
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b684d67c-1228-4655-940e-cadf8f41b75a.roa
File: b684d67c-1228-4655-940e-cadf8f41b75a.roa (raw, json)
Hash identifier: xtiRXX3DB9j4IcTjhLCEI+SNPks9ag56b56tVb+BdQs=
Subject key identifier: C1:F5:34:5F:DC:F2:B5:F4:71:C9:7F:7A:5B:C0:EE:EC:CA:C1:88:88
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 270B6F4D9DDEB9FE86551D5CB95172438D14DA2A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b684d67c-1228-4655-940e-cadf8f41b75a.roa
Signing time: Mon 04 May 2026 07:20:57 +0000
ROA not before: Mon 04 May 2026 07:20:57 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3958::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:0b:6f:4d:9d:de:b9:fe:86:55:1d:5c:b9:51:72:43:8d:14:da:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 07:20:57 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=43ab867c446c71116320a68183d8851e0adf178c6f082a6f441831614673a274, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:11:5d:08:60:fa:b0:e3:7f:2f:b4:d9:56:
c2:17:9c:04:e1:20:1d:07:ff:ea:dc:85:02:93:49:
2d:8b:bd:a9:80:3a:4e:48:b2:f3:cd:51:d0:06:24:
36:a5:de:60:3b:5e:26:f0:15:c0:74:4e:6d:b5:c1:
cf:54:35:6d:3f:b3:bb:03:09:26:38:c1:3e:f3:10:
83:12:92:74:69:46:2e:c5:b3:60:b5:2b:c2:d0:46:
4c:43:33:89:2f:6c:0d:d0:a7:8b:50:83:61:7f:ae:
2d:5d:67:6e:85:32:7d:a2:d4:31:59:47:a7:3b:4e:
4c:7c:82:fe:ce:9f:6c:fb:6a:f9:66:72:2f:62:b6:
78:ec:41:da:99:02:7a:56:13:a8:d7:7d:1b:5e:d6:
58:50:10:70:e8:0a:82:9a:f5:41:11:80:d5:60:45:
d2:8e:d8:89:9e:87:89:2c:24:16:8d:d7:e5:61:37:
4c:4e:a4:9d:d0:98:67:58:bb:bd:df:c6:14:5c:4e:
ba:02:dd:da:2b:4b:c8:2d:b9:7a:62:2b:41:98:19:
81:0c:74:bb:3e:6b:09:ae:84:26:25:51:b5:e1:db:
8e:ce:6b:5c:d6:bd:79:10:4d:2c:3d:70:22:35:92:
5c:c4:de:53:17:41:23:3b:23:f5:79:d2:bf:c4:cc:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:34:5F:DC:F2:B5:F4:71:C9:7F:7A:5B:C0:EE:EC:CA:C1:88:88
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b684d67c-1228-4655-940e-cadf8f41b75a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3958::/46
Signature Algorithm: sha256WithRSAEncryption
29:77:d9:57:42:ee:b4:e2:29:78:74:75:9d:73:32:97:39:6d:
92:58:c0:cd:82:6a:d3:78:09:a6:c5:a7:50:10:04:25:04:89:
56:cd:81:d8:0d:d8:c8:d7:52:d6:40:49:8f:7d:84:c2:1c:d8:
20:40:8a:ad:83:a2:ba:35:c5:d2:62:39:0f:1d:9e:c5:a9:f1:
a9:e1:62:52:c2:9c:f1:14:0a:1f:e6:c2:78:39:32:f8:f7:6d:
c9:24:a2:b1:58:b4:50:10:89:eb:00:60:45:2b:01:70:0d:df:
09:0b:1f:6c:4e:1f:75:bb:af:ae:2a:d0:15:8f:48:fc:0b:7f:
c4:22:38:ae:26:f2:1b:60:c7:04:b7:05:3c:57:17:bb:e2:98:
09:ad:8f:10:fe:5f:eb:26:f8:ad:ff:87:32:33:db:66:ee:a5:
14:1c:e9:56:03:67:9b:d0:ce:62:31:97:b5:95:13:96:6d:dd:
c1:f4:b9:48:23:5a:63:f5:10:55:55:5d:23:f4:30:e1:8b:81:
c3:2d:3a:5e:a0:aa:08:e1:57:80:79:f8:e6:69:87:53:d8:13:
ce:4f:56:11:9b:bc:82:fa:2b:de:3d:43:17:fb:93:ba:f3:3e:
c1:84:9f:15:38:8a:f8:c0:8c:a5:43:0c:e8:5c:b3:af:5a:03:
52:6f:17:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:53:03 2026 by rpki-client