
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d7929ba-2a45-4958-9b22-a255c74bac45.roa
File: 8d7929ba-2a45-4958-9b22-a255c74bac45.roa (raw, json)
Hash identifier: Q4rGzR5Q/JoMsG9MzNH0bvAFOpLMk2XHsbxKie5Xrc8=
Subject key identifier: 1B:34:0E:1A:12:02:D3:B6:5D:47:0C:EF:3B:40:1C:80:2C:C5:1E:59
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 69747D1FBC340F91DEFF6F47AEA8EAE2803A57A0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d7929ba-2a45-4958-9b22-a255c74bac45.roa
Signing time: Thu 23 Jul 2026 10:11:21 +0000
ROA not before: Thu 23 Jul 2026 10:11:21 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3aac::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:74:7d:1f:bc:34:0f:91:de:ff:6f:47:ae:a8:ea:e2:80:3a:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 10:11:21 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=56ca5512f78e24a9562831e7a1f8abc1ac6563bc0d7daf648b827e5faa9ae493, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:2f:56:9b:a4:ab:15:2a:dc:33:73:82:1a:
29:10:48:7b:2e:35:77:27:97:68:91:bd:8c:cd:c4:
12:49:eb:92:17:f6:98:ed:5a:24:6d:e5:a6:6f:e5:
1e:6c:05:4c:e4:6f:fb:2f:b6:77:15:a4:52:63:33:
ef:e3:fb:41:d8:57:e4:29:67:5c:ce:a8:b1:b2:51:
c7:c2:a0:52:07:dd:7f:41:3b:e9:b7:c1:5b:25:a0:
6e:3d:96:cc:d0:17:bd:db:de:3c:ec:37:e5:0d:fc:
90:0a:9a:a5:7a:80:53:ae:48:56:cd:3d:93:64:95:
18:25:1c:0e:1a:d0:8c:d9:ab:e4:92:b8:32:b3:2c:
1e:e8:c0:53:b6:ab:4c:b9:bc:f3:fb:0c:1c:5c:8c:
ca:9d:80:57:cc:5d:cf:0b:a6:3f:14:a1:73:bd:30:
57:d5:73:db:d1:7f:c9:81:39:cc:61:75:33:c4:91:
8b:51:20:67:f9:0d:89:74:1f:87:31:cc:5e:40:55:
79:5a:d9:4a:9f:df:2c:e9:b2:00:12:e7:11:04:95:
87:3c:17:4e:87:d1:2e:85:97:9b:79:0e:16:e3:57:
a9:b3:3d:3c:28:9a:9e:03:ec:5b:f3:15:9c:62:94:
3d:b8:c5:fb:92:78:6c:8c:6f:0e:84:7d:6f:67:f0:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:34:0E:1A:12:02:D3:B6:5D:47:0C:EF:3B:40:1C:80:2C:C5:1E:59
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d7929ba-2a45-4958-9b22-a255c74bac45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3aac::/47
Signature Algorithm: sha256WithRSAEncryption
1a:27:7f:87:a7:20:e8:78:fa:07:c7:73:3d:36:20:bd:81:1d:
a6:59:6d:f2:d3:93:44:08:2a:28:28:49:fd:7d:ca:3b:e9:bc:
dc:cb:aa:d5:3d:96:81:f4:0f:29:99:ea:d9:5c:e9:24:4c:ba:
19:90:c1:7d:04:05:80:75:5a:ed:cd:b0:9e:dc:40:79:53:d3:
ee:fc:e9:fa:b9:1e:04:9e:ca:38:83:2e:15:d6:26:52:e9:88:
d2:0d:28:8d:af:bb:de:a7:cb:76:98:dd:5f:e6:2b:51:d1:da:
bc:2e:49:6e:0a:cf:a8:1e:00:06:7e:26:2a:12:1b:25:8f:ee:
7c:02:55:8d:10:7d:41:06:03:bf:a7:de:3e:cc:9c:c9:83:af:
5b:02:59:b3:a9:2d:56:5d:82:cd:74:c5:4f:2a:e9:44:35:9d:
5d:bd:e6:d0:03:6d:22:28:38:70:a9:04:03:f6:4d:27:bb:f3:
16:2d:54:87:b0:09:e2:f6:d2:c8:61:bf:d8:1d:ad:5e:ec:dc:
a9:69:77:35:f6:40:c9:ca:54:c4:71:9e:57:64:a0:d5:6f:88:
af:dd:f4:af:94:27:d8:1a:70:a8:3f:36:22:7a:0a:f6:56:94:
63:1d:c4:fd:48:2f:10:c6:4f:55:15:28:e0:e6:a5:5e:7a:e7:
b8:74:5b:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:09 2026 by rpki-client