
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4567fa75-dbeb-4c82-b672-33d2b6cbcba1.roa
File: 4567fa75-dbeb-4c82-b672-33d2b6cbcba1.roa (raw, json)
Hash identifier: 39bSa3F/e/pVqZmsiyFrK1DanBRP+seixEc+q9/YW5o=
Subject key identifier: EB:07:7C:BF:D8:8B:76:AE:4C:1B:9B:87:3B:B6:75:1D:1C:86:03:55
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 164128C4167692DCDF45046D1FC2C9E7BAD68493
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4567fa75-dbeb-4c82-b672-33d2b6cbcba1.roa
Signing time: Thu 10 Sep 2026 01:40:09 +0000
ROA not before: Thu 10 Sep 2026 01:40:09 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:10c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:41:28:c4:16:76:92:dc:df:45:04:6d:1f:c2:c9:e7:ba:d6:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 01:40:09 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=b6495e6e1f306e6db0a53194d3ee92485afad619c3b71098704a5dcc9141a400, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:22:63:38:33:50:e7:4e:ab:dd:cc:46:ff:
a6:d1:45:4c:b9:72:63:d2:c2:8f:7f:e9:52:1d:58:
db:99:d5:25:b1:f6:e8:78:9f:ee:b3:a8:a4:2e:16:
45:d3:c5:1c:df:22:5d:f7:2a:34:cd:cc:26:42:f1:
a9:21:84:b8:bd:52:71:d9:87:1e:54:7d:df:48:c4:
f5:83:c3:cc:78:1a:20:c8:40:a3:a4:a4:3d:5f:fb:
63:f6:7c:4c:c4:60:29:7c:2c:3d:42:5e:96:40:97:
70:0f:6b:ed:c6:55:be:b0:a4:7f:d0:42:2b:ec:0a:
0c:8a:0b:4f:98:ff:e3:69:c8:65:4d:a0:04:c1:d0:
4e:90:0a:e4:7e:9b:a3:4e:75:d2:af:1b:bc:57:fb:
55:0e:27:9e:c6:b4:27:1a:66:67:e9:e8:f2:1f:6b:
47:ba:b4:25:7e:d1:26:70:ff:27:33:90:3c:ac:18:
49:e3:de:a4:c5:4b:0b:26:3d:21:be:8e:17:b7:7e:
c7:5a:07:96:9c:d1:97:d9:5d:ed:1a:52:7c:8b:c7:
c4:eb:66:a2:52:8d:4b:2f:c4:02:32:7b:77:96:d2:
f6:3d:df:83:5c:bb:03:c3:97:79:01:45:30:90:be:
d2:7b:d9:2f:a4:1d:7e:4f:c4:d4:68:6d:47:ed:69:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:7C:BF:D8:8B:76:AE:4C:1B:9B:87:3B:B6:75:1D:1C:86:03:55
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4567fa75-dbeb-4c82-b672-33d2b6cbcba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:10c8::/48
Signature Algorithm: sha256WithRSAEncryption
6b:52:1d:a9:ad:f0:c1:8d:b7:b9:52:ab:f6:5c:9e:07:45:8c:
74:d7:c3:21:e6:b7:a7:ad:d2:7f:26:0c:14:19:25:37:7c:9d:
09:33:fa:1b:83:1e:43:91:d5:55:00:6d:8c:0d:0f:ce:b8:df:
bd:cb:ba:d8:c2:b9:4d:de:16:56:74:dc:2f:9f:4b:61:cd:10:
e9:63:5c:74:44:c3:e0:f0:a5:a3:8b:bd:1b:68:ce:12:02:0d:
c8:e2:51:91:60:b1:68:54:eb:a1:ee:0b:aa:2c:23:3d:df:9c:
38:ad:cd:da:b9:8a:8c:44:44:07:67:e3:91:ce:ee:e4:db:08:
03:c9:41:3c:5f:ee:fd:8e:0f:a2:7e:ce:e8:b3:9a:e1:33:81:
3a:33:3f:57:45:91:60:9b:e9:74:a8:f4:62:7b:13:14:f9:c5:
0a:e3:f7:78:26:42:e4:21:ac:9e:3c:d6:02:d9:bc:b3:de:86:
3b:00:09:51:aa:7b:15:74:48:73:41:0c:13:2c:34:3e:8c:7a:
22:86:81:45:ac:a6:79:57:5b:15:d7:2e:73:b5:57:3d:1b:00:
a5:df:98:fc:1f:31:78:1c:c1:33:60:ee:08:f1:61:ee:50:4b:
d0:32:57:1c:40:9d:ae:3b:bf:a7:8d:ac:8f:92:56:29:b6:bc:
e6:77:ee:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:47:16 2026 by rpki-client