
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa
File: 3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa (raw, json)
Hash identifier: m85Nr0Iva5zkwnaecvJVCQnLeYmpcy8yl8c8Sigok9Y=
Subject key identifier: 18:12:37:37:8D:5E:B8:D8:76:46:30:DA:5E:0E:EB:38:44:E7:E9:99
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3D8A84E7993B34B32346BF23B6510A8301A4C6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa
Signing time: Thu 10 Sep 2026 02:20:33 +0000
ROA not before: Thu 10 Sep 2026 02:20:33 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:11dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8a:84:e7:99:3b:34:b3:23:46:bf:23:b6:51:0a:83:01:a4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 02:20:33 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=70cdcc5322c7fb9e46d4090faf3136a4cfed3e2126473e60decc92e13ba6a118, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:24:ba:60:ce:27:dc:a5:34:ae:6c:fb:3e:
12:64:16:20:66:a3:87:29:fc:dd:58:ff:5b:45:da:
4e:05:4c:0e:3e:29:48:8b:59:19:09:1a:c0:43:94:
4f:ec:e0:11:b4:48:f9:87:3f:23:51:ba:e3:ae:cd:
df:0f:6f:37:6f:12:52:3b:ec:c2:f1:aa:91:33:36:
3c:50:b2:6d:24:a2:b9:fe:44:37:26:40:6a:e3:ca:
f1:ca:9d:25:3c:83:f4:68:81:d5:f5:d2:2d:85:93:
ec:12:06:3d:f6:ef:13:8a:bc:b5:5d:2c:f6:19:32:
80:90:93:bb:ca:0b:48:a1:7a:04:15:ee:0c:90:80:
f4:12:81:c5:fd:a0:9f:51:57:5d:9b:94:5f:2d:f9:
52:89:22:7a:c9:0d:6b:ea:8b:ee:83:e1:ba:8e:2a:
68:56:3f:19:0f:ce:26:e6:9a:05:f9:99:c2:d3:f6:
39:17:ed:8e:e6:a8:7e:80:ea:cf:6a:f0:c2:aa:3c:
19:4f:f6:87:01:00:cd:56:31:83:3c:12:b8:29:1c:
79:42:31:61:70:7b:46:6a:ed:d8:3b:4f:7d:1c:b7:
f1:32:ea:f4:a2:9c:ec:ec:78:7c:bb:bb:8a:33:aa:
76:7b:92:5d:92:01:23:4f:57:9b:fc:4b:1c:16:cd:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:12:37:37:8D:5E:B8:D8:76:46:30:DA:5E:0E:EB:38:44:E7:E9:99
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c6f10f3-eb6e-4181-9c90-3cfc38714bd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:11dc::/48
Signature Algorithm: sha256WithRSAEncryption
68:79:44:80:83:b6:5f:4e:20:b9:93:d6:8c:4a:16:e8:2a:24:
2d:db:ea:67:4f:d3:f0:f6:31:26:13:99:b3:c4:38:67:07:e4:
2f:e0:89:b0:eb:4a:03:7b:e1:8f:d9:14:2e:7b:3d:59:82:9e:
c5:3c:c9:a0:d7:25:ca:d8:d3:d0:f7:9d:58:04:cb:1d:7e:68:
4b:ab:44:f4:18:7d:aa:44:47:6f:fc:cc:03:7f:19:25:52:39:
d8:15:46:46:41:8c:1d:b9:6f:dd:4a:ef:37:e1:13:28:7c:7a:
a2:44:43:b4:9c:5a:3a:05:39:25:53:74:17:14:87:6d:0c:4c:
41:65:79:cc:88:d1:e7:09:5c:81:17:dc:86:c7:fe:59:cd:c1:
8f:eb:8a:12:4e:2a:bb:98:09:93:cc:49:6d:66:33:6d:c7:33:
ee:85:47:5f:23:50:20:ba:c1:49:07:f8:ee:b0:da:c0:75:0b:
47:77:71:a6:b3:b1:55:fa:ab:b4:53:d7:bb:97:56:ad:52:07:
49:f6:81:f7:7e:31:90:4f:fd:1e:b4:15:9a:f3:90:c0:c3:4a:
60:62:e6:a5:75:06:a7:62:7d:93:fc:c2:c6:3b:46:7c:30:b3:
46:c3:b0:c5:40:73:67:e0:3f:52:4d:e7:ef:b9:f1:3e:dd:78:
bc:31:2f:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:39:40 2026 by rpki-client