
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1858bd1-48f6-462f-a007-4c8c06ccab07.roa
File: c1858bd1-48f6-462f-a007-4c8c06ccab07.roa (raw, json)
Hash identifier: sRT5cDLiQskl5ZeRcDDKu2lnwOoo4va5xAnEXOqmhE0=
Subject key identifier: 48:16:43:E0:7D:C1:50:E0:73:36:25:06:27:EC:24:2B:AC:C7:33:F3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 01D1866D546AE63158BADEB8CEDF1ECFC56BCA1B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1858bd1-48f6-462f-a007-4c8c06ccab07.roa
Signing time: Thu 23 Jul 2026 10:21:39 +0000
ROA not before: Thu 23 Jul 2026 10:21:39 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d1:86:6d:54:6a:e6:31:58:ba:de:b8:ce:df:1e:cf:c5:6b:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 10:21:39 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=c8e38314d7d09c516d772a8ae6551ec544474e3269787efd5e12a01da847446d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:69:be:26:77:e6:b2:a1:3b:8b:52:5d:63:
0d:76:17:bb:09:67:df:47:04:ca:b8:21:99:9b:9c:
69:69:c7:ec:3c:e2:54:9d:33:36:3a:e5:80:9a:b8:
47:11:ac:2a:f9:32:be:8c:37:e2:3f:1f:ff:df:90:
a4:68:a9:e3:c6:70:d5:76:f9:0c:2b:92:a1:e7:cd:
05:7b:28:90:2c:3a:a4:1a:38:44:2f:6d:89:02:32:
dc:f6:85:d0:f0:a9:18:ae:dd:7c:4a:df:f9:03:d0:
6d:f7:a6:aa:05:ad:f8:26:5d:91:9f:5f:ae:33:86:
3c:ca:96:87:34:9d:b5:98:5e:23:80:81:ef:53:b8:
2f:77:55:4b:2b:1e:a1:97:cb:08:f5:b0:cf:c1:8f:
3d:6d:d4:fd:cd:23:75:0f:71:9d:fc:4f:29:d1:ad:
ac:9a:48:f3:5e:0b:4c:5c:c1:df:e3:55:b8:36:76:
06:53:26:78:63:75:3e:43:f8:0e:83:17:c1:cf:72:
9d:fa:61:53:6a:96:c0:64:d8:99:6e:cc:c2:ce:92:
49:39:a7:9a:6d:74:81:f9:92:86:5d:0b:df:16:c6:
de:44:8a:82:86:6f:5d:f7:52:59:ca:00:75:36:30:
26:b3:b9:f4:1d:90:61:09:b8:82:9e:78:99:6c:21:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:43:E0:7D:C1:50:E0:73:36:25:06:27:EC:24:2B:AC:C7:33:F3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1858bd1-48f6-462f-a007-4c8c06ccab07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f80::/41
Signature Algorithm: sha256WithRSAEncryption
5d:68:3a:be:41:c1:e0:0d:b6:d9:36:bc:8e:6a:de:8c:2e:38:
3c:d8:26:fb:62:ac:4c:dc:e6:ac:b8:fd:55:62:ef:fb:21:3e:
6c:70:29:d4:15:5c:25:3f:43:10:e7:29:c4:46:61:31:f5:4a:
4f:f1:df:8e:e7:5d:80:98:16:f1:69:27:fc:0b:b9:71:68:36:
7d:cb:9e:14:bc:11:84:5e:9b:ca:78:e8:2c:03:f0:01:f5:4d:
7f:0f:56:bd:d8:8d:72:96:ad:b4:e3:94:1d:42:c1:83:d3:25:
62:20:35:af:7c:c0:29:b1:39:94:b8:49:fe:e5:6a:c8:f6:4a:
fd:a2:4a:6c:6f:56:84:7a:8f:9a:63:f0:1c:4d:f6:ba:53:bd:
9d:5a:3e:82:f9:c4:84:4c:be:07:dd:6e:10:37:a3:71:66:f4:
2a:30:fd:0f:a3:3e:bc:2c:44:eb:40:ec:17:5d:c1:62:ce:e4:
5b:d9:0c:e9:5f:5e:25:43:a3:6a:0d:25:17:f3:c7:7b:67:cd:
36:a4:29:c3:45:73:83:41:cf:c5:ae:2d:33:56:1d:ea:ca:e2:
1f:bc:9a:e7:5b:3b:88:24:c2:dd:e7:c2:cf:d0:57:91:8a:29:
1a:6f:45:bb:bf:bf:88:5a:5a:91:8b:8e:57:e8:de:a2:c8:3f:
5b:6e:38:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:43 2026 by rpki-client