:d1:ab:
15:0a:b3:3d:4c:ef:50:10:b6:9b:c4:85:e9:df:73:02:23:0a:
9f:90:71:94:30:77:5d:14:c1:0f:e0:91:32:d4:cf:7b:d2:c3:
a8:07:e6:50:3e:68:14:45:d7:90:b9:9c:ac:f0:70:c3:a2:5b:
a3:3c:6e:b6:08:6e:24:e2:e7:b0:0c:fb:4c:63:71:ee:a5:86:
73:69:28:25:55:b9:cf:b7:07:98:0a:1e:42:c0:df:46:60:03:
1f:16:ea:b0:b1:17:8e:34:8c:49:5c:9c:26:f6:a8:c4:db:93:
9a:c0:77:cf:1b:d5:e7:a7:b7:f9:cd:37:f4:94:e5:92:56:22:
9c:7f:06:e1:34:5a:31:48:be:ff:5b:3e:75:3f:48:72:01:ae:
a6:9b:87:93:5b:bc:87:c5:0d:14:44:69:6b:15:04:a0:13:a0:
1e:dd:fd:a6:16:7d:92:f2:8d:e7:37:c3:79:5d:7b:69:c7:67:
23:d2:1c:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:48:48 2026 by rpki-client