
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/555f0c83-1ce7-45af-b439-b2fab6a08187.roa
File: 555f0c83-1ce7-45af-b439-b2fab6a08187.roa (raw, json)
Hash identifier: LYVHI9BC8vSkerm9WQX8V5yLUD+zG3cs5V7olmHGR5o=
Subject key identifier: E9:6C:15:6F:80:EF:BF:2E:7A:DC:34:DC:65:E2:96:21:69:D8:85:C6
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4FB0B8DD20FFFA1EA608958ADF2E69E5E2A48663
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/555f0c83-1ce7-45af-b439-b2fab6a08187.roa
Signing time: Mon 27 Jul 2026 02:50:07 +0000
ROA not before: Mon 27 Jul 2026 02:50:07 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b0:b8:dd:20:ff:fa:1e:a6:08:95:8a:df:2e:69:e5:e2:a4:86:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jul 27 02:50:07 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=911a8907d5b766e9b471cfccfbc2fa7e44aec0573af3427958e82a36338a107b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:3b:db:45:d2:fe:6a:bb:29:fa:95:b9:72:
62:2b:6d:fa:94:d6:c4:02:f9:1e:aa:fb:5b:ee:b0:
4a:d9:f8:5f:2c:f6:2d:7f:db:99:93:1e:d3:a6:31:
c8:fa:68:66:97:a9:ea:47:f3:41:c6:46:60:e6:f7:
87:48:e8:8e:8d:f3:be:0c:3c:32:76:28:2c:25:f6:
aa:c0:98:d3:2c:0a:c3:b4:5f:35:40:27:e3:fd:65:
2c:15:89:df:47:a7:0b:ca:c2:91:b5:f3:00:a4:d3:
1f:47:b0:e4:c1:ef:4a:01:e1:fe:24:6f:44:0c:c3:
32:cd:e7:e9:37:df:f6:56:6f:99:93:1d:3f:9f:d7:
e2:3f:f4:33:ba:cb:8e:b8:74:dd:6c:f4:e6:43:ae:
54:5d:ad:ca:bb:c0:c8:ee:ba:d0:b8:2c:77:43:cf:
30:ef:31:d4:c7:fe:34:05:b6:14:5e:c6:c6:42:c0:
5c:c9:cc:d5:b9:33:63:a8:f4:00:05:0d:70:ff:a9:
bc:e4:c8:19:e8:01:87:bb:ca:06:f7:da:23:d7:62:
13:47:ef:3b:c9:54:10:d7:91:81:fc:af:d9:af:a6:
32:95:1b:f4:68:c4:1d:f8:70:5a:87:f2:da:29:94:
bd:1b:cb:f2:81:33:67:f6:f2:97:e2:1e:e0:08:62:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6C:15:6F:80:EF:BF:2E:7A:DC:34:DC:65:E2:96:21:69:D8:85:C6
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/555f0c83-1ce7-45af-b439-b2fab6a08187.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0e::/48
Signature Algorithm: sha256WithRSAEncryption
04:a0:45:30:28:f5:61:74:74:49:df:54:2c:54:2a:63:b8:a3:
b4:0a:16:ca:2a:b4:da:58:df:96:dd:82:73:53:98:17:fb:e6:
68:d8:2d:a9:7b:da:36:3a:e2:aa:0b:a1:cf:60:77:cd:aa:08:
28:15:66:b8:bc:0b:1e:05:af:a3:73:c3:ec:7f:c5:ab:8d:09:
d9:ec:57:bf:71:a6:b9:b8:2d:c9:5c:ff:39:e6:7e:17:7c:71:
c3:f2:39:ea:d7:42:18:e5:af:3f:e2:32:cf:42:3f:10:d1:c2:
f9:7a:02:bb:4c:ba:4c:2c:5c:1c:15:d8:fa:ee:ea:0b:70:03:
76:b8:b3:63:17:85:67:d0:e4:c6:bf:fb:32:d6:11:b1:60:b2:
61:88:5a:d2:9d:39:5a:1e:71:67:1d:13:78:b8:23:c3:98:0f:
a7:a5:07:2e:83:53:39:16:ce:d0:50:de:df:5a:76:97:e6:6d:
49:6b:24:cc:18:e7:f5:e3:38:a8:cc:c4:d1:de:34:56:84:29:
10:ac:8c:f9:f3:61:2c:93:ff:50:ac:40:2f:04:e2:07:35:e7:
f5:ce:24:df:3c:8d:ec:dc:f7:4b:63:4e:2f:25:ab:7c:65:ca:
6c:d3:e5:62:36:66:bf:27:33:17:51:9e:62:af:08:b4:c7:9c:
0e:ea:3f:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:00 2026 by rpki-client