
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa
File: 8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa (raw, json)
Hash identifier: t+/98UpiHDxG2rRFL70uSmy01ItBON4W1E/4rL2uSMQ=
Subject key identifier: 18:73:4D:7A:D6:07:73:60:D1:6D:39:96:6F:AE:DF:24:C3:73:3B:DD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 79CE35FEC9A77BC85576FDC9499C904856E427F5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa
Signing time: Thu 23 Jul 2026 11:41:47 +0000
ROA not before: Thu 23 Jul 2026 11:41:47 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3790::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ce:35:fe:c9:a7:7b:c8:55:76:fd:c9:49:9c:90:48:56:e4:27:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 11:41:47 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=46c0a5b522d3c166ad99c779c524c5c2870ade1ff5f87c999e0af6c9aa383fdb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:20:22:fe:b8:46:db:89:cf:4a:a1:78:4c:
64:41:b6:2d:db:f3:a4:9c:31:db:6b:3a:55:4c:c2:
14:f1:eb:85:96:c8:3e:5c:37:6b:d5:16:ed:79:c7:
8c:9a:49:23:35:d3:da:37:41:45:99:97:28:68:27:
3c:95:22:cf:23:aa:90:03:30:7b:3f:ca:79:9b:a0:
85:aa:10:eb:40:f9:1f:29:f8:2e:62:ff:5f:cc:7a:
8a:97:d6:e3:59:a2:46:5f:db:05:d6:fd:a9:16:51:
ee:99:11:26:8e:39:64:7b:66:0f:82:4b:61:90:00:
7f:23:e5:fe:8a:3b:57:59:b5:0c:06:54:98:7f:15:
1f:10:85:60:7b:01:26:68:26:5d:0f:ab:f7:24:ff:
70:b0:39:9b:6f:60:87:2d:06:19:ba:19:6c:f8:86:
4e:8c:60:f6:16:9d:3c:0a:a9:2f:65:54:87:42:a6:
a4:46:5d:d7:36:96:5a:d1:2c:9d:88:cf:a9:f4:92:
e9:d7:79:63:4d:40:28:4e:1a:73:02:5b:46:df:d0:
de:ec:0b:40:b6:8d:1e:38:0f:57:0b:d8:ef:1f:7e:
48:c8:c9:c1:ac:e4:a9:67:ec:44:2d:65:25:f9:c2:
0b:9b:24:e1:b0:14:6a:00:39:08:20:68:5a:aa:14:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:4D:7A:D6:07:73:60:D1:6D:39:96:6F:AE:DF:24:C3:73:3B:DD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3790::/45
Signature Algorithm: sha256WithRSAEncryption
46:7a:42:ec:50:9e:55:68:45:b6:fa:e7:97:bc:4e:35:e2:b8:
a1:06:08:df:f6:b0:02:08:f0:fb:6c:6d:19:16:fd:d1:7a:96:
58:15:9f:ff:6c:bd:25:86:18:b8:cf:ad:98:df:94:61:37:32:
ec:02:4e:cc:08:67:84:4f:c3:56:77:f7:fa:80:77:f2:28:7d:
0c:67:9c:0f:90:21:5c:81:d0:02:74:7e:c1:c7:6d:33:01:36:
60:da:75:9c:aa:0d:2d:f7:f5:da:f1:6e:0b:2b:5c:f7:a3:7c:
f6:02:d9:ef:c6:f8:54:72:1c:c7:df:4c:9e:29:fd:23:64:dd:
81:2d:d0:02:ea:57:b3:a8:ce:7b:90:d7:b7:b4:20:47:05:fa:
9c:b8:cd:65:67:92:00:13:74:45:3b:43:e9:e3:34:3a:4e:82:
10:e4:be:0f:5d:02:a7:7f:d1:4e:db:dc:e8:8b:ec:55:38:e7:
9c:70:92:56:0a:cf:d1:48:66:62:ff:35:5a:49:65:67:0c:4c:
2b:bf:3a:f0:7f:72:57:c9:4b:89:66:d4:dc:74:dd:aa:2c:ec:
ea:0e:c1:f4:6f:9b:13:5b:a2:ef:f3:9d:9a:6e:a0:65:c5:c3:
a1:f5:69:95:2b:c5:7e:21:f8:89:fd:41:67:5d:51:97:87:ee:
cf:2a:d2:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:05:27 2026 by rpki-client