
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8f96c8ee-1915-48a5-93be-fc13aa48d709.roa
File: 8f96c8ee-1915-48a5-93be-fc13aa48d709.roa (raw, json)
Hash identifier: K/2Tq6aQvVEfMtrm08/+5f1H+i/2u/iopZ53U3ux7MI=
Subject key identifier: 3B:A0:0C:86:F0:D8:5A:65:C0:01:7D:B2:37:C3:7D:33:02:59:55:11
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 158F21DA03371E6AF217ACA072B6D0351348FE13
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8f96c8ee-1915-48a5-93be-fc13aa48d709.roa
Signing time: Thu 23 Jul 2026 04:20:32 +0000
ROA not before: Thu 23 Jul 2026 04:20:32 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3ba2::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:8f:21:da:03:37:1e:6a:f2:17:ac:a0:72:b6:d0:35:13:48:fe:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 04:20:32 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=48e2544b5de3fd5011c55d5b0638459101bd51f1621117664f72d270aa234905, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:3f:c8:b0:e6:b6:e3:41:27:bc:cf:6c:8c:
6f:2c:af:97:3c:57:ee:5d:72:e1:f3:47:fc:44:d6:
87:16:3e:2b:e9:ea:55:58:61:80:64:1a:02:ad:4e:
e1:8c:0b:48:2a:89:7a:82:92:39:35:1d:1b:7b:b2:
65:39:4a:ba:b8:fa:11:cb:e4:de:3b:79:3d:82:0e:
48:50:94:17:c6:d5:ee:1a:51:3d:2e:71:e0:5b:75:
58:8e:fb:44:07:6c:d0:ae:a2:ac:63:35:32:98:bc:
05:db:f8:a5:58:87:8b:3b:00:d7:04:ec:c0:60:07:
c4:2b:fd:17:eb:70:4d:64:d3:fd:0f:a0:1f:c0:a3:
4e:1c:7c:1a:7c:ba:a8:f0:21:29:f4:49:c1:8b:4d:
d4:db:d8:c1:1b:af:46:fe:ae:27:43:db:76:69:b2:
8d:4b:03:00:9c:a9:4b:41:ad:ca:4d:4d:de:cf:ce:
a3:d8:94:4d:f8:d7:b8:ef:06:ac:36:32:ed:69:16:
85:f8:d6:4f:44:25:e2:19:6f:c6:38:76:70:ae:dc:
cd:de:5d:f5:06:dc:28:36:bd:31:d8:14:9a:bb:e6:
99:08:96:ea:97:f9:ae:4f:cd:c1:0d:fb:ac:e0:01:
71:d5:e0:10:8c:04:2d:54:69:ea:bc:69:14:f9:ff:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:0C:86:F0:D8:5A:65:C0:01:7D:B2:37:C3:7D:33:02:59:55:11
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8f96c8ee-1915-48a5-93be-fc13aa48d709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3ba2::/47
Signature Algorithm: sha256WithRSAEncryption
42:56:13:73:43:8c:cd:ce:1e:a9:6d:93:6e:78:03:8c:17:35:
41:07:ce:8f:1b:db:3a:21:0a:1b:ed:ac:7e:5f:ce:37:54:4c:
ad:73:cf:e3:2e:a6:31:c8:10:47:f7:e7:21:69:7d:d6:44:e9:
a4:f8:b8:d7:fd:f2:9f:76:e7:4c:12:90:41:f7:7e:95:26:df:
43:dd:a0:05:07:2a:d2:06:27:14:9d:4d:0c:22:49:1a:73:eb:
25:e6:6e:b0:2d:f9:4c:4d:58:26:cb:21:34:06:dd:d3:11:c6:
af:9a:4b:b5:a1:20:c2:a0:56:44:0f:06:a3:30:4b:25:1b:06:
66:10:b7:c8:0a:7b:ae:c7:71:16:8e:88:42:db:cc:5c:08:86:
d9:0e:cd:14:5c:9a:c3:59:5d:29:ac:46:f0:58:5e:7b:25:1f:
b8:cc:a8:20:7c:9d:a0:f1:46:89:15:4d:3d:17:dc:1c:d2:34:
32:6b:7e:0c:b6:a1:36:59:43:cd:ee:a9:87:e4:9e:5c:aa:e2:
b6:0c:43:80:12:51:62:92:85:40:43:c0:2b:a8:5b:98:07:f7:
00:aa:f6:03:84:28:d8:9e:c1:a8:d3:8c:ac:c7:db:05:0b:8a:
39:6f:66:e5:84:e6:20:8d:39:36:37:da:15:96:41:25:1d:53:
37:c2:8e:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:18 2026 by rpki-client