
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/828c43e2-b3db-4254-b671-cf097af0f75b.roa
File: 828c43e2-b3db-4254-b671-cf097af0f75b.roa (raw, json)
Hash identifier: w6W7m9MhwtJWfvYgSyTdlgHbA9l9jTxO2PvyJLrISOM=
Subject key identifier: C8:7A:E3:45:85:99:02:6C:A1:40:56:C8:D9:E2:9D:C9:F1:D1:EC:B0
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5C99599DEFE7168F35038E9E60708F91E3C675B3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/828c43e2-b3db-4254-b671-cf097af0f75b.roa
Signing time: Thu 10 Sep 2026 01:21:04 +0000
ROA not before: Thu 10 Sep 2026 01:21:04 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1087::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:99:59:9d:ef:e7:16:8f:35:03:8e:9e:60:70:8f:91:e3:c6:75:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 01:21:04 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=78d6b71269c18d308748ec527b07a2a61190f333b555b7233f8c7c433879dc22, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:8d:5a:87:aa:7a:10:bc:53:e3:94:d1:40:
e3:90:84:9a:56:8a:71:a1:c6:22:5a:7a:35:af:16:
ac:f9:67:04:f1:09:8a:c7:d4:0d:75:de:f0:9a:4b:
47:ac:96:14:4c:68:23:28:fd:68:2d:fc:ea:44:93:
86:db:04:0a:3c:89:9d:71:75:a8:b1:d6:cc:1f:9f:
35:eb:1d:de:11:e6:b1:38:b8:7e:77:bd:5d:68:a8:
47:62:32:1e:e0:9b:b8:1e:db:0c:b0:4a:88:03:68:
e0:03:d5:20:21:85:83:3b:fc:16:4e:84:7f:f5:0e:
b4:5a:e7:8e:d5:63:d4:0b:d8:42:4b:5a:d0:b5:37:
94:54:2c:43:9f:bc:be:da:99:34:5d:b1:d5:a5:3c:
a8:a5:c1:45:16:bf:b8:8b:e3:08:66:00:47:94:43:
5e:70:cb:2a:62:d2:d6:79:40:32:23:20:4b:e0:03:
31:81:30:15:3c:5a:1d:15:57:dd:00:c7:be:68:35:
02:32:01:d0:5c:47:f3:68:6f:3d:43:69:ce:f4:2d:
03:ff:e0:47:d8:68:2d:40:bf:b2:0c:a6:1a:4b:ce:
ac:a0:33:4a:91:90:43:44:d5:46:d3:32:34:6e:55:
8c:97:71:e8:f5:26:15:4b:87:97:d7:ca:92:73:ee:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:E3:45:85:99:02:6C:A1:40:56:C8:D9:E2:9D:C9:F1:D1:EC:B0
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/828c43e2-b3db-4254-b671-cf097af0f75b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1087::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ec:f6:b2:f2:fc:e9:c8:ef:25:83:d5:bb:59:b3:e2:a6:3b:
b9:4e:1f:19:d1:1f:2f:90:7b:02:9a:5c:d7:7f:76:81:a8:15:
ac:5a:9e:aa:97:93:bf:1f:e4:d3:c0:52:12:d1:89:0a:f2:de:
4b:3f:ae:c0:b3:2a:df:18:37:6e:40:04:74:ea:99:52:5a:13:
71:27:c3:ec:d4:9e:7d:34:5c:b3:67:08:63:c8:ee:38:0b:62:
ad:eb:c7:8a:6d:56:c7:ca:29:27:cd:4a:3d:58:17:04:27:cf:
7f:76:e4:63:0f:be:fe:22:bd:a9:a8:3b:68:0c:76:cf:63:f0:
88:43:a6:8f:0e:a5:c4:af:d0:18:e9:30:65:b9:01:91:d1:bc:
df:95:91:9a:22:38:30:30:ed:aa:5e:b2:de:48:d3:c7:fc:66:
52:ac:9d:d0:4c:e0:87:93:89:8d:e8:62:c9:0e:18:1c:c1:d6:
a4:bb:2f:77:89:42:fa:79:90:12:22:0d:53:49:c4:3f:a6:42:
8c:d4:26:dc:05:cb:81:a7:18:3e:02:98:be:7c:89:00:cb:71:
26:17:4a:e5:25:3e:9d:67:a6:70:7f:25:a8:49:14:8b:93:f0:
53:51:15:fb:c8:92:0b:6f:4f:8d:42:aa:6e:14:24:5c:15:5e:
36:f5:91:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:13:55 2026 by rpki-client