
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba1858c8-593e-46a6-818e-a1bf3c4afe55.roa
File: ba1858c8-593e-46a6-818e-a1bf3c4afe55.roa (raw, json)
Hash identifier: hyJiUFprjVJn9qrPlHrGABEJS84TwjK4HdZ+mK0xzMw=
Subject key identifier: 29:9E:24:99:86:E2:FE:98:0E:D1:48:3E:D6:4C:D6:7B:4F:EA:FE:57
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3653BF0157A4E65E2AB9B5EAD1B32ED4AD08776B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba1858c8-593e-46a6-818e-a1bf3c4afe55.roa
Signing time: Thu 23 Jul 2026 06:21:41 +0000
ROA not before: Thu 23 Jul 2026 06:21:41 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f48::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:53:bf:01:57:a4:e6:5e:2a:b9:b5:ea:d1:b3:2e:d4:ad:08:77:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 06:21:41 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=f17bd5b6f1cfb2f4415ad4788fa62806d62f98c172dfd164adb2c897973383c2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:5c:28:eb:ba:07:01:62:91:51:f1:13:cc:
36:b8:78:1c:93:2d:03:02:20:8c:a2:3b:a9:5e:e2:
66:0e:a4:0d:74:01:11:ff:ee:2b:b4:c5:4e:e8:71:
6b:35:15:49:6f:83:38:af:f0:99:c2:7a:95:91:4a:
ff:0f:a7:6d:a2:50:6f:6d:07:a4:09:6e:a0:80:bf:
e0:0e:24:65:e6:1d:c5:f0:db:ef:41:17:ed:01:2e:
59:d0:84:b3:c8:f3:39:14:37:67:8e:01:14:23:e1:
fe:f0:c8:9d:a4:a0:7f:18:af:14:64:d7:17:cd:54:
fc:eb:e9:ef:43:2a:a1:30:7f:07:30:6e:61:78:1d:
07:c1:ca:de:33:ae:21:47:14:4c:c1:41:9a:cb:e1:
eb:ea:e2:8b:49:0d:6a:4c:78:06:49:8a:d1:40:d1:
6c:e6:69:22:6b:62:84:30:14:b2:f7:cf:6c:8d:b7:
83:e5:a0:52:bb:49:16:e0:15:44:b9:9b:d3:99:0a:
c0:30:18:aa:fd:2b:12:6e:99:2c:52:c4:b1:33:f2:
68:af:8f:b7:15:44:33:05:12:4b:d3:5b:26:41:d4:
03:89:ce:d4:0f:96:de:14:e7:89:90:4b:e4:e8:84:
4c:94:c6:4a:cb:a0:5c:38:aa:c3:ab:62:cf:28:89:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:24:99:86:E2:FE:98:0E:D1:48:3E:D6:4C:D6:7B:4F:EA:FE:57
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba1858c8-593e-46a6-818e-a1bf3c4afe55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f48::/47
Signature Algorithm: sha256WithRSAEncryption
ae:eb:f2:9f:93:7a:6d:2f:b7:d9:02:2d:d0:83:5e:93:bc:04:
d2:ae:59:99:f6:69:96:5d:e1:69:5d:e3:f7:f2:56:fa:2d:c0:
1f:31:a2:15:08:5a:47:0f:d8:30:9c:b6:3f:71:0c:ab:a8:d1:
50:7d:27:f9:83:ec:df:b1:c4:17:40:ab:43:bb:da:f0:62:fa:
80:3d:5b:0f:bd:10:5a:6d:0e:64:7e:f6:7e:4a:df:dc:11:c3:
4a:a6:8d:87:55:71:3d:3d:3b:f3:5f:bf:ce:7e:ca:ff:69:3f:
4b:6b:68:35:36:0d:2b:8c:14:98:00:f8:56:41:28:bb:bb:38:
01:44:51:17:45:25:32:78:43:5c:98:ec:bb:f7:47:35:9a:31:
b2:2c:b8:09:a1:31:56:da:43:7e:11:0b:42:b1:f5:37:72:33:
a0:2a:df:8e:be:54:69:94:d6:62:e7:22:31:22:e7:16:a6:ed:
fa:46:e3:6c:6b:ba:e4:e5:d4:15:bf:ff:ca:61:47:d6:e7:2a:
d0:b0:68:d7:97:d2:bc:35:d7:1a:f4:06:d1:80:44:a3:9a:b0:
ad:e0:ba:e5:fe:b4:28:63:a7:95:47:28:8e:01:9b:12:e5:d1:
c5:5f:0b:c2:f1:6f:75:de:cd:c0:11:fb:c9:ee:b9:32:69:20:
a0:e0:41:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:08 2026 by rpki-client