
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/373cf3d5-b259-4657-a9e9-17e625b3084b.roa
File: 373cf3d5-b259-4657-a9e9-17e625b3084b.roa (raw, json)
Hash identifier: bDq8pEj8hgS2RWf9OhJ2+puXWIUSJhSXxvW4BUxVazo=
Subject key identifier: FC:3D:C7:BA:64:5B:2F:F8:4B:EE:F6:8D:47:96:44:F6:AE:3C:50:31
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 05EEFA178A28465683FA03DD3D511ADE74EE433D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/373cf3d5-b259-4657-a9e9-17e625b3084b.roa
Signing time: Thu 10 Sep 2026 02:20:07 +0000
ROA not before: Thu 10 Sep 2026 02:20:07 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1ea2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ee:fa:17:8a:28:46:56:83:fa:03:dd:3d:51:1a:de:74:ee:43:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 02:20:07 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=93dd8d8bcd3b131e3bdd6d7e6b17aa206539a894f7b429ed93a8a65cdc181dab, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:17:70:92:05:47:c4:f2:61:44:51:4b:96:
3e:95:a9:ac:2a:d8:ad:6f:91:65:cb:3c:6d:ed:98:
0b:3b:10:1e:05:2a:b9:b1:81:58:e9:f3:9a:de:82:
c1:19:47:9b:e3:e5:1a:74:e8:82:42:01:a0:ea:26:
57:93:25:fd:c9:44:3d:c4:af:db:cf:e9:c8:fb:33:
27:91:ba:22:de:d8:75:8d:af:93:0b:d6:13:e8:88:
9e:4c:1b:81:1d:25:22:b9:1c:68:c4:4c:10:b8:78:
b4:57:8b:44:88:80:75:d0:ca:8e:c8:33:8a:f9:db:
01:51:57:4b:c8:34:83:e8:55:89:42:8e:47:ac:7a:
4e:96:29:ab:0a:d2:97:5d:de:7b:05:dd:3b:b2:6a:
f8:34:ee:cd:8e:2f:97:8f:48:d1:ad:b7:a6:8f:f6:
64:17:3b:9f:57:43:02:8d:16:4c:6c:12:79:c2:4f:
fb:2f:39:b4:78:99:95:d9:5e:c1:68:af:24:30:a2:
8b:40:f1:3d:55:ef:47:dc:c9:f3:2f:be:ba:c7:59:
b4:0b:60:4e:dd:ae:62:ce:2a:5f:8c:af:56:d3:e4:
9e:b1:f3:d4:6b:38:92:ff:78:31:65:23:cb:5b:b9:
b7:49:b6:8f:0f:c5:37:c1:96:b0:aa:a2:e1:4c:9f:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:C7:BA:64:5B:2F:F8:4B:EE:F6:8D:47:96:44:F6:AE:3C:50:31
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/373cf3d5-b259-4657-a9e9-17e625b3084b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1ea2::/48
Signature Algorithm: sha256WithRSAEncryption
91:fc:d4:a6:d8:43:84:2b:1d:b7:c3:b7:be:29:d3:a9:86:ae:
aa:22:d5:36:f4:29:e8:6f:39:3f:fd:23:3d:5c:01:d8:6a:1f:
3c:f0:5a:0e:8b:13:1f:41:db:b0:dd:a9:2a:83:66:d7:b9:9c:
0c:c4:c7:9c:7c:93:24:55:0c:cf:df:f7:7b:b8:3e:b3:18:67:
eb:53:73:37:e1:15:23:28:4c:31:ed:41:01:9b:0a:11:89:75:
15:29:8d:f4:2c:8c:5f:39:1e:97:0a:97:6f:8d:fb:36:5d:6c:
da:21:d6:8b:bf:81:50:30:db:16:13:5e:b0:f4:b4:2a:25:8f:
f5:a8:e3:bd:9e:99:e6:5a:29:04:1e:35:30:16:ff:4f:f8:ed:
c4:6d:d9:3b:db:e5:6b:93:86:f9:15:2d:fd:a3:3f:ef:89:80:
e5:64:e9:72:be:65:11:c4:d6:06:32:7d:b6:d4:05:b0:5c:61:
c1:d5:ae:8b:64:a9:26:bc:83:a6:00:72:75:71:47:13:bf:05:
9d:dc:b2:7f:16:18:e2:45:32:01:25:64:77:ef:89:44:e7:fb:
7d:d2:7d:44:39:bc:2a:fe:51:35:a3:c9:f3:ce:14:4c:12:ee:
55:bb:2d:52:de:d0:55:4c:00:19:e9:cc:2a:51:69:02:cd:d3:
e8:42:08:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:21:54 2026 by rpki-client