
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b889e31f-d94a-46e3-812f-45173cf07329.roa
File: b889e31f-d94a-46e3-812f-45173cf07329.roa (raw, json)
Hash identifier: TohqCvZmqxoUtEOwyjKNZbBN4oJbSHBjNV73O/uixYE=
Subject key identifier: BA:F8:DF:A4:B5:18:5D:17:13:4C:2C:84:D4:B9:12:17:1A:63:C9:EE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3FEAF0B813421516E614B5F3FA85ABB93DE9BB44
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b889e31f-d94a-46e3-812f-45173cf07329.roa
Signing time: Mon 04 May 2026 08:50:05 +0000
ROA not before: Mon 04 May 2026 08:50:05 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:330c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ea:f0:b8:13:42:15:16:e6:14:b5:f3:fa:85:ab:b9:3d:e9:bb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 08:50:05 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=2c602e450624cfd93f1635ac629d14e059f3d911fa0812183e4351385e523a05, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:b6:92:d2:77:aa:32:6a:f6:76:f9:c7:57:
ce:53:4f:3d:1c:fa:92:a5:92:4c:08:3f:aa:07:e9:
d8:11:75:56:58:d6:9e:cb:2b:a9:75:73:7c:b5:52:
ec:09:ef:8b:70:81:77:79:44:6c:9c:18:a9:bf:60:
46:63:b3:cc:28:16:f6:ea:eb:0c:7e:ad:d5:2a:fa:
6f:9e:76:e4:42:37:78:d9:d7:d3:28:21:99:b9:2e:
08:0e:aa:c2:4c:fb:66:91:a6:38:7f:43:3d:c5:7d:
4e:7c:43:e5:07:35:02:ac:22:37:12:6e:9b:f2:76:
7a:88:de:3e:b9:cb:80:91:79:a1:b5:e4:c8:44:a8:
43:d8:80:e5:21:da:80:1d:db:e0:a6:98:f9:a4:e8:
ab:68:fb:b6:a6:db:3b:ab:44:26:a3:21:69:29:e2:
99:98:63:2f:e7:95:38:b1:af:c6:63:8f:06:3c:6d:
55:18:4f:b7:4f:7f:91:16:17:31:48:2b:07:3d:22:
37:b1:5a:d7:7d:ec:f5:81:02:f6:fc:31:31:a0:e5:
20:f9:b7:ed:25:19:0f:47:bd:41:db:5f:1f:86:2e:
0e:61:1d:68:38:0d:9a:ce:2d:64:34:60:87:6e:e9:
7e:82:b5:eb:fa:6a:e4:1b:ff:4a:7c:c7:ce:3a:12:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:DF:A4:B5:18:5D:17:13:4C:2C:84:D4:B9:12:17:1A:63:C9:EE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b889e31f-d94a-46e3-812f-45173cf07329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:330c::/46
Signature Algorithm: sha256WithRSAEncryption
3b:31:7b:5d:0a:85:e0:6c:3e:c3:e2:0d:fd:61:52:05:4d:39:
d7:40:ee:f9:e1:25:c8:aa:7f:e0:ce:b3:ec:2a:14:36:92:30:
12:fb:6f:c7:0f:53:14:10:0a:05:4c:44:4e:42:72:59:43:13:
92:79:2e:2f:a8:04:26:f0:e1:66:4b:a9:06:a1:48:c6:20:ba:
af:95:28:bf:fa:78:f7:df:87:b3:8a:68:68:54:de:19:29:9e:
1d:ff:83:c9:13:79:a8:22:d0:2d:13:fe:f6:d2:16:6c:f4:a1:
89:a5:03:aa:1d:51:2d:54:c5:66:09:6a:db:12:fa:b8:4c:75:
c5:28:73:58:6a:22:2b:f5:45:5a:ba:58:77:18:c5:1a:5f:eb:
fb:56:d9:6a:a1:cf:74:0e:09:c4:d5:36:2c:8b:49:58:1d:ad:
95:76:55:87:65:f4:cf:df:ff:e6:d6:01:a7:da:55:d1:29:88:
c1:01:3d:ec:d1:5c:5a:ec:aa:a8:1f:c5:8b:00:85:8d:d9:87:
f0:73:c5:d3:b3:3f:57:2e:b0:49:64:6b:c9:8f:be:52:ed:a2:
66:1b:c0:d6:c8:51:5b:29:ea:5b:c9:92:08:39:c7:18:b7:83:
6b:0f:95:31:44:ec:3e:21:d1:78:bf:f3:2b:c3:03:89:ee:26:
c6:52:94:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:01:44 2026 by rpki-client