
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/84f2f947-82ee-4894-b165-d55845b47d73.roa
File: 84f2f947-82ee-4894-b165-d55845b47d73.roa (raw, json)
Hash identifier: dQ3yKfO57fGQUxGie2ac2qZExGWGM9qMptraTeT5rDs=
Subject key identifier: EA:E1:DE:E1:39:60:71:DD:FB:FB:BF:63:D8:65:AF:A1:40:39:31:C6
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 08FAB9F02405F615338629D8A11F7EB6C64355A7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/84f2f947-82ee-4894-b165-d55845b47d73.roa
Signing time: Thu 23 Jul 2026 09:11:34 +0000
ROA not before: Thu 23 Jul 2026 09:11:34 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d2e::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fa:b9:f0:24:05:f6:15:33:86:29:d8:a1:1f:7e:b6:c6:43:55:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 09:11:34 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=226ceafbf1d204ba3e6358a80f8b406f25ba8ce95cf625098a920e881daf8b76, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:c1:28:1e:db:e2:02:82:e6:36:ed:87:f1:
79:ec:13:5e:44:26:7f:0a:8c:9e:b8:6d:e9:03:67:
73:34:9e:cc:ea:0e:25:0e:55:0b:06:7c:3c:27:47:
d8:d1:f2:b4:0f:83:60:1e:58:a4:86:e6:b4:f9:7b:
74:1a:e2:d8:27:06:38:c5:a9:e6:2c:a3:cb:a9:e9:
93:85:b3:a9:2c:6b:7e:13:97:6a:bd:3b:75:60:b5:
0c:c4:48:de:a8:8c:1b:53:78:63:51:43:fb:4f:50:
9d:7b:66:9a:c0:31:15:5e:b7:69:66:3c:88:47:2e:
20:00:18:a6:3a:25:26:c7:40:e0:dc:c1:3e:fe:84:
bd:d6:71:65:ae:2d:8a:3d:a1:9e:51:48:35:64:d8:
3e:97:c7:81:f6:bd:41:f1:b4:df:94:9b:45:1d:17:
2f:ce:71:4a:f7:26:96:88:bc:90:94:ee:b4:6e:7b:
04:86:6f:3f:7e:40:c4:d5:41:08:a8:1a:d7:64:0b:
fe:b2:47:12:a0:e3:6f:6a:01:0e:6c:43:c4:12:6c:
b8:ee:45:0f:a1:2e:d1:d0:f9:09:c9:0d:0f:09:0d:
47:2f:f1:00:fe:a3:0c:fe:d2:ee:cc:3a:ee:dd:3f:
29:c1:60:a1:1a:d1:eb:0e:79:eb:f0:26:eb:a0:42:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:DE:E1:39:60:71:DD:FB:FB:BF:63:D8:65:AF:A1:40:39:31:C6
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/84f2f947-82ee-4894-b165-d55845b47d73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d2e::/47
Signature Algorithm: sha256WithRSAEncryption
be:f7:40:f1:3f:c7:70:57:e2:b1:bd:63:1d:7b:2f:05:4e:89:
32:80:bc:14:b8:7f:22:f3:98:3d:33:17:53:d0:bc:c0:b5:00:
6f:99:5b:88:ff:66:26:c3:89:2e:1e:fe:c1:5e:51:85:37:b4:
24:60:2c:14:07:40:ec:2c:3a:3f:f3:da:30:57:8f:72:c0:84:
b5:e6:76:6a:af:cb:00:7d:9d:74:7e:45:27:cf:61:18:49:00:
8b:d7:75:7c:80:0f:72:8e:fb:80:0d:92:7d:19:00:81:29:0f:
48:cc:b4:71:b4:c0:f3:0b:0b:1c:8e:37:2d:24:d2:2a:4f:e7:
60:7e:1f:b8:7f:94:69:87:b1:eb:00:9d:63:07:76:6a:35:da:
97:01:79:22:9b:64:7e:6c:69:c7:31:22:20:f4:19:ae:81:da:
26:d9:9b:19:4f:40:bd:ec:de:3b:4c:84:03:02:c6:9f:f3:5b:
05:32:ac:ea:38:c1:86:6e:e7:6c:14:82:90:3d:65:19:61:bf:
59:a8:fd:d5:dc:8c:a9:99:b4:f9:ea:9f:08:09:ff:4b:bc:9e:
8b:3b:d4:04:f6:56:67:db:2c:cd:f6:a4:51:5c:e3:7b:ae:0d:
32:6e:5d:63:08:f6:db:42:f5:69:77:45:be:55:84:c2:45:f4:
60:4a:fc:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:22 2026 by rpki-client