
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98788ef6-51e7-4c8f-95cf-93297ee67f06.roa
File: 98788ef6-51e7-4c8f-95cf-93297ee67f06.roa (raw, json)
Hash identifier: A8/ndiebTycf5TqkXNz/Wb7XurLJeN9eRnmwKwCKASM=
Subject key identifier: 86:EC:63:86:F4:BD:DC:46:C7:5F:EA:FC:49:52:19:2A:C1:82:66:46
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1894D20832D419824BA5E1993A651F00EE8A3B91
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98788ef6-51e7-4c8f-95cf-93297ee67f06.roa
Signing time: Thu 23 Jul 2026 06:01:19 +0000
ROA not before: Thu 23 Jul 2026 06:01:19 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3b00::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:94:d2:08:32:d4:19:82:4b:a5:e1:99:3a:65:1f:00:ee:8a:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 06:01:19 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=bb7ab32faf0ed715ea87ca13e15bbb9d3cd0e993fac6fc302651db7bd88a0f47, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:e5:c6:e0:4e:04:f5:e3:2f:89:1a:48:e7:
10:c4:b9:29:ac:a1:0a:2a:15:2f:b8:8e:cd:86:b3:
fa:c6:ee:8f:e3:c6:40:73:ac:11:9d:26:91:e1:8a:
79:0d:b3:7b:00:7b:c4:64:48:67:3d:af:a1:55:32:
c1:dd:00:3c:02:e4:84:7f:08:5a:7d:5e:7d:98:aa:
f0:f3:2b:f2:24:6e:89:b7:5f:3f:37:fa:51:40:85:
95:a4:98:ab:81:c9:f6:f7:0f:22:be:06:87:b6:87:
e2:51:cd:0b:b3:0b:bf:ba:f8:23:20:0d:7c:9e:30:
8f:aa:9b:0a:05:c1:96:19:a1:16:f1:85:2c:d1:da:
16:9d:a7:6d:9a:d7:49:cf:b4:26:09:7b:5e:ab:61:
09:2c:a6:2c:a6:c0:10:b7:8c:b2:fa:6b:3d:f1:b4:
d6:a5:f7:65:53:f6:bb:b9:67:c9:d6:b6:e7:56:c6:
b7:9f:34:fa:51:70:ff:47:e8:b1:c6:1e:a1:c2:fd:
7a:b3:36:cf:e9:9e:24:3f:4c:65:7e:5d:c3:f0:6f:
c5:ca:69:aa:e4:d2:31:d6:c4:db:b8:6f:e2:c5:59:
c2:ff:71:76:ff:98:7f:f9:cf:5e:f2:b5:05:c4:48:
cf:e7:16:72:9f:27:7e:d0:34:a4:9a:11:77:46:de:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EC:63:86:F4:BD:DC:46:C7:5F:EA:FC:49:52:19:2A:C1:82:66:46
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98788ef6-51e7-4c8f-95cf-93297ee67f06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3b00::/43
Signature Algorithm: sha256WithRSAEncryption
30:2b:9b:d2:9d:24:6c:1d:12:9f:a6:fa:0c:a4:54:de:74:2c:
2f:39:20:9c:34:0f:63:06:6d:2e:f8:04:ea:68:bf:7a:60:f9:
17:ee:57:2f:fb:df:f9:98:33:ce:6e:07:5d:06:45:96:26:78:
41:ef:f6:35:65:b6:61:3c:ec:59:88:6c:fd:3e:7c:e7:75:a9:
11:18:7a:af:46:b2:da:4d:c3:25:3f:cf:b0:31:70:eb:8e:96:
b4:3d:de:eb:17:49:da:16:c2:78:6a:d8:9f:1b:85:f0:1a:78:
6f:c0:8a:5a:ce:58:30:f1:1a:9d:52:b6:ae:b9:44:b9:5c:0e:
5f:9b:4c:92:55:91:25:1b:ed:e7:7d:81:cb:4e:6c:b2:6b:18:
9d:36:b3:4a:56:07:c4:9b:37:3f:fb:4a:a6:cd:4d:98:5e:84:
80:bb:28:be:89:64:21:3c:00:75:3a:8a:ae:6f:66:58:49:7c:
bd:c1:ca:4a:e8:f8:e9:58:35:85:98:09:f2:8e:cc:4d:bf:ac:
d8:63:aa:12:33:63:67:c9:89:86:72:f8:1c:81:82:f8:65:76:
e5:22:b4:4e:12:cd:ad:a1:96:46:ef:0c:d0:44:d7:1c:b9:21:
c6:15:b6:d2:ea:17:e0:a9:40:44:59:3a:b3:49:b7:eb:18:89:
f6:2c:67:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:02 2026 by rpki-client