
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90434b42-c46f-4888-a144-2cf1826fa508.roa
File: 90434b42-c46f-4888-a144-2cf1826fa508.roa (raw, json)
Hash identifier: O7XcQzdkC0NI4prJi+HEvdS1oVCBOlrnZKwHfRDj4gQ=
Subject key identifier: 8D:E4:3E:F4:C2:F6:4B:80:61:03:C6:26:19:0F:3A:71:6A:D5:9B:6A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 35E66B41C1AB632209344B50F534C28A2B0E2C31
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90434b42-c46f-4888-a144-2cf1826fa508.roa
Signing time: Mon 04 May 2026 11:12:13 +0000
ROA not before: Mon 04 May 2026 11:12:13 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3860::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e6:6b:41:c1:ab:63:22:09:34:4b:50:f5:34:c2:8a:2b:0e:2c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 11:12:13 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=cc52cab06adf8d2a476c74e2853c7c70abae52f6e022132960d1454434344764, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:d9:3e:cf:1a:5e:ed:0b:78:e4:34:41:49:
7a:03:2a:5f:f6:e0:ad:d5:ea:2b:f1:df:59:57:d8:
20:29:47:fb:5f:ba:52:39:7d:ec:06:2e:8d:67:53:
6d:8f:07:92:6a:a8:fa:16:ac:8a:3f:c5:94:67:67:
f1:44:7a:27:fc:07:ba:96:4a:f7:9f:65:de:d9:ec:
35:5f:00:6f:98:14:a8:36:8d:e2:e8:43:44:46:59:
e9:6e:e5:5d:ee:58:60:71:56:e3:a2:28:9d:2b:33:
c9:04:7e:49:76:33:33:c5:15:30:48:4e:28:1b:42:
70:c0:fe:71:ee:7a:ed:49:56:da:b0:e4:1f:f7:50:
8c:2f:b7:b4:e0:d0:d7:da:b9:35:3c:b7:d0:f8:d4:
f5:4d:4c:de:80:ff:57:63:78:7d:17:ad:e4:55:5e:
7f:b5:1c:22:26:45:bd:71:03:a5:69:f0:62:c3:54:
f8:f9:8e:0c:5c:6a:37:16:cf:35:9f:52:77:76:1c:
31:21:be:7f:52:f2:18:2f:24:c5:a8:19:28:f6:e0:
59:9e:f2:96:3a:e7:9e:1f:b5:70:a0:0a:9e:3c:50:
06:88:d3:56:28:31:87:74:35:98:9a:e5:4b:99:5c:
4a:23:e2:5e:4d:56:ff:a2:11:8c:a3:ce:d8:ba:46:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E4:3E:F4:C2:F6:4B:80:61:03:C6:26:19:0F:3A:71:6A:D5:9B:6A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/90434b42-c46f-4888-a144-2cf1826fa508.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3860::/47
Signature Algorithm: sha256WithRSAEncryption
0a:8b:ec:8c:9b:9c:7d:f5:48:b2:fc:b2:3a:0f:c8:08:fd:d2:
87:46:39:51:d3:3e:61:85:68:e0:5d:e3:1b:50:6e:bf:b0:12:
c9:0a:0e:7d:bd:04:0a:e2:8d:58:78:3b:9e:7e:54:79:01:84:
43:ac:22:90:06:5e:9c:a2:c3:21:4f:08:3f:a8:58:ee:d1:4f:
30:1f:fd:23:48:d9:d6:85:f9:0a:ff:2c:9d:09:fc:98:97:26:
f0:54:c2:9e:29:93:b2:3e:93:d5:70:97:c6:c3:2c:24:a4:fa:
c3:da:ac:0e:08:d1:3a:1c:9d:59:47:1b:fa:3b:ce:37:89:3f:
a0:09:70:b7:dd:ee:c3:fd:1f:c8:62:86:37:d3:5c:17:30:b6:
46:d8:13:86:52:29:4b:ef:79:de:2c:af:0b:c5:14:dd:c9:e4:
e0:b0:ce:70:99:85:60:a7:a7:d4:a8:11:d2:9e:75:6c:c5:fc:
57:00:4b:7e:5d:dc:87:d8:e6:ed:f9:c7:11:52:10:c9:3e:a2:
d0:bf:56:7f:6f:87:ef:0b:ef:8b:b9:b7:05:1b:7a:9c:5a:6b:
30:94:81:f8:8b:a5:05:3d:60:e7:1d:65:12:58:fa:99:25:8d:
19:c0:ef:36:96:8d:40:a4:c9:7b:b1:ec:0e:13:62:f6:df:6f:
2f:78:0b:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:04:01 2026 by rpki-client