
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af1b57f9-d78d-4d02-b570-e635d8fd912a.roa
File: af1b57f9-d78d-4d02-b570-e635d8fd912a.roa (raw, json)
Hash identifier: Jc+nDQu+7/4B4qxh8h5Aq++ziNCr5A1UU1aUAR0ecUk=
Subject key identifier: 69:32:D8:37:19:2A:6D:BF:4A:16:06:FB:86:00:4E:28:CE:9A:BC:BE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 584754FF5D3477147D0C34438FBB0B1208BCD035
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af1b57f9-d78d-4d02-b570-e635d8fd912a.roa
Signing time: Thu 23 Jul 2026 08:41:55 +0000
ROA not before: Thu 23 Jul 2026 08:41:55 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3e98::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:47:54:ff:5d:34:77:14:7d:0c:34:43:8f:bb:0b:12:08:bc:d0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 08:41:55 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=13ae92338a0954e1a15200f910a793217cf06e371d116088320034d98431fb2e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:f8:5a:dc:d1:ff:9a:9f:e9:61:d7:90:50:
e1:3f:fe:ec:e6:fe:d3:22:1c:16:fc:fc:cd:cd:b6:
99:49:e6:ef:8c:87:f0:c8:ef:2e:c4:c8:b2:9f:bb:
dd:dd:26:e0:a7:3b:66:78:2f:a5:0b:95:02:69:79:
d9:35:85:20:dd:31:0d:fc:c0:60:50:13:4e:65:d2:
e0:39:4d:6d:87:d7:97:c8:f1:a1:07:ff:8c:0e:74:
eb:37:bf:63:ac:31:b2:47:0f:05:ba:3b:d5:ae:ef:
71:ec:c2:98:4e:02:d1:be:5b:5e:53:6b:83:e6:02:
e0:07:30:ca:7a:27:36:e2:0e:b8:e3:8e:4e:76:3e:
fb:f5:af:5d:35:06:48:d8:2d:b1:3d:bb:69:f4:6e:
b3:30:2f:4c:f5:5a:2f:76:a1:ff:56:03:c8:25:09:
75:1f:6b:6a:b2:a2:49:ce:5f:8d:2c:21:5b:7d:c0:
21:9e:bc:65:2f:c4:db:8d:1f:ab:7d:c7:6a:a3:01:
f1:fa:9a:1e:87:a7:40:08:fb:0d:3a:a3:f9:45:6b:
6c:0d:11:60:5c:bb:27:e8:37:54:99:48:98:55:1d:
2d:1f:ca:25:9d:1f:79:a5:63:47:cf:ef:4d:d4:2e:
76:e0:dd:26:97:bc:57:00:9e:79:5d:b0:4d:bf:b4:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:D8:37:19:2A:6D:BF:4A:16:06:FB:86:00:4E:28:CE:9A:BC:BE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af1b57f9-d78d-4d02-b570-e635d8fd912a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3e98::/47
Signature Algorithm: sha256WithRSAEncryption
87:f8:61:9b:19:bb:ec:8c:93:9a:34:91:c7:fb:2b:ce:f5:36:
e9:7c:b9:d6:53:88:5e:ec:73:4e:33:18:4a:c3:a8:49:7a:c0:
76:48:b7:b9:39:87:4a:95:44:64:7f:72:d6:10:0f:9c:6a:e2:
01:62:f2:0f:66:18:48:c2:cb:3f:dc:2e:4c:70:62:5b:b0:64:
ef:bc:35:e0:e0:88:a3:41:f0:82:d5:38:24:80:3a:52:45:e4:
9b:8a:0e:38:35:7b:c1:2e:6e:ac:d9:22:58:d4:26:51:f0:16:
e4:28:38:4d:49:f7:71:fd:c9:58:b5:f4:15:b4:3c:72:4b:44:
9c:48:ee:86:f1:9f:48:ca:f2:d6:43:ca:ed:0b:8a:ef:e6:9a:
e2:de:50:89:0c:a1:ea:ac:7e:8c:18:40:6f:3f:84:3a:05:f4:
c0:d4:bf:a6:76:21:61:ed:33:a8:14:c6:75:fb:51:ee:a2:63:
d4:85:ff:7e:5d:5a:57:f3:01:fe:e8:f8:da:f3:6e:17:b3:60:
3f:38:9d:89:11:35:93:a4:b0:3b:cb:a5:08:4a:8a:16:bd:3d:
4c:19:89:e5:3e:76:a2:82:8b:03:23:9c:56:28:3e:56:b2:c5:
d0:ce:87:9f:5b:49:12:0e:4a:7e:52:37:a6:4f:20:6a:ec:69:
74:15:e4:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:33 2026 by rpki-client