
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/821b45c5-0b33-4d34-962c-27577b7bf2b5.roa
File: 821b45c5-0b33-4d34-962c-27577b7bf2b5.roa (raw, json)
Hash identifier: E0PXeAZOGGL8RavGVaehA1829Vx4XYkPJKp0uy9e1gw=
Subject key identifier: DD:3B:C6:BE:55:5F:FE:F4:AD:42:D1:17:CA:DC:A8:E6:38:17:66:57
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4578F163CDE73AA55469AE94DE2F8F9F1241F00D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/821b45c5-0b33-4d34-962c-27577b7bf2b5.roa
Signing time: Thu 23 Jul 2026 06:51:02 +0000
ROA not before: Thu 23 Jul 2026 06:51:02 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:32a0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:78:f1:63:cd:e7:3a:a5:54:69:ae:94:de:2f:8f:9f:12:41:f0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 06:51:02 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=fe85516bd2ad7a7c10b7fd41c16c9af1a4b0c7059c5208a43a27cda6d8476673, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:79:67:cf:e3:c0:d4:7e:5c:26:e1:c9:a3:
8b:e4:df:ba:28:16:cf:4c:e6:cb:a9:73:9f:ca:09:
40:86:3a:21:b1:26:12:24:82:00:30:88:50:23:4e:
88:f2:b2:09:0b:3f:de:19:e7:d5:21:2b:63:3c:6d:
5e:65:25:27:0b:ca:69:65:3e:64:b5:a1:cd:93:db:
f6:27:c9:63:80:b2:2f:38:a3:7a:40:d4:0b:9f:7f:
6a:94:04:ab:41:b8:0e:4f:20:87:3e:09:47:c6:85:
1e:e2:5d:ca:b4:c4:dd:aa:e2:bc:67:fe:a5:29:4c:
c7:6a:bd:20:da:a8:da:71:92:69:65:ca:45:bc:c1:
f7:48:8f:72:e9:c5:ab:01:8b:0c:0a:02:54:60:14:
49:e3:3b:7e:ed:3e:d5:f9:2f:29:b0:fd:22:90:46:
e7:c7:83:10:ea:c7:52:fa:8b:26:ce:9b:18:1c:86:
9e:fd:13:02:a9:26:de:5b:7f:2c:18:5c:08:e6:93:
50:f9:e5:d3:8c:b8:2f:17:45:1a:2a:aa:36:8c:23:
74:e4:7a:d3:92:da:8a:34:a0:f6:0d:8c:5c:0d:3a:
95:47:82:b4:4d:17:df:99:b4:9a:6b:7a:72:8d:5d:
62:2b:ab:27:f1:cc:82:4e:a7:08:23:75:1b:f6:e9:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:C6:BE:55:5F:FE:F4:AD:42:D1:17:CA:DC:A8:E6:38:17:66:57
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/821b45c5-0b33-4d34-962c-27577b7bf2b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:32a0::/45
Signature Algorithm: sha256WithRSAEncryption
43:ed:72:b0:3d:65:cd:f4:f0:f3:fd:0c:6f:c0:e5:00:01:a2:
40:d9:49:73:b2:ed:43:ac:d9:c9:ae:5c:8a:0e:b5:4b:f9:df:
50:4d:fb:8f:83:f4:c9:76:14:3f:56:d7:08:3b:b5:44:b6:ef:
02:e0:60:d7:74:01:05:b8:16:d8:d5:bd:5b:9d:6e:ee:48:ad:
31:b2:62:fc:a3:3f:bc:37:38:07:6e:18:28:c7:b9:3e:99:44:
6c:aa:34:3e:c1:7a:71:3f:d9:cd:1c:94:71:97:8a:28:2d:01:
87:cd:0e:47:dc:ed:9b:dd:de:95:cb:0a:06:6d:20:d5:2e:ec:
97:ed:b7:22:e7:5b:00:8c:33:0c:bd:00:a9:8e:6e:3e:e2:27:
ac:9b:2a:f2:9f:e9:50:a8:6e:4c:92:20:2b:ed:7e:54:a1:e2:
98:ac:25:20:64:7f:c7:07:24:e3:dd:f6:cd:3b:5c:ed:c2:7a:
3c:6c:d3:1e:eb:42:cb:50:47:6d:04:14:44:0d:ed:ee:6e:7a:
21:d6:5f:94:5f:bc:6d:60:75:f5:ed:4b:48:5a:b1:a3:60:dc:
b4:34:99:c7:ff:8f:40:e9:95:21:68:78:0f:26:c9:6e:6d:27:
72:26:0e:1e:49:45:f9:40:a2:6b:57:3f:b0:08:11:af:46:62:
d4:20:6a:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:41 2026 by rpki-client