
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf1c889a-da14-426f-8bee-dfe8bf6ed76d.roa
File: bf1c889a-da14-426f-8bee-dfe8bf6ed76d.roa (raw, json)
Hash identifier: N83/zBWgii+Y5xRAMBA0Oa9jXFaBxChWQBKd6NcBEBw=
Subject key identifier: CC:97:E4:38:4C:F5:2E:F5:1E:4F:66:58:DE:15:07:22:CF:36:7A:AD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 73EF62D17D5586501EBEB5E52E537CB5A15B51E3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf1c889a-da14-426f-8bee-dfe8bf6ed76d.roa
Signing time: Mon 04 May 2026 11:40:10 +0000
ROA not before: Mon 04 May 2026 11:40:10 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:36a8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ef:62:d1:7d:55:86:50:1e:be:b5:e5:2e:53:7c:b5:a1:5b:51:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 11:40:10 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=a99b1e59b01b42ce9288a1d31d37ca4216c73d4cceebc2ecdfe6405700ab4e3c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:62:52:52:45:f5:98:39:4f:02:be:bf:3c:
2e:0e:84:ff:27:45:e5:bc:c1:14:a5:94:0f:11:75:
9e:b7:68:7a:ed:99:f2:c7:c0:69:c2:73:d0:08:de:
47:13:2e:38:27:fe:11:78:ad:4a:1d:be:c5:1a:9b:
7e:61:eb:ea:84:ef:13:70:eb:17:34:e3:1e:33:e1:
25:37:58:46:6d:e6:a3:ed:b1:bb:87:0b:85:c9:90:
45:c5:fc:4e:45:cb:95:ee:17:ee:0e:d6:6b:87:f8:
48:d4:6f:c6:8a:73:6e:d7:25:b3:31:bc:78:00:e8:
b1:de:f7:38:05:c8:c8:fa:ce:c6:0c:36:7e:27:a3:
ca:ee:f3:3e:1f:12:2c:ef:60:bc:8d:5c:aa:e5:f8:
26:b7:70:95:65:36:f5:be:94:d0:19:53:bf:c0:da:
3e:d0:40:84:b1:59:bd:5f:6b:08:f3:c5:3d:3d:e4:
35:35:f4:6c:4b:8f:2a:9c:fb:b4:4f:35:52:40:d8:
94:ce:55:f1:65:d3:ef:3c:ea:b2:3b:11:b9:9f:3d:
69:02:ad:85:95:e7:a5:11:e3:22:73:5b:5d:d5:3e:
d0:d8:9c:1f:f0:3f:85:f8:93:78:3d:09:0f:df:53:
89:2c:53:a2:15:a6:36:5f:61:b0:81:c4:69:49:b9:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:E4:38:4C:F5:2E:F5:1E:4F:66:58:DE:15:07:22:CF:36:7A:AD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf1c889a-da14-426f-8bee-dfe8bf6ed76d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:36a8::/46
Signature Algorithm: sha256WithRSAEncryption
63:12:f6:ea:d8:6d:5c:f8:5b:61:aa:18:5c:d9:f6:b4:58:4d:
2a:01:e6:5c:f9:31:f6:7f:29:82:25:8e:af:83:f3:d0:3f:c0:
14:b8:a7:21:ac:59:79:22:e3:3d:c5:d3:d2:2c:e5:67:c6:0f:
12:30:e0:20:e2:ec:95:ee:8e:f2:19:e6:75:d9:bf:5a:f3:0f:
fc:8d:19:ea:4f:0c:e3:dc:34:71:85:ee:80:ff:58:e8:42:5d:
e8:de:43:48:77:1b:f3:a1:ae:b1:9e:cb:96:b4:3d:f6:6e:4d:
a4:0f:d9:8c:99:3f:f3:31:cf:fb:2e:ae:0a:9d:84:fb:de:93:
59:09:f5:25:60:3c:6a:67:c3:cf:3d:b4:f0:b2:13:86:e2:4c:
a6:49:a1:b7:2b:c1:c2:74:47:76:96:8e:73:db:dd:b5:17:a7:
39:53:26:ef:32:6e:fc:71:f2:fd:3c:46:8c:97:ec:ff:66:f9:
e4:ff:b0:64:aa:9b:60:ae:aa:db:c2:b4:80:54:a8:de:c7:a8:
6e:92:d9:c7:52:bd:88:89:92:c5:b5:fd:6d:51:0f:b1:8f:6f:
f2:d2:e5:f2:5b:d4:85:03:5d:bc:53:e7:31:29:11:19:d8:1e:
d8:d4:48:67:37:84:46:ea:e2:64:0d:9f:20:4c:a6:0c:d9:50:
5f:b7:1f:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:28:04 2026 by rpki-client