
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4ebc709-1039-4042-b48b-16122d5ae2b4.roa
File: a4ebc709-1039-4042-b48b-16122d5ae2b4.roa (raw, json)
Hash identifier: HUqgaaKY/jxuOmE2IKLfILAlgZaJJrBiQO2enbexVXU=
Subject key identifier: 8E:7B:AB:ED:42:38:44:83:B6:87:CD:2B:B2:A1:F0:7B:BB:4C:84:F7
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 573E94B27F8164B8CAC014CAB7436A26C55097DA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4ebc709-1039-4042-b48b-16122d5ae2b4.roa
Signing time: Thu 23 Jul 2026 12:41:54 +0000
ROA not before: Thu 23 Jul 2026 12:41:54 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3eb4::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3e:94:b2:7f:81:64:b8:ca:c0:14:ca:b7:43:6a:26:c5:50:97:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 12:41:54 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=84335d5e1eb8cb1eed649a776494a0e8c06e878a1941e9385d8ef5314c3e0065, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:97:0f:3c:ef:68:9f:33:6f:bb:e6:4d:2b:
ad:c7:bf:58:cd:84:37:04:90:f0:5c:58:99:d1:b3:
31:65:2a:9d:74:00:ab:6f:38:72:4e:fc:8d:e3:81:
a0:c1:63:24:89:47:0b:3b:70:32:57:e8:39:13:c4:
ba:c9:5e:7a:38:94:f5:11:e1:21:0e:f0:af:bb:b7:
10:41:48:00:03:19:65:92:66:6d:ec:51:68:74:a8:
04:d4:86:67:6b:ad:81:14:0f:53:05:e0:a4:80:6e:
1d:14:a1:4a:54:96:cb:c3:49:e9:f2:c8:dc:71:00:
f0:31:90:47:13:5c:71:db:6e:b3:20:f9:fb:73:f4:
63:25:69:d5:15:ce:b8:40:52:1e:fb:7b:05:2b:77:
d0:f5:d3:e9:24:eb:80:08:63:55:0c:3e:58:b3:b7:
82:60:de:5d:fa:e0:98:b8:f6:fe:cc:4b:5b:2f:2c:
2b:59:46:b2:8c:9c:14:31:75:bd:09:ec:d3:c4:c6:
f6:65:69:4a:55:e7:77:8b:86:ce:69:09:bc:35:39:
c1:da:2e:15:71:31:89:65:9f:97:ca:2e:f1:c0:27:
e9:67:cc:c3:1a:fa:5c:da:a4:12:b6:75:61:bc:4b:
6d:ff:40:88:09:a3:af:dd:68:6a:25:79:b6:fa:5a:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7B:AB:ED:42:38:44:83:B6:87:CD:2B:B2:A1:F0:7B:BB:4C:84:F7
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4ebc709-1039-4042-b48b-16122d5ae2b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3eb4::/46
Signature Algorithm: sha256WithRSAEncryption
af:fd:bf:e6:74:86:6a:f2:cb:f9:ff:d9:e7:90:87:af:b5:9c:
4e:b0:ca:c2:34:f7:d1:74:de:27:11:94:6d:ef:e2:78:17:b5:
f6:a7:ca:6d:5c:ad:ed:ec:31:5c:bf:fd:b7:dc:23:49:0f:61:
71:25:57:bc:ab:b6:96:50:22:75:e1:ec:06:d7:1c:d6:4d:3c:
53:7a:5b:cd:57:4c:11:30:9a:59:74:62:02:55:b6:c7:5f:61:
e9:7b:b0:e5:0c:d5:14:80:98:d3:9a:6d:55:39:b7:d1:7b:c0:
77:8d:0f:90:9e:10:5a:8a:2e:75:92:c5:17:56:8c:0b:b2:9c:
1a:03:c1:a7:36:c9:a9:91:61:22:99:e7:94:a3:3a:e4:d5:50:
b3:f8:cc:5b:ec:66:7b:6c:e4:eb:75:c4:b7:6c:6f:11:57:ab:
e5:3f:10:cc:52:2f:ca:e4:65:31:73:73:4a:8b:d9:ad:e5:ef:
68:34:bb:b9:f9:03:72:2b:2f:d3:56:12:c0:c8:4d:a9:07:78:
f9:fc:b6:7b:be:41:cb:46:d4:cc:ce:83:7a:8a:d9:72:7f:4c:
5a:03:74:05:56:ad:36:61:17:d2:9a:2f:0c:dc:36:e0:50:cf:
a8:e8:7a:94:3a:17:42:e4:6a:5f:15:5a:5e:9e:56:00:1f:69:
a8:97:41:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:15 2026 by rpki-client