
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f5a2a88-46ef-49e2-8c6a-c4bb5813a84a.roa
File: 9f5a2a88-46ef-49e2-8c6a-c4bb5813a84a.roa (raw, json)
Hash identifier: 4EXrT+p3m6LiLXmvRDOFaVEBKOaF1kQzU3tcpFL2OuM=
Subject key identifier: C6:92:35:5A:B9:6B:7B:FF:E0:CA:EA:75:EA:7C:08:EA:88:37:C9:FB
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6BF287637E1026A4A262CCE8922D69630560B1D5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f5a2a88-46ef-49e2-8c6a-c4bb5813a84a.roa
Signing time: Thu 23 Jul 2026 02:21:37 +0000
ROA not before: Thu 23 Jul 2026 02:21:37 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3b80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f2:87:63:7e:10:26:a4:a2:62:cc:e8:92:2d:69:63:05:60:b1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 02:21:37 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=a688845d66f82adc14f00544b2f650185b76ad1e08338e1fde1ac82fe0188766, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:e7:6d:80:8b:70:fc:07:9c:f5:d6:20:0f:
7c:08:d3:a6:b0:32:35:d4:65:fc:ec:88:4b:fb:b2:
48:84:3e:e2:cd:7f:dd:c3:a0:41:3d:b5:b5:44:92:
77:ba:d7:cc:f4:70:bd:9e:09:6d:29:1d:19:90:b0:
cd:28:f9:5a:f2:1c:0d:0d:b0:45:b8:a1:a4:ef:54:
fe:7e:f7:cb:4b:19:48:e9:1a:ae:dc:67:ce:5b:bd:
28:d7:99:df:2b:93:ac:38:e7:ae:c2:2f:9a:0e:c5:
8a:08:ef:0f:62:bb:6c:5d:8b:5c:1a:b7:e9:ba:62:
31:01:c1:a8:9a:9f:d0:3e:2a:10:0b:80:c6:3a:04:
e6:eb:f9:70:12:85:e6:d3:22:c3:38:42:61:a1:ad:
d5:96:f1:67:59:60:c7:b8:f4:3b:c8:eb:d4:c4:38:
8d:05:32:4e:77:f2:81:b4:43:64:fd:c5:b6:cf:ed:
e0:db:63:4d:3e:91:a9:75:01:d1:a5:8c:bd:a0:48:
f2:68:70:1b:ca:7c:3b:a6:e0:67:6a:5f:5b:9f:74:
32:a1:9b:4d:1c:d2:85:0d:6b:47:32:1f:f4:7e:41:
98:3c:fa:b1:fb:26:69:ba:f0:ff:cc:45:cb:ba:e3:
6d:17:c3:61:b0:fc:3d:56:7b:9b:46:4a:85:c9:78:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:35:5A:B9:6B:7B:FF:E0:CA:EA:75:EA:7C:08:EA:88:37:C9:FB
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9f5a2a88-46ef-49e2-8c6a-c4bb5813a84a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3b80::/44
Signature Algorithm: sha256WithRSAEncryption
22:01:02:db:94:c2:76:bc:aa:8d:23:ee:ea:60:52:8e:92:06:
d7:21:48:97:b2:49:ca:31:37:56:0d:f4:83:62:24:11:d5:6b:
84:6e:39:07:79:2d:60:ce:84:3e:c3:63:6f:89:ff:36:6a:5e:
18:f6:72:89:c5:14:ce:26:ee:eb:bc:ad:33:96:bc:6c:f5:3c:
12:38:20:29:22:61:a9:51:08:fe:14:11:f4:87:77:2d:c3:2a:
d0:11:55:a7:e5:13:4c:9f:80:f1:6b:dd:5b:e6:77:d6:84:b6:
99:65:28:87:82:bd:e4:d8:7b:e8:fb:10:e5:20:c7:d5:ea:03:
3b:a3:9f:d2:f0:5b:d6:20:28:05:47:f4:45:48:28:8a:14:36:
aa:f3:b1:0a:42:cc:b7:10:14:ad:8d:48:27:05:09:5c:e5:bc:
52:0a:e9:23:01:67:41:56:8a:b2:48:2d:21:d1:6e:ca:e2:8e:
04:5e:09:53:77:da:44:15:1e:d5:eb:61:31:51:59:3d:7f:ed:
a2:e9:94:4f:6e:83:29:e6:55:ce:7e:a0:d9:89:f8:33:e2:0f:
3c:7f:aa:de:f8:ac:41:76:9b:d9:eb:90:0d:db:eb:bb:03:b6:
8c:da:89:c8:f8:20:07:ad:e9:f4:2b:9e:81:9e:9e:62:12:fa:
9d:03:3e:f3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUa/KHY34QJqSiYszoki1pYwVgsdUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDIyMTM3WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNjg4ODQ1ZDY2ZjgyYWRjMTRmMDA1NDRiMmY2NTAxODVi
NzZhZDFlMDgzMzhlMWZkZTFhYzgyZmUwMTg4NzY2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxZOdtgItw/Aec9dYgD3wI06awMjXUZfzsiEv7skiEPuLN
f93DoEE9tbVEkne618z0cL2eCW0pHRmQsM0o+VryHA0NsEW4oaTvVP5+98tLGUjp
Gq7cZ85bvSjXmd8rk6w4567CL5oOxYoI7w9iu2xdi1wat+m6YjEBwaian9A+KhAL
gMY6BObr+XAShebTIsM4QmGhrdWW8WdZYMe49DvI69TEOI0FMk538oG0Q2T9xbbP
7eDbY00+kal1AdGljL2gSPJocBvKfDum4GdqX1ufdDKhm00c0oUNa0cyH/R+QZg8
+rH7Jmm68P/MRcu6420Xw2Gw/D1We5tGSoXJeFQXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxpI1Wrlre//gyup16nwI6og3yfswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzlmNWEyYTg4LTQ2ZWYtNDllMi04YzZhLWM0YmI1ODEzYTg0YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAO4AwDQYJKoZIhvcNAQELBQADggEBACIBAtuUwna8qo0j7upgUo6S
BtchSJeyScoxN1YN9INiJBHVa4RuOQd5LWDOhD7DY2+J/zZqXhj2conFFM4m7uu8
rTOWvGz1PBI4ICkiYalRCP4UEfSHdy3DKtARVaflE0yfgPFr3Vvmd9aEtpllKIeC
veTYe+j7EOUgx9XqAzujn9LwW9YgKAVH9EVIKIoUNqrzsQpCzLcQFK2NSCcFCVzl
vFIK6SMBZ0FWirJILSHRbsrijgReCVN32kQVHtXrYTFRWT1/7aLplE9ugynmVc5+
oNmJ+DPiDzx/qt74rEF2m9nrkA3b67sDtozaicj4IAet6fQrnoGenmIS+p0DPvM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:37 2026 by rpki-client