
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/95f16873-02d4-47d2-bb9a-8efbe2bce186.roa
File: 95f16873-02d4-47d2-bb9a-8efbe2bce186.roa (raw, json)
Hash identifier: vBgtNH/8eWKENzVucAoHZjBIUJZSY3+SfcQUc5FTzAA=
Subject key identifier: 3B:99:D9:EA:79:AC:61:7B:C9:C7:6B:58:C5:50:B7:04:1D:6A:71:F5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1AC53957F9E78899FB9942EEA1EAC51B11041321
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/95f16873-02d4-47d2-bb9a-8efbe2bce186.roa
Signing time: Wed 22 Jul 2026 02:50:10 +0000
ROA not before: Wed 22 Jul 2026 02:50:10 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a5c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c5:39:57:f9:e7:88:99:fb:99:42:ee:a1:ea:c5:1b:11:04:13:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 02:50:10 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=2ee9e25b4ba9ba78f519bc20a488658a6cc25e1881dee3acee1bd1a160ce01bc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:1a:6f:cb:e1:f7:15:4d:51:e6:0b:62:5e:
44:45:e5:f0:8b:f8:73:73:d4:fd:34:1c:38:4c:1d:
d6:74:2a:26:06:09:c3:83:cd:1f:41:89:e0:b9:15:
d3:26:b0:e5:6e:59:d4:bc:60:09:5a:47:50:08:89:
e0:a9:b0:76:cc:bb:9b:11:9f:0d:4d:53:9f:e7:0b:
c0:4e:fc:90:36:0e:4a:e6:f1:b7:bd:92:05:36:5d:
e0:d4:39:cf:e3:54:73:a5:e6:6b:cf:33:f9:17:ce:
0b:2b:13:34:39:64:05:ef:7a:2e:71:96:b1:50:11:
91:9b:d2:30:cc:b9:19:ff:84:42:17:77:9c:ea:b1:
e3:58:4d:37:6c:54:7c:5a:b1:e0:56:15:ea:97:ce:
93:9d:99:ef:81:59:c7:50:4c:89:bb:70:16:b4:d5:
18:6c:62:d6:4b:15:b8:85:45:5d:02:94:7c:d9:1f:
a0:c7:9a:4a:0f:6e:75:44:4b:c7:43:fe:12:19:c6:
92:b4:ea:bc:b3:10:46:da:0a:38:af:5e:ae:ab:1d:
42:74:2a:70:1e:67:9c:b8:e0:f9:ba:f9:dc:a1:bd:
39:53:ff:fe:a3:2a:0e:5d:d9:8d:21:9c:47:a1:35:
a8:48:c5:c9:5a:07:6a:ef:37:3c:d6:7a:3c:64:e3:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:99:D9:EA:79:AC:61:7B:C9:C7:6B:58:C5:50:B7:04:1D:6A:71:F5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/95f16873-02d4-47d2-bb9a-8efbe2bce186.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a5c::/47
Signature Algorithm: sha256WithRSAEncryption
26:6a:eb:40:33:df:ff:64:28:8b:5b:61:34:c5:f8:64:4a:d6:
69:f9:b8:aa:96:49:c1:9e:18:18:02:e8:24:ab:ae:6e:c6:99:
8c:92:4d:f9:06:85:01:95:3f:86:c0:12:6a:cb:4d:73:cb:60:
9f:58:d0:e2:ec:41:ea:71:e7:2a:6e:99:9a:91:9f:81:6c:90:
49:64:ee:14:65:c2:32:b2:7a:69:ab:90:64:28:5f:97:7a:03:
9e:3c:01:90:ba:c6:96:5d:13:c2:bc:dd:08:f4:41:74:50:ff:
43:ad:c8:a6:c0:af:f8:a9:8a:76:a4:a8:65:60:44:60:2d:56:
93:8a:65:8f:43:f5:e7:c7:2e:5a:f6:71:77:b7:d1:05:c2:ba:
79:f8:69:29:0c:34:91:ac:16:a6:c5:7b:5a:3b:82:e9:93:54:
0c:dc:d4:2f:b0:50:87:91:e7:7d:d9:e3:2e:44:c9:70:c8:ac:
e6:be:cb:7b:b5:e3:b3:1e:9b:bf:fe:01:be:ab:d0:e4:14:69:
64:1f:e3:4f:88:ed:b7:d5:d9:07:ae:b4:c9:e4:50:46:a6:55:
53:52:8b:d4:11:d9:52:6d:ff:80:dc:4c:ad:25:0e:8c:77:fe:
77:e7:42:de:ca:54:8c:f6:71:63:d4:7f:bf:eb:9f:62:b7:95:
20:1e:fc:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:46 2026 by rpki-client