
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afaa792b-5214-47a2-9630-dc5d60d253ea.roa
File: afaa792b-5214-47a2-9630-dc5d60d253ea.roa (raw, json)
Hash identifier: ictN9wWUmoxSF8FB0Wh5SoRXSgeApaaOxfD0bRK8yQY=
Subject key identifier: 84:50:F1:D3:D4:F8:BE:35:DC:28:BF:9C:93:7A:00:8D:13:B6:08:AD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 358B4A1C3756C6F0BDA23C56868694BD06DF20
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afaa792b-5214-47a2-9630-dc5d60d253ea.roa
Signing time: Thu 23 Jul 2026 08:30:49 +0000
ROA not before: Thu 23 Jul 2026 08:30:49 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3934::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8b:4a:1c:37:56:c6:f0:bd:a2:3c:56:86:86:94:bd:06:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 08:30:49 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=a116501d303d48b6f808ba88e05e799d0d1609b3aa6c47ba5de4690f06c04040, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:8e:a5:ae:19:fe:68:9c:8a:ae:c1:7a:88:
8c:07:ec:53:a8:2f:5d:90:01:c5:35:b7:52:ed:56:
ee:01:cd:7d:fb:05:8e:13:81:dc:80:f1:d6:29:1f:
db:a6:3c:78:67:1f:83:57:80:65:20:c8:5e:30:52:
fd:50:db:22:9a:97:02:4e:b6:bd:ad:f5:95:40:6f:
ff:0c:6b:22:fb:18:2c:ef:ca:2f:f1:fa:39:39:b5:
f0:65:bc:a2:39:c7:f0:d0:59:db:69:35:87:34:ef:
1c:27:c1:6b:ec:49:9d:45:fa:f7:2c:03:f4:c7:77:
cc:fd:69:04:bb:37:db:ef:69:16:78:d6:c5:84:fd:
73:49:ac:81:11:62:15:c8:84:14:26:6d:5d:bb:34:
e5:28:23:57:2f:1a:76:13:57:b2:1e:af:d7:2f:18:
51:e6:d5:a0:df:a7:ad:b2:11:90:04:9a:9e:54:d0:
8f:76:85:c3:d9:d6:11:55:9f:de:cf:0c:ea:c7:b5:
59:0e:f3:8f:b1:a5:99:60:4c:29:33:f1:17:2c:c2:
79:8a:10:21:36:b1:d1:a6:b3:df:22:d2:0d:eb:a3:
f3:82:41:47:17:ef:a9:71:d2:ea:5c:1d:55:0c:63:
1c:ad:60:c3:7c:76:2e:f2:23:8a:89:4a:b8:7a:53:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:F1:D3:D4:F8:BE:35:DC:28:BF:9C:93:7A:00:8D:13:B6:08:AD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afaa792b-5214-47a2-9630-dc5d60d253ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3934::/47
Signature Algorithm: sha256WithRSAEncryption
bd:7d:30:b7:05:2b:2e:f9:02:ae:29:58:5c:d1:f2:aa:04:3e:
0b:f7:01:29:b8:91:40:5f:a7:e6:db:95:65:fc:7b:60:40:2a:
01:4d:32:16:9d:a1:80:d3:34:4d:49:11:0b:f6:93:eb:9d:80:
06:a5:f0:9c:54:2a:7c:19:a9:18:08:f0:7b:94:27:90:7d:e5:
7c:fc:ea:6d:01:bc:f7:52:1f:60:db:5c:6d:85:55:0f:24:e1:
82:42:4f:3b:a4:26:ab:21:61:6a:91:b5:c8:90:f6:85:95:2f:
74:8d:75:b7:09:e8:57:10:b2:fa:ad:69:36:0d:d8:4b:c7:56:
45:cb:13:e6:36:d4:73:d0:88:97:3e:fe:90:88:15:95:f6:c8:
49:0d:26:4c:6f:1c:a7:0c:05:af:a2:c7:ab:67:70:ff:f0:db:
81:8a:40:c8:7a:a8:67:c8:6a:aa:1f:ee:27:2e:91:98:d1:82:
0c:1b:c1:5d:48:4a:60:57:39:c6:d5:f9:6a:7d:77:cf:ca:72:
53:99:fa:05:a7:5c:d9:f2:69:da:48:61:d5:97:d4:b5:c6:7d:
12:40:21:6d:52:70:fe:50:27:04:9a:9d:75:46:f5:3d:ff:2a:
11:cc:73:ed:19:0b:68:98:fd:47:b9:42:cc:ec:4d:63:22:b7:
25:6b:66:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:45:25 2026 by rpki-client