
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/68a65e6a-c8cb-43a3-ba7c-7c5cb5ad42d7.roa
File: 68a65e6a-c8cb-43a3-ba7c-7c5cb5ad42d7.roa (raw, json)
Hash identifier: aAt9BCRRH/6IH1k0v/Z1K47eqJcBKsJLUqcMwKcXxVo=
Subject key identifier: 3B:C3:18:97:64:D1:21:14:63:17:4A:30:DF:02:F9:AB:B7:5F:EE:76
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 214C2B80708AD9A86D7FC384CDD7B88952107ACA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/68a65e6a-c8cb-43a3-ba7c-7c5cb5ad42d7.roa
Signing time: Mon 04 May 2026 02:40:57 +0000
ROA not before: Mon 04 May 2026 02:40:57 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:38c8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4c:2b:80:70:8a:d9:a8:6d:7f:c3:84:cd:d7:b8:89:52:10:7a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 02:40:57 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=7da823acfb646f993f6d94539a15a8c29f824b0183822dadddb37551a29bf168, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:55:92:b1:7f:9c:71:bd:b0:3d:06:66:39:
aa:f1:19:fe:fc:1a:52:48:5d:cf:dd:0f:6f:49:47:
00:39:24:7b:9c:6c:78:e5:81:e2:a1:61:ff:2a:c0:
bc:d0:49:20:05:48:6a:9e:d7:d3:11:70:0b:31:0a:
7f:45:9f:f8:c5:80:0c:e8:9c:9e:59:9c:73:86:c0:
fc:76:3b:0e:85:e2:4d:28:d5:b6:82:bb:83:31:cb:
8f:bc:f0:72:38:a8:2f:32:78:76:09:03:09:ac:39:
7a:d5:8d:00:7c:0a:f0:91:a5:5c:a7:2c:5c:e1:06:
21:bf:d0:a6:99:0e:d5:dd:3a:61:2b:83:b7:2e:54:
42:95:32:e7:c2:bd:dc:a1:0a:93:04:f0:ae:9f:07:
e5:48:fd:79:82:ee:1d:a6:35:e5:b8:67:26:2f:98:
20:a7:d4:9f:16:0a:82:00:c1:2f:96:88:b8:95:4b:
50:b8:8a:81:22:31:25:05:ee:d4:5b:21:11:d3:6c:
80:13:e5:88:94:1f:7b:ad:f0:71:8c:8e:11:19:43:
96:f2:8b:e1:1f:d5:48:1a:ad:0b:ec:4d:9b:88:5d:
84:39:b7:07:62:e7:c4:84:57:2e:dc:ab:ee:c1:d0:
cb:89:da:22:55:ee:d9:60:45:e7:48:0b:68:9a:e0:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C3:18:97:64:D1:21:14:63:17:4A:30:DF:02:F9:AB:B7:5F:EE:76
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/68a65e6a-c8cb-43a3-ba7c-7c5cb5ad42d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:38c8::/46
Signature Algorithm: sha256WithRSAEncryption
87:76:8b:81:e5:9e:74:49:bc:da:ed:e0:b3:57:bc:74:d6:ba:
65:bf:7d:bc:18:3e:6c:62:54:02:44:ac:0d:b4:8e:15:00:00:
89:40:a7:b8:a5:5b:ed:3d:e0:b8:a8:c9:11:c9:97:07:66:f1:
e1:ac:cc:d9:3c:8a:ad:54:fd:4c:bd:a4:88:47:da:6f:b2:b8:
01:a0:cf:80:b3:b2:03:3d:e3:34:73:d9:5a:56:3e:98:95:42:
85:3c:96:93:c5:33:53:5e:ab:27:78:27:7c:6b:12:39:95:61:
84:e3:72:6e:89:ac:5a:63:16:e0:ce:b8:c7:50:1d:6f:89:d3:
fa:0b:ab:5f:7d:41:be:0b:18:f6:33:9b:79:d7:1b:00:f9:4d:
66:fe:5e:f4:ca:ba:9f:a4:59:f3:72:16:26:9b:c7:49:1a:ac:
d9:cc:ee:a8:3a:cc:b2:8e:82:a2:57:32:41:3b:92:19:cc:04:
e9:c0:5d:a0:50:7e:c7:98:3f:30:1e:3f:35:7d:76:4d:03:a1:
19:65:ab:e6:ab:0d:fd:46:e5:5e:7a:f2:09:17:47:7b:ea:95:
26:31:2f:49:4b:ea:40:97:84:68:17:d9:89:28:ba:fd:10:6f:
19:1f:67:74:59:c0:61:21:48:c5:15:74:a3:dc:49:89:5c:fe:
df:ab:a7:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:43 2026 by rpki-client