
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b3f6948-67c5-44e5-80f0-3b7575f13aa8.roa
File: 9b3f6948-67c5-44e5-80f0-3b7575f13aa8.roa (raw, json)
Hash identifier: Gvx7g3clUaVSc11Vw32vBNNFTNhht9HPo6NZ0flm3x0=
Subject key identifier: 28:84:EA:BB:11:2D:B0:CC:15:CE:F7:40:D4:EF:78:E9:E6:E8:B8:37
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 70D5DE7607B9A9356F7C9C809378465D7FBBF442
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b3f6948-67c5-44e5-80f0-3b7575f13aa8.roa
Signing time: Thu 23 Jul 2026 09:20:10 +0000
ROA not before: Thu 23 Jul 2026 09:20:10 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3b8c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d5:de:76:07:b9:a9:35:6f:7c:9c:80:93:78:46:5d:7f:bb:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 09:20:10 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=b74c8c6a6f9d0422d0821102e6ce7b885114cb0a48e1b7de27a10a47fd5ea68e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:89:a7:08:67:fa:ac:b9:f3:32:ac:e8:9f:
76:94:2d:0f:33:a0:29:1d:64:88:75:93:64:b6:7f:
2c:8a:50:e7:43:77:87:c4:ee:4d:7c:bf:36:3c:d0:
cf:8b:03:cd:63:09:32:a8:b8:16:96:83:64:3c:e1:
42:a3:61:7d:2d:83:a8:b5:3a:5e:a9:f9:ba:5d:5e:
8a:a3:a7:2e:5d:3d:de:1a:e4:4f:5f:ce:f8:b9:f0:
0f:b7:d3:41:58:50:18:af:c3:66:fb:36:27:ff:88:
e3:c2:c6:33:35:db:01:ec:aa:dc:35:aa:4e:f2:df:
f0:1f:ac:8b:ef:90:8d:cd:3a:98:43:17:32:89:2e:
8f:89:21:48:ae:b1:fb:4c:22:db:f3:7d:12:37:d7:
08:ea:26:4a:2c:18:ea:1f:41:14:84:16:d0:2a:27:
55:38:e9:3a:23:a7:75:de:67:9e:76:49:f1:7a:f6:
c5:9d:df:0e:d5:61:57:be:1e:49:43:43:6d:8d:60:
e6:d5:a6:19:0f:3e:28:37:4d:11:59:72:88:79:e9:
08:8f:6f:e8:9a:a9:cc:b9:c8:fa:b8:38:07:36:82:
49:d0:7e:08:3e:f6:9e:ab:8b:e3:e2:3b:aa:8f:24:
3f:52:6f:a5:5e:bc:2e:33:82:10:51:48:46:08:22:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:84:EA:BB:11:2D:B0:CC:15:CE:F7:40:D4:EF:78:E9:E6:E8:B8:37
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9b3f6948-67c5-44e5-80f0-3b7575f13aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3b8c::/47
Signature Algorithm: sha256WithRSAEncryption
46:67:c9:b0:9b:35:62:45:ef:64:4e:ba:b8:3c:49:7c:84:1d:
ec:2e:3a:a0:6f:31:c1:71:6c:29:ac:0d:22:59:1a:3c:ed:c3:
c4:c3:ab:e3:75:8a:3b:4c:47:ef:37:57:73:70:b6:61:bc:4d:
e8:74:e7:a6:3e:b9:5a:ca:30:b2:2a:cb:ad:11:54:9f:5f:db:
15:69:09:0c:c4:d0:ca:59:a9:90:0c:24:1a:1a:fe:9a:fe:d5:
f2:3a:98:79:cd:3e:ce:45:3b:ef:74:14:2b:9d:8a:36:72:77:
ae:43:94:dc:d6:a4:3f:90:59:72:10:44:c3:1e:d2:14:90:1d:
3d:bb:37:15:3d:3d:6c:55:3e:96:41:f4:58:58:1b:06:27:53:
9b:a8:64:f0:8b:78:09:8a:a4:79:21:eb:e1:37:8c:ff:9a:49:
d9:97:95:1c:b0:aa:68:40:a1:66:ff:c1:9b:32:1b:60:a0:8d:
47:1c:0a:d4:65:09:8c:8a:65:14:92:12:dc:e2:11:77:7f:78:
9e:34:9b:bd:1d:53:4c:f3:59:b8:31:c4:b6:0a:2b:8a:2d:ec:
eb:5f:b7:d4:a6:e7:6f:0f:35:61:07:bd:36:25:9f:72:90:40:
a6:82:89:92:af:83:c2:cf:73:06:27:ce:cc:fb:cf:72:f6:d1:
3b:3e:59:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:39 2026 by rpki-client