
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/748268f4-4418-40ea-a969-6a682e22bacf.roa
File: 748268f4-4418-40ea-a969-6a682e22bacf.roa (raw, json)
Hash identifier: fnvaCMrFS1zbQDmmpkcx6U9h2tVmykeopYc9UqkggUY=
Subject key identifier: D6:36:D1:03:4A:06:16:E1:AB:5C:BB:1E:C1:12:FD:4B:CC:36:7C:20
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 434A9C6BE7FFF045014283064AB557DA9DF4429C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/748268f4-4418-40ea-a969-6a682e22bacf.roa
Signing time: Thu 23 Jul 2026 10:02:10 +0000
ROA not before: Thu 23 Jul 2026 10:02:10 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f90::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4a:9c:6b:e7:ff:f0:45:01:42:83:06:4a:b5:57:da:9d:f4:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 10:02:10 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=c8d8d27d4f214d96daf6e197103881b18ccf0066df8553e3f1200f8b2607d701, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:c2:d6:3f:b7:9c:c0:3e:cf:32:f2:4c:0e:
ae:fa:44:dc:34:66:49:db:00:35:60:7d:4b:52:05:
34:67:6c:fd:53:29:ab:37:08:a6:c5:a7:56:c9:ce:
dc:7a:26:43:7c:e8:2a:3f:7f:1a:e0:f4:df:f4:2b:
79:68:28:d7:f1:4b:82:64:27:de:f9:ee:7a:2d:ee:
bc:d5:be:81:94:75:0d:37:c4:12:b8:64:df:19:7c:
78:4f:91:5f:97:e4:e1:b6:59:ea:5d:81:d3:ee:54:
4e:06:f2:9a:97:69:50:b2:9b:2d:69:69:26:8b:e2:
86:52:d2:06:a3:69:d5:ac:0e:9e:ea:b8:ff:e5:1a:
80:2c:db:7a:47:6f:73:1b:75:b3:35:65:2b:fa:92:
22:f7:54:00:59:49:ce:e3:e6:df:7a:e3:5b:fa:d6:
3f:7f:9a:35:58:62:75:49:59:34:eb:3a:ae:d9:6a:
d3:38:e7:62:b9:6f:ec:27:63:3e:bd:f8:35:a8:86:
30:f8:91:3e:f5:19:a8:6c:fe:23:da:26:fb:62:01:
36:56:2b:a8:30:31:1d:d2:fa:fe:d1:f5:6c:12:c3:
be:c3:7e:94:96:b4:ad:df:6a:56:9a:48:64:5b:34:
25:de:8a:38:8f:d5:ce:c5:b6:45:d0:fc:de:21:c4:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:36:D1:03:4A:06:16:E1:AB:5C:BB:1E:C1:12:FD:4B:CC:36:7C:20
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/748268f4-4418-40ea-a969-6a682e22bacf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f90::/47
Signature Algorithm: sha256WithRSAEncryption
9f:9a:d1:56:ac:85:2b:a3:33:67:9a:c8:84:01:79:7f:5b:a2:
aa:ab:be:c2:31:bb:59:24:78:74:ee:9e:96:6b:2c:d8:2b:e3:
e4:94:c2:f2:14:35:5c:67:1b:a0:c2:b5:0c:e2:b2:65:33:d3:
af:4e:3e:51:01:57:ac:fc:39:41:18:7f:5a:fb:71:d8:69:08:
5c:e0:c8:a7:b7:e7:cd:0e:83:f4:03:08:0d:a5:dc:89:8d:ce:
6d:f0:d6:4a:bb:94:7e:50:6f:83:76:38:f7:ed:b3:96:65:51:
2b:6a:57:da:e9:a1:2a:fc:1c:35:7c:5c:dc:8f:85:74:45:41:
1b:25:47:5f:22:2c:6a:af:5a:18:d6:39:31:83:b1:a6:0e:98:
fd:1a:e3:ca:2e:9f:36:7e:31:bc:85:44:73:39:ed:ae:64:66:
94:bf:6b:3c:88:2c:57:24:3c:8e:50:02:c6:06:ef:91:25:3d:
cd:8f:74:80:32:99:3e:e6:f1:12:e6:c0:f4:e5:2f:4c:50:4c:
df:0b:cc:3b:0c:71:5b:6b:6f:4f:90:51:35:8d:06:50:7f:1b:
f3:f7:87:53:90:21:4f:cf:86:e4:4b:6a:80:02:70:65:27:09:
96:51:52:89:4e:11:22:66:97:97:28:91:90:a4:46:bd:6e:d8:
8a:47:34:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:34 2026 by rpki-client