
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0598d30-9166-44a3-af62-aa85bee1cb16.roa
File: b0598d30-9166-44a3-af62-aa85bee1cb16.roa (raw, json)
Hash identifier: Cssa2aEOKz7MQdrv3r4mpDz2nNoVLjMKT+rMNLsAxts=
Subject key identifier: CC:0C:B5:27:58:0E:4F:FD:61:1A:4C:E0:BA:29:5F:FD:40:65:90:57
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 606AC212F3EBB2C4D716375F022B41739B1955EE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0598d30-9166-44a3-af62-aa85bee1cb16.roa
Signing time: Thu 23 Jul 2026 09:50:37 +0000
ROA not before: Thu 23 Jul 2026 09:50:37 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2d80::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:6a:c2:12:f3:eb:b2:c4:d7:16:37:5f:02:2b:41:73:9b:19:55:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 09:50:37 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=bb97c5c77be662f956ceb01eb5de7b3688d8782e319b2b5acbad0330874bff2b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ec:d5:bf:a1:cd:7b:e2:ed:3e:0a:c5:14:4c:
1c:ea:cc:13:1c:8a:e8:60:9d:90:49:2e:1a:b7:c5:
0f:27:51:83:32:39:d1:07:9c:af:5f:cc:ec:4a:c9:
07:ea:fd:a9:70:18:bb:bb:d3:11:94:49:97:c0:6e:
0b:3e:af:8f:f9:6c:6f:56:57:f3:d5:aa:c2:34:f2:
bb:b0:b8:d3:3c:25:5a:24:12:cc:b9:3b:5b:c5:41:
54:f2:b1:f6:4b:78:ea:b9:40:9e:27:bb:79:40:04:
ef:ef:96:68:4b:13:5d:c4:df:2f:c4:ac:47:25:b4:
b5:73:af:58:6d:53:d0:a9:c4:0c:41:b7:2a:46:97:
21:c9:78:c8:ca:88:1a:c8:6e:ab:ed:3d:f1:45:8a:
cc:b7:38:bd:10:3c:63:3d:4d:f3:77:09:1d:5e:2f:
48:ea:c2:eb:dd:e5:60:32:ef:82:bb:f1:1a:5f:8d:
2e:c6:3c:1d:22:3e:1a:1c:89:fa:54:14:b7:85:fb:
35:b5:ba:f2:f2:44:93:29:c6:17:0a:5f:54:56:b4:
b7:27:ed:28:e5:b5:cc:8d:47:9b:fd:76:21:e1:d8:
60:cb:6d:94:01:2c:ae:ea:81:89:9f:f5:3e:05:54:
c9:75:a2:b8:fa:b2:28:82:05:68:5c:52:9d:37:28:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0C:B5:27:58:0E:4F:FD:61:1A:4C:E0:BA:29:5F:FD:40:65:90:57
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0598d30-9166-44a3-af62-aa85bee1cb16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2d80::/43
Signature Algorithm: sha256WithRSAEncryption
5b:87:5e:79:f8:48:5a:8f:e0:99:0a:30:90:8e:cd:03:eb:f0:
ae:b5:5a:4e:f2:20:6f:37:47:37:12:8b:a0:0b:b3:b3:84:9c:
c7:e7:05:c8:8d:68:4e:24:3b:b0:8d:d2:e7:9a:f7:0b:43:c6:
36:4a:3e:af:93:3e:d9:ce:c3:77:bb:d3:24:c3:53:c4:c1:62:
dc:bb:ac:c1:3a:14:9c:2a:6b:af:a6:d0:0f:9d:be:bd:41:f3:
e8:f5:2f:f7:b4:98:08:7c:72:b1:2c:a6:4e:7b:a1:3b:0c:e6:
d2:13:d8:25:7e:ab:80:4d:76:b6:e9:74:93:13:47:e8:a9:37:
24:8d:94:85:8e:0f:fc:f3:a2:0a:9f:f2:49:20:2c:9d:54:65:
4f:aa:a6:5c:d1:07:07:fc:8f:26:24:82:b0:f5:0f:be:c2:32:
33:0c:b1:cd:37:f1:8c:1a:c9:53:a1:9c:c6:6b:dd:2a:14:25:
7d:7c:60:da:eb:8b:c2:30:9d:26:2e:63:09:ca:77:b4:91:a2:
dc:d0:8a:0c:15:2d:92:bd:d5:41:62:e7:75:00:3c:97:5e:71:
03:86:7a:b0:ee:ce:c2:5a:fc:a8:2e:3b:19:4c:e8:f9:15:66:
f3:f4:54:30:a8:47:98:29:fe:86:70:96:e3:a6:c7:15:2b:2b:
ae:a7:35:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:22 2026 by rpki-client