
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64cd6bdf-02f3-45c5-a4db-5133df93db84.roa
File: 64cd6bdf-02f3-45c5-a4db-5133df93db84.roa (raw, json)
Hash identifier: VP25qRVTyk/lj53PJ8LoHhhs68qYYYqz2ShzPLhNcWs=
Subject key identifier: F7:D1:D1:B4:92:A4:60:DD:CA:3A:0F:B9:08:48:F1:34:49:30:E7:E7
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0C89FD42825B66475D569667A0A6434287749B6A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64cd6bdf-02f3-45c5-a4db-5133df93db84.roa
Signing time: Wed 22 Jul 2026 00:40:58 +0000
ROA not before: Wed 22 Jul 2026 00:40:58 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:29c4::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:89:fd:42:82:5b:66:47:5d:56:96:67:a0:a6:43:42:87:74:9b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 00:40:58 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=3eba8c476a47b40f978539b8e402e9be496ff57d19db91f36ec81e97fe70f51f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:2c:3d:74:b5:e6:69:c6:bc:8b:fe:f3:ae:
bd:dd:bf:24:62:21:f7:46:4f:6c:02:84:60:8a:7b:
44:35:03:da:38:98:95:f1:b3:76:87:75:e0:ce:fe:
e2:e8:29:e3:f7:ef:ab:fc:0f:68:a9:0f:06:c3:73:
dc:8a:b6:dd:38:9b:ce:2f:58:9d:06:50:1d:e1:78:
5f:d4:1a:df:88:9d:fa:da:fa:ca:44:f5:4d:5f:c1:
8a:27:aa:11:84:6c:65:8e:17:3c:6b:0a:c6:5a:e7:
8d:a2:8c:47:53:37:e9:be:ed:81:5a:1c:01:5c:d5:
e7:70:e8:9d:05:93:95:8a:96:47:dd:b2:32:89:9a:
53:3c:75:30:ed:5b:bc:1f:f1:55:92:22:35:98:77:
8c:f9:da:8a:94:84:76:37:2b:5b:d0:2a:2b:90:20:
5f:a8:55:ca:57:c3:61:d9:17:07:ac:77:ff:dc:d7:
7e:08:e5:73:3b:d2:7b:87:d4:05:00:f0:96:0a:9d:
1e:44:b9:21:b7:a1:3e:4c:ad:3f:bd:9e:37:e5:c9:
b1:ea:8c:fb:ef:7e:85:a3:9f:52:23:12:85:c0:78:
24:d0:d6:f1:04:64:8a:b6:fe:65:67:f5:e1:75:53:
a7:8f:c8:b4:aa:46:a3:5c:b5:64:cd:cd:ef:8d:ec:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D1:D1:B4:92:A4:60:DD:CA:3A:0F:B9:08:48:F1:34:49:30:E7:E7
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/64cd6bdf-02f3-45c5-a4db-5133df93db84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:29c4::/47
Signature Algorithm: sha256WithRSAEncryption
c0:c2:54:b0:7a:99:22:6e:ec:e5:09:4d:20:dd:99:74:0f:2f:
68:a8:93:63:65:b4:59:4f:78:75:de:d0:5b:db:fe:2f:eb:61:
02:1a:24:d4:e6:7f:4e:2c:8e:07:e9:40:7b:aa:82:3d:08:16:
67:06:55:04:38:de:b0:62:b4:46:eb:91:36:fe:73:09:06:03:
16:79:e1:27:a2:13:98:31:06:b1:ea:14:30:6e:b1:37:21:1d:
0c:d0:1d:f5:c0:ee:5e:83:87:44:8a:6f:5e:74:72:26:4d:de:
99:7b:b1:31:fe:83:6e:d6:b6:bf:77:b4:84:3b:a0:2d:e7:4f:
a4:f8:13:6b:cd:e5:ff:0c:0d:33:91:10:4a:97:32:8a:6f:26:
48:a9:56:0b:29:c2:42:c7:fa:b6:73:71:a8:99:99:3e:99:dc:
46:8e:4d:d1:c5:c2:a7:4b:81:4f:a9:38:c1:3d:94:e8:c2:ba:
b0:a3:4a:0a:8c:4d:0a:b5:1e:16:c5:06:52:c3:cf:bc:62:f2:
d6:a2:e8:ba:81:89:1f:5c:45:f8:d2:af:0a:74:21:bb:92:54:
fd:57:73:75:e9:c1:a1:a6:12:5f:c5:e5:57:98:47:0a:a2:31:
3c:94:46:99:61:d2:82:83:1c:e6:fd:09:3e:3d:b2:90:4c:47:
c5:8a:08:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:28 2026 by rpki-client