
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/69a9ee21-e189-413e-9f64-8f49efefbc4f.roa
File: 69a9ee21-e189-413e-9f64-8f49efefbc4f.roa (raw, json)
Hash identifier: qb5ru6Ws4LJzyi61YpUEtFRY32CxFQMKCMO96DecVs4=
Subject key identifier: 65:25:B5:4A:A9:0D:5B:8F:32:DF:6D:FA:A8:93:44:8A:8E:E3:E0:86
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 590C1CAF3BB82CCC53127181394ED3F4E7E450D3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/69a9ee21-e189-413e-9f64-8f49efefbc4f.roa
Signing time: Thu 10 Sep 2026 01:00:06 +0000
ROA not before: Thu 10 Sep 2026 01:00:06 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1128::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0c:1c:af:3b:b8:2c:cc:53:12:71:81:39:4e:d3:f4:e7:e4:50:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 01:00:06 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=d8bb3ee8214fb06f952ae60110a01e98a69fdc0223938db481518744e6e1b0bc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:4a:72:19:df:be:b2:ab:e0:46:0d:78:37:
fb:8a:e8:b4:eb:02:55:39:d4:a0:a1:15:43:68:86:
f2:02:3a:d3:53:c3:81:08:21:c5:86:24:b4:eb:ce:
c6:cb:c4:34:61:3b:b6:61:19:ba:09:33:76:d6:2a:
53:f2:04:6f:26:e4:d5:15:e1:7a:bd:e3:b5:a1:f6:
10:c3:86:9c:9a:36:a6:61:57:0b:16:2e:f2:34:39:
30:cf:fc:5d:2d:9d:2f:2d:a9:e3:27:44:ed:95:e6:
0f:aa:3d:9a:e3:55:52:83:b3:ae:69:82:6c:6b:f4:
58:f2:c5:6e:ad:9c:e0:88:e8:7e:80:ae:af:45:28:
ca:aa:a3:80:47:68:05:71:97:b9:de:26:be:a8:fa:
ea:50:8e:20:f6:00:58:c9:fd:93:fa:4d:5f:67:16:
e1:b4:66:b2:7e:27:f5:db:3d:64:6a:a7:8a:7d:e0:
af:cf:27:c9:f0:dd:25:7b:0d:bc:20:03:a8:d2:dd:
46:b3:5d:4f:f0:9c:37:e4:db:77:54:ac:50:c9:14:
7c:7b:83:eb:7f:ff:05:b4:fc:96:63:42:3b:19:a5:
33:fa:eb:98:3f:a0:ab:21:50:94:f6:25:a5:84:e3:
bf:c2:39:ed:f5:d9:35:54:76:5d:df:c2:b2:29:68:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:B5:4A:A9:0D:5B:8F:32:DF:6D:FA:A8:93:44:8A:8E:E3:E0:86
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/69a9ee21-e189-413e-9f64-8f49efefbc4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1128::/48
Signature Algorithm: sha256WithRSAEncryption
82:94:8d:6d:7e:8b:eb:3f:04:6b:f6:15:c9:1c:83:32:b9:23:
88:d1:16:5b:be:72:9e:d2:6d:92:ac:6e:0c:d6:38:2e:60:2e:
eb:be:b8:d2:7b:1d:76:91:dc:3a:a8:13:ac:6b:43:1e:fe:89:
b8:f8:69:a5:d2:9e:cf:fb:46:10:8c:e3:2b:c6:d1:92:c4:4c:
b8:0a:ae:21:af:c6:d0:06:63:f6:df:69:9f:13:04:c4:18:78:
18:84:3b:47:1f:5f:30:a7:0b:6a:fd:b0:97:b2:fa:6d:a0:b9:
5b:91:d4:b1:27:60:f4:fa:4e:45:01:4c:5a:58:7d:07:2d:06:
fe:2f:b9:42:93:2a:ae:53:e6:44:24:18:40:84:23:7d:3b:f8:
b2:5d:eb:5e:87:79:67:8d:72:d1:eb:12:c8:cd:94:ea:7c:88:
90:38:9b:27:95:2d:cf:0c:3c:a8:bb:7f:2f:27:a3:af:6b:8c:
19:55:04:b9:82:0a:95:ed:4f:0c:a7:58:6b:a8:20:d5:20:4c:
18:2d:b4:58:24:51:bb:f6:ae:b9:b5:e7:c9:69:d2:b5:f2:8f:
ed:8e:7a:29:62:6b:b3:19:66:7b:41:d2:da:d5:5c:74:09:de:
9c:b4:c4:65:03:3d:59:f6:73:13:7d:cf:24:e0:b0:e7:58:e6:
ba:3a:a9:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:26:57 2026 by rpki-client