
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf0f384a-888d-4bc9-884c-6e8b24c940a8.roa
File: bf0f384a-888d-4bc9-884c-6e8b24c940a8.roa (raw, json)
Hash identifier: iu8Q0jktcNUvv7VWwIWUnEUXoEydxGLNgHOcw8FmNTY=
Subject key identifier: 25:59:BA:7C:29:65:47:A3:52:21:F5:4E:2E:94:F5:7B:92:8B:D4:72
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 55D4E9CFA345997A88D062B16D40D70B3B4C7071
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf0f384a-888d-4bc9-884c-6e8b24c940a8.roa
Signing time: Thu 23 Jul 2026 03:20:52 +0000
ROA not before: Thu 23 Jul 2026 03:20:52 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2bd0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d4:e9:cf:a3:45:99:7a:88:d0:62:b1:6d:40:d7:0b:3b:4c:70:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 03:20:52 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=0424ca34169fb3b37d2c9dcfc60eba1efff76788f91a9423bad6f4a4c578140a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:cb:a0:39:5e:cb:c2:08:cb:4c:1e:1a:e2:
9a:50:e4:98:63:9e:11:6e:38:6b:3e:bf:89:09:14:
15:f4:f7:b1:26:38:d6:50:72:1b:49:e0:77:15:49:
9e:b0:ff:d4:8d:2e:21:c4:4f:6d:be:45:80:df:33:
83:30:68:a3:58:f2:7d:06:15:2c:4e:9f:ef:ad:4b:
20:e4:bf:ac:eb:03:71:9d:a4:e8:6f:28:8b:bc:ab:
7f:ff:0d:1a:a4:4b:0a:5f:b8:5b:35:60:84:c0:66:
3b:93:41:08:08:5f:bc:6e:95:2c:00:0f:24:12:22:
ba:d1:50:8b:f8:46:c5:ef:d4:c3:6c:5d:39:ba:03:
05:8f:29:47:61:f4:1e:ec:bd:e8:fd:0d:09:1d:34:
2f:42:15:65:9d:e0:df:4e:0d:23:ca:d4:d1:e8:df:
f1:da:02:57:42:27:f4:03:43:64:7e:8d:1a:5a:e0:
03:61:50:cc:7e:97:0f:3a:0f:79:11:41:57:c4:88:
76:74:ce:3c:55:38:07:5d:11:c2:24:70:cd:0b:9f:
ec:e4:92:e2:b3:76:92:45:27:89:b4:f1:5b:7c:70:
be:92:9e:4b:e7:9f:c9:a8:af:ba:67:f9:3c:bd:3b:
ca:cb:33:9b:01:5f:cc:cc:a0:fc:c7:94:15:eb:bd:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:BA:7C:29:65:47:A3:52:21:F5:4E:2E:94:F5:7B:92:8B:D4:72
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf0f384a-888d-4bc9-884c-6e8b24c940a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2bd0::/44
Signature Algorithm: sha256WithRSAEncryption
83:1f:15:0d:04:d9:d8:b8:a3:f0:1c:05:30:49:69:1c:9f:47:
e5:e1:40:ad:b3:76:af:a2:27:85:02:94:0a:90:41:e9:2d:5e:
ff:98:97:4a:b5:4a:b3:ba:27:78:f2:66:54:79:5c:1a:2f:24:
43:6a:0c:e0:72:39:53:a2:bb:2a:d2:eb:a6:f1:a2:36:6b:f9:
16:0f:b4:e9:fd:e9:14:94:3f:b5:e9:ff:2d:fc:75:57:1d:5b:
66:89:05:bf:99:d4:b4:4e:0b:20:c3:78:e7:49:3e:ee:d3:9d:
77:4f:b8:97:91:c0:12:c5:7f:1a:66:a4:49:04:d6:5f:9e:89:
34:9c:5e:43:0e:f3:13:e5:22:9c:15:d3:7c:3d:43:d7:7b:28:
4b:f8:37:c5:ad:39:92:b6:15:aa:b9:aa:1c:5a:41:2e:36:ee:
53:8b:3a:8c:f1:8e:6f:05:fb:a4:b3:5b:11:94:6b:11:16:5a:
92:99:a5:c4:1d:4b:93:55:fa:8e:53:34:fe:c3:3c:68:69:65:
4e:28:6a:63:8d:b6:77:48:08:39:af:63:4a:5f:b2:4a:db:ef:
08:4a:1b:b1:49:a3:1d:15:15:72:13:27:43:11:31:27:1a:3a:
97:f8:35:3b:9e:68:86:42:7f:4e:e4:66:db:12:84:2d:ce:ca:
f7:38:ab:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:42 2026 by rpki-client