
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad1d2694-d336-47f9-8aae-dfef4779070a.roa
File: ad1d2694-d336-47f9-8aae-dfef4779070a.roa (raw, json)
Hash identifier: XAep4/KJ13m7sBYFYbXK7HOtZKY0pZH4NUMnEBFMym0=
Subject key identifier: E9:C0:81:D6:2E:D1:F1:C1:B7:0A:D2:34:13:40:31:5C:D7:9F:60:C1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 57384BA7936C6CC88DCB534D7DC291D635A4381A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad1d2694-d336-47f9-8aae-dfef4779070a.roa
Signing time: Thu 23 Jul 2026 10:51:20 +0000
ROA not before: Thu 23 Jul 2026 10:51:20 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3540::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:38:4b:a7:93:6c:6c:c8:8d:cb:53:4d:7d:c2:91:d6:35:a4:38:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 10:51:20 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=fb4246608f74f83ba75bcfdb24d44f13ea836070ca5fe982a11b0682fdc1e33d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:d2:28:ae:cb:68:01:2c:35:f2:b9:6b:08:
d6:4f:86:8f:9e:92:65:c4:92:fb:6b:23:1e:ed:24:
3d:6d:86:46:80:38:8a:74:fc:31:cf:52:0a:1c:54:
b1:41:76:6a:e6:a9:13:18:d0:dd:d6:57:c3:f6:60:
d6:20:20:b4:91:3d:0e:87:0d:7e:41:42:6e:80:8d:
5f:ed:ce:7a:64:9a:70:94:f2:50:94:a3:bb:1a:a6:
74:8d:0c:74:16:ee:d5:c6:ce:02:89:b5:30:02:d2:
a4:7d:64:88:65:ab:ff:44:27:cc:0e:01:19:49:6a:
87:78:bd:bc:19:4e:a8:e5:92:1a:b3:f8:b2:e4:42:
4f:62:7f:9b:9c:ae:96:2e:ff:1e:d6:42:a5:4b:58:
11:a0:ed:9f:cc:ba:12:58:3a:5e:87:63:95:58:ee:
9e:13:81:a7:f8:25:cf:a4:d7:fb:c4:38:2f:7c:cb:
60:c4:eb:7a:fc:ac:cd:7a:49:ad:1a:5a:40:38:93:
e6:f4:6b:b6:86:4e:47:ea:90:90:ae:ae:bb:7a:07:
95:f7:9f:a7:6c:ec:40:6e:6b:75:fa:b8:27:aa:72:
5f:10:7c:01:fe:e5:27:3c:1c:03:f1:04:26:37:8c:
55:79:72:a6:ef:1a:0c:fb:6a:52:60:cb:b9:0e:d4:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:81:D6:2E:D1:F1:C1:B7:0A:D2:34:13:40:31:5C:D7:9F:60:C1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad1d2694-d336-47f9-8aae-dfef4779070a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3540::/46
Signature Algorithm: sha256WithRSAEncryption
3a:98:10:9b:0f:51:96:bc:10:00:83:46:75:44:d2:18:96:4b:
f7:aa:56:fa:27:6e:1f:09:1a:1f:94:27:16:ee:84:eb:28:12:
6b:ca:2e:6c:d7:75:95:46:71:e2:ef:c3:ab:1c:a5:0e:c1:41:
71:7d:3c:88:ff:c8:ac:5e:dd:ac:f0:b1:44:5e:3b:17:6b:a8:
18:b5:2d:50:77:07:36:0c:ba:e6:44:92:92:e8:0f:11:b4:9d:
82:30:ac:9a:a2:6d:9d:a5:b5:74:32:e7:9a:83:f5:4d:76:93:
ed:02:91:6d:59:38:f5:9f:37:53:31:79:0f:78:58:1e:f4:ce:
e8:b8:61:90:b8:9b:87:3b:3c:f0:fd:aa:d4:d1:43:ff:4d:2b:
08:dc:f4:dd:a6:70:67:3d:83:cd:ee:b7:d0:c6:f0:b2:53:07:
77:3b:6e:6a:31:dc:a2:db:af:fc:fe:9b:d3:93:36:fa:77:4d:
ff:de:c0:37:6a:c7:b1:a7:e0:db:6d:02:5e:01:f2:26:b4:a2:
fc:d0:97:9c:9b:72:85:1a:9b:df:26:fc:3a:9a:17:95:0b:81:
e8:8d:c7:3e:00:62:e1:7f:9b:e9:b9:09:ff:9c:8b:59:59:b8:
b0:8d:89:b8:3b:9c:da:8f:bc:30:20:83:ed:b9:36:fd:3d:c5:
61:d1:9c:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:23 2026 by rpki-client