
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ac75471-9301-4705-9df4-8575aa9e3f5d.roa
File: 8ac75471-9301-4705-9df4-8575aa9e3f5d.roa (raw, json)
Hash identifier: kYyCvNiXeeV+zzj8czW71n/xOlZMirwKnYaieIkGFFM=
Subject key identifier: 12:79:26:46:74:C5:28:6C:47:A2:57:09:EF:96:F9:92:A2:61:5F:7D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 588611DD3033A1D39A68AAB0A0052A61280549D0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ac75471-9301-4705-9df4-8575aa9e3f5d.roa
Signing time: Thu 23 Jul 2026 06:40:07 +0000
ROA not before: Thu 23 Jul 2026 06:40:07 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c4c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:86:11:dd:30:33:a1:d3:9a:68:aa:b0:a0:05:2a:61:28:05:49:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 06:40:07 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=e27a866ddc9320a245129e0032fe483dc3482ff4af633ff581ba0bf0effa5c3d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:00:d8:9d:5b:5d:71:65:a9:9d:65:d6:21:
29:06:ad:35:85:71:63:bd:62:98:40:56:1b:70:8d:
6e:de:1f:60:78:28:52:59:e3:6e:39:4a:e3:99:ab:
cb:d3:b2:2e:99:58:cf:57:2b:4b:f5:a9:00:d7:82:
96:ff:6d:97:bc:39:4c:5e:7d:5f:2d:1f:21:0b:a4:
ae:28:e5:2a:90:97:25:d2:ec:6b:e2:41:7e:89:b3:
db:a8:da:64:f2:b1:74:f8:7a:bc:79:a4:51:80:5d:
b7:69:c5:f5:9e:4f:bb:96:ed:ae:43:ee:aa:2b:5b:
3f:e7:2f:d3:2a:b2:f7:df:2a:b7:f3:4c:db:b6:ba:
50:b8:ab:8d:80:83:cd:e5:7c:ae:40:55:b2:30:07:
f2:a6:eb:a4:6a:28:73:7b:c1:39:29:f5:bf:61:1e:
83:30:95:0e:af:77:f4:b3:1e:85:24:9a:f9:57:29:
0a:d1:e4:0c:f4:d6:de:ea:f9:6b:ec:59:e0:a6:7c:
96:86:64:bf:f4:3d:70:77:e9:9a:a9:68:2a:8e:a0:
4a:e0:31:61:e6:1b:88:db:c2:dc:20:1c:81:c4:6e:
c0:fd:cd:9a:ba:e4:30:34:d7:ed:e4:74:aa:95:1d:
ab:fb:da:b9:87:05:10:af:2c:78:01:15:ed:7e:63:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:79:26:46:74:C5:28:6C:47:A2:57:09:EF:96:F9:92:A2:61:5F:7D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ac75471-9301-4705-9df4-8575aa9e3f5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c4c::/46
Signature Algorithm: sha256WithRSAEncryption
b9:db:8e:7d:12:71:8b:66:e8:f2:f2:a0:ba:f1:54:f3:5c:82:
5e:32:53:c9:81:af:c8:4c:31:b1:f2:43:f5:7e:0f:44:a4:a9:
0f:d5:a6:fb:76:46:7b:d4:e1:8c:1f:33:0d:a9:fa:68:45:75:
b1:a0:83:b4:a4:60:95:50:ec:63:cf:f9:ef:67:a2:15:45:f8:
eb:aa:91:6e:4c:28:e3:02:48:a3:dd:ca:5d:f5:c0:a0:da:58:
8f:cf:53:e2:fe:d0:5f:49:3a:fa:89:f5:8f:46:0e:65:72:51:
bd:35:4b:e0:31:0f:41:5d:fa:ad:a0:1c:77:09:2d:50:71:ca:
62:b5:10:79:db:e2:01:de:2d:68:04:38:35:82:47:6e:3e:be:
43:e6:f0:46:2e:14:f7:81:86:33:49:4e:30:c5:18:14:35:54:
25:4c:46:d0:61:d1:a2:0a:7c:30:8b:75:7e:1b:67:f6:27:95:
30:d3:78:a0:3f:ee:c9:14:87:3d:aa:81:02:db:a0:68:f4:66:
6f:39:a5:70:b0:e3:43:d4:19:e9:fd:c2:b1:c9:98:ef:26:ad:
db:69:0b:24:1b:2c:6d:60:c3:e0:bf:3d:39:33:f1:ad:72:7b:
40:c6:e8:46:16:1d:02:92:25:cb:b3:1c:be:f1:32:a0:d3:2a:
fd:c3:dc:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:14 2026 by rpki-client