
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a935398c-657b-422c-b139-f778e1300e1b.roa
File: a935398c-657b-422c-b139-f778e1300e1b.roa (raw, json)
Hash identifier: JGoA4eka734ogLio0ND1/nsZKfPLx3LmVr9+3aaKxDs=
Subject key identifier: 90:EC:D8:39:A7:97:C4:62:C5:D5:92:D6:13:60:78:A9:F7:3B:B3:D0
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 015408E19300A14F2BE129A83C40C84B93F730E9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a935398c-657b-422c-b139-f778e1300e1b.roa
Signing time: Mon 04 May 2026 06:30:45 +0000
ROA not before: Mon 04 May 2026 06:30:45 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:398c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:54:08:e1:93:00:a1:4f:2b:e1:29:a8:3c:40:c8:4b:93:f7:30:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 06:30:45 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=0715fd1799190cfdc63e7736baf93fc30582f82470352979ea94bb24b10f87dd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:3f:c4:6e:b2:3b:5f:d6:7d:d2:bb:a0:04:
ae:3e:65:b6:81:79:23:53:ac:f7:52:a4:4f:6c:a4:
8c:51:87:e0:68:82:7f:cf:16:39:fc:dc:44:c9:43:
f0:51:bb:34:18:64:a1:bc:a7:5d:4b:a4:25:12:f7:
32:50:8d:28:db:bd:3c:5f:ff:50:78:ab:ce:90:01:
41:ab:69:4b:29:58:b3:70:90:3c:ad:72:fd:1b:41:
da:cf:95:8d:0e:ec:4b:85:a2:d1:37:20:77:7e:c2:
e0:ba:72:1e:ba:ed:bf:d2:cb:38:31:c3:9b:18:18:
e2:82:bb:15:10:bb:95:bb:d0:03:d3:4e:5b:23:51:
a5:19:0c:50:27:0c:11:9c:8a:68:41:8f:b6:6c:c2:
e2:0a:16:ce:c6:47:16:f4:f5:56:8f:81:03:77:2a:
fd:6e:40:7e:21:c9:f7:d4:63:1e:4c:00:f3:d9:49:
83:6a:be:5d:a5:d4:dd:d3:9a:b2:1d:6a:35:67:9d:
f1:83:6e:36:de:76:c9:bd:0e:cf:23:42:f8:4b:2b:
c6:cc:ca:ec:89:8c:c5:7c:95:6b:cd:78:2a:cf:6e:
9c:48:21:aa:c4:74:08:90:bd:34:e5:23:53:29:b6:
6e:42:a2:45:49:80:e5:17:a1:34:23:dd:b3:ca:ff:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:D8:39:A7:97:C4:62:C5:D5:92:D6:13:60:78:A9:F7:3B:B3:D0
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a935398c-657b-422c-b139-f778e1300e1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:398c::/47
Signature Algorithm: sha256WithRSAEncryption
5f:6c:4b:df:2e:17:35:e0:26:51:89:40:14:64:46:30:14:e9:
cd:27:8c:6f:f0:62:b4:43:06:2e:e0:c8:6a:ed:2a:6b:12:e1:
1d:42:bc:fc:f4:27:87:ab:66:25:c8:11:66:ae:fc:9c:9f:24:
6b:bd:ef:98:eb:02:b8:31:92:c9:97:7c:8d:b1:ef:f9:ab:aa:
7c:9e:96:7d:82:2e:87:67:fd:a7:60:ec:9f:80:43:c8:e8:6a:
0e:5d:f4:dc:28:d7:93:7d:4a:97:42:bd:16:78:64:6d:a9:74:
78:c1:9f:18:8e:6d:66:b5:ec:60:29:c4:86:2a:3c:68:f0:7e:
8f:8b:8f:9a:64:00:3b:42:fd:23:35:5f:d0:db:a9:40:e9:aa:
2b:5a:73:90:82:6a:b9:5e:23:bb:6f:f7:f3:a0:27:ab:03:6d:
f0:96:60:46:02:7b:e9:7d:47:77:27:94:00:6a:be:bc:fa:aa:
3a:c3:67:ab:21:be:ea:61:96:38:e3:92:5c:46:25:80:4a:79:
1b:ba:e2:e1:88:cc:04:1b:3d:1a:ba:05:2d:96:86:24:82:8b:
70:f0:47:75:7c:3d:47:48:ec:f6:cc:4d:b9:0a:ba:17:16:ce:
b5:5e:64:06:f5:d5:37:6c:77:00:09:be:85:c5:65:d8:f6:6e:
1f:be:8c:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:32:51 2026 by rpki-client