
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad2905e6-9428-4597-a297-2bc887b79a9a.roa
File: ad2905e6-9428-4597-a297-2bc887b79a9a.roa (raw, json)
Hash identifier: s1CTnMKY9tc6nSsptOOLykebePDT3PzTgQYIZFwViZ8=
Subject key identifier: 46:49:63:41:C8:AA:AB:AE:2C:C8:15:26:B4:01:65:2B:22:0E:9D:FC
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 280D8A6699BB7BF97EFF3132821716A68BF77590
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad2905e6-9428-4597-a297-2bc887b79a9a.roa
Signing time: Thu 23 Jul 2026 09:30:11 +0000
ROA not before: Thu 23 Jul 2026 09:30:11 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:35e8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:0d:8a:66:99:bb:7b:f9:7e:ff:31:32:82:17:16:a6:8b:f7:75:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 09:30:11 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=473e80295b4d903cf9b41017bdc6ca043b1149719f9bd3ff3b77d52fa9e64edf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:69:16:aa:5b:4a:b9:0c:ff:59:b7:38:59:
3d:0f:08:36:ac:4a:b3:e1:e5:9f:45:a5:a4:d1:71:
90:be:c0:29:61:72:e7:4a:f2:1c:75:fd:2d:ad:0c:
9d:c7:36:37:49:a2:15:8f:24:d7:21:8f:bf:65:69:
f5:06:7e:56:d2:e6:c9:c4:2b:24:74:33:8c:15:68:
e6:eb:13:5e:98:f4:1a:30:f6:bc:07:4e:fa:e9:89:
e0:fc:fe:c2:fb:4a:6f:1b:e7:f8:1a:c1:15:c2:c7:
18:b5:78:77:a9:33:bd:ea:80:a7:ff:25:dd:6f:7c:
42:c1:cf:e7:9b:cb:99:c5:eb:86:d5:85:00:73:a9:
f7:a1:8c:cd:63:86:2e:2f:66:aa:b0:95:4b:4b:d5:
59:2e:12:5f:d9:79:e8:f2:93:55:0b:f4:14:ff:f5:
ef:f6:8c:11:be:26:10:16:fc:01:27:b5:71:ed:a9:
88:71:05:d6:8a:6d:2f:a8:40:21:35:dd:4f:75:55:
42:ab:4e:5d:b8:25:97:e4:9a:46:3b:ab:44:c1:95:
97:cb:47:62:d0:50:d3:92:8f:f4:71:24:32:1c:58:
c9:81:06:b8:0f:f4:58:af:d3:f3:ab:9e:9e:97:6a:
8d:ff:f3:93:ef:52:c6:c1:df:48:9d:e9:f1:61:0c:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:63:41:C8:AA:AB:AE:2C:C8:15:26:B4:01:65:2B:22:0E:9D:FC
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad2905e6-9428-4597-a297-2bc887b79a9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:35e8::/47
Signature Algorithm: sha256WithRSAEncryption
08:d0:9a:14:4e:fc:89:15:4c:b7:1c:2f:38:62:8f:f9:0d:c3:
bf:fe:51:f6:69:d9:18:73:fb:d7:fc:82:1e:e6:8c:39:0c:b1:
92:57:88:40:6f:9b:52:60:0a:51:68:b4:75:53:f5:b6:1c:d9:
10:bd:ff:03:0e:76:56:bd:b9:d4:eb:90:1c:51:f9:fb:a1:6f:
54:36:5b:b2:94:c0:65:97:27:06:50:03:ff:08:d9:09:f8:9e:
1a:30:c7:4d:03:2c:31:cf:08:e6:5e:fa:38:6c:f5:31:59:29:
f9:13:14:64:d4:5a:e4:de:a5:af:c7:2a:62:0a:45:f2:d2:eb:
b5:41:cc:53:c9:68:26:8d:04:d3:c2:83:d6:62:ea:37:21:08:
19:68:66:e8:a3:4b:53:83:a0:be:b4:77:73:38:3f:61:24:02:
57:91:20:5f:d5:45:9a:90:e0:d4:cd:f8:3b:39:ea:22:b6:de:
87:3f:d2:d8:46:85:5b:25:76:f9:50:35:49:7c:c1:7f:e5:8c:
86:15:ca:e9:c6:71:83:a3:36:14:42:3b:04:a1:ec:fb:59:e0:
49:9b:2d:b5:de:99:3c:65:0f:8b:02:56:7f:7b:50:58:e6:2d:
0c:06:c0:ac:e6:6b:30:12:1f:16:ca:18:12:9b:b5:a7:8b:9a:
7d:28:ca:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:02 2026 by rpki-client