
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afba9de2-8102-440b-9cff-2d3e9fa80553.roa
File: afba9de2-8102-440b-9cff-2d3e9fa80553.roa (raw, json)
Hash identifier: 2zB7/TjQxNV3mOA1CJwFQRAyQJRu3Sv2mDqMFjZKhhE=
Subject key identifier: B0:3D:14:1D:A1:DF:39:9E:7F:29:39:16:47:E7:2C:A6:64:73:7F:6C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0ABD4C708773DF4E3A0F1BFAF03945FEFBF68BD8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afba9de2-8102-440b-9cff-2d3e9fa80553.roa
Signing time: Mon 04 May 2026 12:50:44 +0000
ROA not before: Mon 04 May 2026 12:50:44 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:bd:4c:70:87:73:df:4e:3a:0f:1b:fa:f0:39:45:fe:fb:f6:8b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 12:50:44 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=664dcce0d15c1c2cff005be39bbaae00da6fb77a33ffde7bd0883eb9c58ef060, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:2f:49:af:c5:f5:9e:33:60:30:6e:a4:5b:
68:e4:a0:a1:09:db:2c:dd:13:bd:8b:d3:39:a1:27:
fc:3f:4e:43:5f:b1:0f:85:ac:1f:cb:a1:12:bb:d2:
05:bf:34:c4:d2:01:04:31:a9:69:52:a6:0f:5b:80:
aa:54:7d:cb:e7:da:c2:39:78:63:84:de:57:51:01:
05:b0:6b:93:ac:44:ce:0a:0e:92:2f:58:35:05:17:
7d:6f:97:16:36:a4:47:54:4f:db:0d:c4:29:01:a5:
3f:5d:40:75:f6:04:0a:c9:0a:91:15:a6:d3:77:11:
7e:1b:1d:9c:dc:e2:01:f7:c7:a4:27:37:0b:de:c0:
3f:18:16:ab:06:73:25:a2:eb:17:62:01:68:1b:fa:
aa:13:ac:e0:96:76:13:57:57:4d:c6:e4:0f:85:c3:
44:0a:23:58:68:c3:c6:9a:50:77:29:cf:e0:49:62:
e9:42:40:af:d1:9a:e9:7f:80:64:67:e9:1c:c4:0a:
a2:24:b4:ac:f5:b0:ba:d0:33:23:af:16:eb:a0:69:
3d:65:94:60:b0:0f:5a:98:16:1f:86:49:97:62:f2:
57:74:58:53:1f:db:df:ec:c5:fd:23:f6:4e:19:8f:
44:90:d6:13:54:72:08:71:61:1b:b4:49:a9:e0:bf:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3D:14:1D:A1:DF:39:9E:7F:29:39:16:47:E7:2C:A6:64:73:7F:6C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afba9de2-8102-440b-9cff-2d3e9fa80553.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2c00::/38
Signature Algorithm: sha256WithRSAEncryption
7f:7d:11:74:98:69:ca:d7:ad:68:e7:02:fe:77:f8:cf:3c:01:
4c:3b:0d:e4:b2:ec:b8:f1:7d:46:7c:56:46:d1:37:dc:cb:07:
27:69:96:27:c7:44:10:d5:73:e8:11:1d:fe:8c:f9:64:7c:ce:
16:e1:19:15:21:ce:a3:c2:d8:79:6f:1b:9f:6b:b7:9a:e6:b6:
99:95:fb:b3:63:d3:46:cd:91:1f:ca:65:3d:41:58:01:7e:47:
8d:b6:13:d6:01:ac:54:e2:b8:f1:fb:2f:24:84:04:53:16:67:
16:82:53:f9:fb:a2:d1:f9:e9:31:31:c3:1d:91:96:f7:f0:89:
a6:d7:cc:67:0f:7d:de:ff:97:ce:73:8d:ad:67:07:27:8d:0d:
4b:36:aa:65:70:13:9c:0d:4e:1b:4f:85:41:f4:c8:8f:da:93:
02:42:33:47:09:13:df:15:1d:0d:58:3b:70:cf:d5:68:a6:aa:
fd:cf:be:6d:20:08:11:ef:62:e1:20:89:f7:96:89:02:3c:7b:
0c:a8:94:a4:4a:f7:93:73:10:b4:25:a9:e1:77:9e:e4:83:f9:
71:3b:97:3b:d1:f0:b3:75:58:bb:4f:c5:90:97:94:31:16:a0:
83:b0:92:1e:89:a2:e2:15:29:25:3d:2a:85:54:64:9d:51:70:
bd:16:04:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:35 2026 by rpki-client