
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/971ac71e-b151-4416-8723-7c43df8ea0a4.roa
File: 971ac71e-b151-4416-8723-7c43df8ea0a4.roa (raw, json)
Hash identifier: WhGMvq4FPF7RwC5PaNNTCDl+KOfI0uFVWh7o2crQWCQ=
Subject key identifier: 75:9A:E7:AA:A1:F3:91:EE:DE:99:20:10:21:36:3A:C9:19:20:AB:4D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4B795CDAB479E4EB1DCC1989D6F21F3FF3163F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/971ac71e-b151-4416-8723-7c43df8ea0a4.roa
Signing time: Mon 04 May 2026 06:21:16 +0000
ROA not before: Mon 04 May 2026 06:21:16 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d78::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:79:5c:da:b4:79:e4:eb:1d:cc:19:89:d6:f2:1f:3f:f3:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 06:21:16 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=01cf97da252f5831af659f8eba58d4473f56658d5c85bafaee11943e55086e66, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:3e:85:82:cb:de:b1:6d:94:b9:c4:90:ac:
67:a5:2f:ed:f0:05:86:be:bb:13:c9:ee:90:78:48:
e6:6f:39:3c:8e:ae:ac:c7:e5:2b:c8:23:29:76:f5:
79:30:9d:4e:71:d9:be:dd:be:0f:4e:ba:77:7d:d5:
a0:36:00:6e:91:52:b0:14:5d:93:fc:49:9f:9f:4c:
f6:ce:db:e5:0e:f0:62:54:8d:38:f7:06:b0:1c:57:
a2:dc:d0:10:16:24:fa:00:0a:f8:7c:43:13:b4:f4:
f3:9e:6b:aa:94:e9:06:b3:ab:56:64:43:82:84:66:
03:40:54:74:04:ae:0f:5a:9b:de:4a:2c:08:c3:72:
80:8e:1b:d8:33:ae:3b:0b:8a:f0:99:e0:88:98:66:
0a:e6:96:91:46:c1:c6:6d:b7:92:8b:17:b3:b5:36:
2f:c9:dc:1a:98:63:67:e9:9a:0b:77:ee:bf:e7:3b:
99:0f:c7:86:89:8b:6e:41:67:b4:12:3c:d8:5e:ae:
42:3b:81:95:5f:96:ef:14:00:fb:68:c8:df:b1:05:
70:29:46:f0:b3:88:23:54:cc:b7:be:29:33:bd:c8:
78:e8:d1:6b:f0:90:c2:d8:82:ea:54:22:57:1e:62:
46:df:75:8d:ee:8d:85:9b:4a:b4:35:ba:02:d8:8e:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9A:E7:AA:A1:F3:91:EE:DE:99:20:10:21:36:3A:C9:19:20:AB:4D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/971ac71e-b151-4416-8723-7c43df8ea0a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d78::/47
Signature Algorithm: sha256WithRSAEncryption
8e:bb:3d:2e:4d:58:2d:30:93:84:b3:88:71:bc:ed:ea:90:fe:
a1:47:15:04:57:55:83:41:87:31:29:36:46:ad:f7:42:5d:2e:
e3:68:f0:f9:26:d3:53:61:be:32:37:06:d2:d5:a1:f7:43:db:
7c:c8:95:e9:ce:2b:8e:70:a3:bf:38:cf:b0:74:fe:46:28:21:
20:52:98:67:e8:13:4e:9b:0e:24:e4:75:e0:3d:0f:35:24:f2:
53:45:3b:13:b0:93:fc:78:1f:8c:65:56:a8:95:a7:f4:d9:7c:
95:e5:0f:0d:9e:f5:32:8c:8a:40:ca:7c:dc:f4:3b:14:b0:83:
59:1b:77:2c:02:16:a6:30:5c:83:67:77:f7:c0:c3:a1:3e:a0:
4c:e7:05:54:58:60:55:f4:c0:44:5e:9e:2a:54:94:5d:6f:ed:
73:75:d2:4e:fd:fa:35:74:31:96:a7:d1:8b:39:9c:5a:f6:81:
c9:e1:bc:9a:bd:ea:ec:0f:f5:a5:89:68:6e:05:f1:c7:b8:f5:
d7:88:a8:aa:23:dc:1a:af:5c:b6:96:0a:9f:fe:e8:d3:4d:99:
60:85:69:56:d3:c4:79:f2:4a:b5:b2:85:0b:b7:ae:51:0f:94:
74:69:2b:8f:30:96:fe:29:ee:a4:c2:bb:0c:d6:d0:15:a4:84:
d3:4d:36:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 02:23:07 2026 by rpki-client