
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b61d5f87-0519-4652-81f0-14c34f0c4206.roa
File: b61d5f87-0519-4652-81f0-14c34f0c4206.roa (raw, json)
Hash identifier: MxRhCLFJU9wCa9awSZG8GKDgQC/PqeYVQkEOw/IR2HM=
Subject key identifier: 2A:D9:4B:A1:2F:CC:E0:42:D7:65:66:60:4B:8F:84:C4:43:17:E5:63
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 26255EFC2E80E2190C715DB82EBA849F5A1AA789
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b61d5f87-0519-4652-81f0-14c34f0c4206.roa
Signing time: Thu 23 Jul 2026 04:20:29 +0000
ROA not before: Thu 23 Jul 2026 04:20:29 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d66::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:25:5e:fc:2e:80:e2:19:0c:71:5d:b8:2e:ba:84:9f:5a:1a:a7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 04:20:29 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=8a68131642de9fa675eaecc23955149e6f063894a29c59c343fa1b68467c9382, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:d9:48:df:6c:4d:27:a9:50:b1:70:56:04:
94:ed:7c:57:f5:b0:23:81:ef:49:f1:54:5a:0a:44:
f8:8e:d4:ed:ed:02:d0:9d:6e:08:b1:c4:45:18:a7:
1f:b0:5b:4c:cf:35:01:4d:d9:e4:ff:8f:33:cc:40:
9b:0e:c5:86:1e:7d:85:ba:71:5f:95:68:86:6b:f7:
d0:c3:ea:44:5d:16:e5:34:2a:22:4d:1f:96:75:d6:
be:75:cf:bc:3c:94:ff:b8:f9:2d:da:c3:74:12:d1:
11:50:ac:e7:69:30:78:0c:4e:b4:2f:ef:03:0d:39:
20:b3:e1:97:0e:73:92:b6:62:5b:13:43:36:bc:8a:
91:81:9d:c2:7d:54:41:41:fa:30:ab:7d:16:81:a7:
cc:9c:60:42:d3:cf:09:19:9f:0a:88:43:5a:19:0d:
3d:15:de:9f:6f:cd:11:df:9a:cf:c5:ff:a9:86:0e:
09:e7:61:7d:32:17:9e:5a:03:ce:9c:65:73:39:6d:
da:63:28:6c:d4:0b:14:d9:e7:f7:11:46:97:65:73:
9e:44:88:07:01:56:10:9c:4e:f3:69:da:b8:6f:02:
0c:1e:02:b0:0e:db:bd:9f:cf:f8:2d:74:58:32:04:
dd:78:b0:f0:0d:d9:f4:b8:d4:c1:11:7c:f3:2d:db:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:4B:A1:2F:CC:E0:42:D7:65:66:60:4B:8F:84:C4:43:17:E5:63
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b61d5f87-0519-4652-81f0-14c34f0c4206.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d66::/47
Signature Algorithm: sha256WithRSAEncryption
2c:f6:d2:38:d7:ee:24:5b:c7:08:fb:75:d3:1a:9b:33:b6:5a:
ec:25:0b:a0:d6:07:3e:ba:97:33:47:8f:bf:2a:34:d6:19:5e:
d6:42:be:5b:0c:dc:a3:5b:dd:a0:f0:ed:b5:41:b1:d3:d7:85:
96:4d:57:61:15:d3:8e:80:3e:43:a3:49:03:40:df:fd:65:c5:
df:c4:37:96:4b:3d:13:69:7b:8f:85:c9:68:e8:97:a5:c7:03:
5f:6d:36:ee:fc:f7:6b:2a:bf:a0:bb:f8:88:2c:eb:cd:d9:46:
ea:9e:54:7d:93:4e:a4:82:41:c3:b3:63:fe:a7:ff:0f:76:d0:
58:5c:7c:1a:02:d2:95:81:ce:cd:78:60:55:dd:8e:06:5a:35:
f3:29:eb:47:a6:7f:57:06:af:39:c3:4f:05:7e:dc:f2:3f:14:
d0:b5:c9:5e:af:4c:f9:61:02:1b:87:49:64:41:ca:c4:82:b3:
8b:01:e0:34:c6:2b:89:ec:84:25:64:ad:73:31:2d:7a:dd:f2:
b6:e6:7e:9f:0f:3a:43:30:c0:7d:c2:a5:c6:b7:99:5d:9e:fe:
43:a8:93:20:6f:b6:9d:b8:1a:07:e0:54:87:e6:8d:e9:3d:8e:
da:bf:df:f8:51:6b:ea:79:ed:22:28:b4:6e:1d:e3:a8:0a:bb:
66:0f:07:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:14 2026 by rpki-client