
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf572be7-837a-4a73-a25d-0ba0eddec9c4.roa
File: bf572be7-837a-4a73-a25d-0ba0eddec9c4.roa (raw, json)
Hash identifier: Lk5nOz1iAySqbdzHkD15baqOokgN+GvxrqlsooGpAQU=
Subject key identifier: 28:43:D3:04:D5:CB:69:E5:EB:09:58:B8:14:FF:59:E9:2B:C5:A1:7B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 63DC67F08933C24B464E2CB96301B775F8997E61
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf572be7-837a-4a73-a25d-0ba0eddec9c4.roa
Signing time: Thu 23 Jul 2026 02:51:12 +0000
ROA not before: Thu 23 Jul 2026 02:51:12 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:38bc::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:dc:67:f0:89:33:c2:4b:46:4e:2c:b9:63:01:b7:75:f8:99:7e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 02:51:12 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=fc5541efde90727816ccd115367192352d1a30bef4351704b94d228483f31985, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:2e:dc:e7:c5:6a:0f:36:b4:48:74:94:9b:
89:8d:7e:a2:43:e0:99:d0:7c:ba:38:83:77:1f:e5:
53:a3:90:12:c4:64:07:48:b3:f6:cf:d5:17:2a:89:
27:16:93:90:02:cc:94:0e:89:b5:ba:9d:86:3e:d3:
a0:b1:0c:89:a9:bf:4f:1f:6c:e9:14:21:a8:e9:21:
73:3a:85:88:d6:61:81:18:88:7a:73:da:c4:cd:b1:
bd:30:0f:e0:c5:8f:7a:d1:1b:14:f6:25:8f:49:cf:
d3:08:e9:c4:0e:ab:91:1a:ec:9c:2a:97:ab:56:3f:
88:80:6b:cb:e4:56:a9:f3:29:6b:5e:d8:e1:ac:da:
6a:87:f8:2a:21:13:69:d8:b4:3d:d2:f5:fa:9e:09:
f3:22:df:79:9a:9e:f4:b3:bd:e3:98:d9:1d:1e:ac:
18:e6:d2:62:37:e5:b7:00:fb:df:7b:3b:09:69:bb:
e7:d3:17:44:e5:ee:4c:11:aa:e5:1c:2b:9d:28:a9:
2e:f8:ec:06:11:3a:fd:d7:25:f4:f4:6e:70:dc:2d:
d9:20:4b:99:bf:11:33:a4:73:56:28:80:a2:e5:19:
39:cb:6a:80:a7:5a:6c:ed:7c:b8:0c:03:4d:f5:c6:
4c:ac:e3:77:31:6d:1c:62:3b:55:69:e0:25:10:0e:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:D3:04:D5:CB:69:E5:EB:09:58:B8:14:FF:59:E9:2B:C5:A1:7B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf572be7-837a-4a73-a25d-0ba0eddec9c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:38bc::/46
Signature Algorithm: sha256WithRSAEncryption
83:b6:0e:b8:ac:31:09:95:6e:5a:05:a2:e5:e4:1d:53:12:0d:
0f:68:07:27:41:0c:6b:ca:eb:e8:be:42:16:64:95:b6:15:f1:
2b:e8:3e:3a:bc:3d:46:16:05:17:24:b4:bf:e2:c6:4d:9c:d3:
d2:29:34:af:f7:6e:ef:8b:dc:fd:af:8c:85:bb:e8:35:74:a9:
dc:a4:ef:ce:c8:07:ff:41:71:dc:67:38:ef:2f:a0:87:5f:42:
19:b9:19:9f:64:25:ff:ad:f1:d1:80:33:e5:67:ab:36:df:18:
95:44:8d:a6:74:dd:ba:93:8f:ea:62:cc:31:e0:91:c7:85:81:
4b:08:34:7b:99:8a:81:36:39:2f:95:34:58:bb:30:dd:24:49:
0d:ec:fc:14:60:fd:ee:59:f7:38:8b:8a:df:69:03:f9:dc:20:
d9:e8:14:6c:0f:61:e2:fe:11:24:f3:34:56:f6:62:29:c7:3e:
27:89:f4:f1:ab:2e:45:ad:04:47:db:be:96:5a:8e:9f:df:25:
b9:9f:6b:19:36:ed:1d:d9:ab:d2:54:8e:60:dc:c0:40:cc:47:
e1:1c:d6:c7:61:03:2f:7c:8f:b8:f1:9d:f0:89:36:5b:97:3b:
20:aa:83:56:3d:95:f1:01:97:f4:91:d2:09:4e:5a:11:79:ea:
71:82:6a:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:53 2026 by rpki-client