
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9677e1b8-20cb-408d-97fd-616a99e64661.roa
File: 9677e1b8-20cb-408d-97fd-616a99e64661.roa (raw, json)
Hash identifier: bKa+oviD6KaDSicyCe3ouhmfCXo6bc3q1lAKFL5Aj3s=
Subject key identifier: FD:8E:58:51:28:13:E7:A3:77:DE:3E:06:7F:EF:24:0D:CA:F7:34:41
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 28ACD03D4B56A8588F598E236671001A436D950C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9677e1b8-20cb-408d-97fd-616a99e64661.roa
Signing time: Thu 10 Sep 2026 01:30:38 +0000
ROA not before: Thu 10 Sep 2026 01:30:38 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:10f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ac:d0:3d:4b:56:a8:58:8f:59:8e:23:66:71:00:1a:43:6d:95:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 01:30:38 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=b9d830ffa3044242b0b5c5cf8e56c55c9384c6f1c5d7547c4aeb42ce65da9ea1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:81:80:f4:94:38:b1:f5:ad:8c:df:8d:3d:
4c:22:c2:c0:35:0d:a4:ef:88:9c:25:15:e3:05:54:
c4:90:d1:2f:63:f6:fa:30:18:b4:de:be:ce:8f:a9:
ba:74:36:56:47:30:4c:1a:51:fa:a0:43:c6:31:99:
f7:4b:60:a2:5b:94:26:af:bd:2d:37:e1:39:1f:96:
80:3b:07:d2:bc:50:3f:4c:c2:69:f6:13:37:e8:1e:
20:a7:63:88:ba:86:e5:57:c4:b8:ee:74:0d:e2:67:
55:37:e1:e9:ef:15:e2:c0:cb:1d:7c:fb:88:61:3b:
6c:b7:1a:89:c9:34:49:8b:3e:37:83:9e:22:3d:7b:
44:1e:46:9a:6c:61:92:5d:7b:f7:7d:c6:60:97:6b:
a0:25:63:5d:99:4b:2e:6e:56:95:17:b3:6e:47:e9:
8f:5a:2f:36:bf:37:fd:45:46:ca:37:4e:28:bd:ea:
d6:c6:97:0f:21:65:cb:be:ac:f3:20:b2:e7:3f:55:
99:b1:5b:53:c8:4c:dd:8e:90:4b:40:9d:3e:c4:d4:
23:ce:49:76:a6:ab:df:27:11:59:c2:dc:29:3f:2e:
d1:f4:06:2f:92:2f:71:0b:5c:28:5c:69:65:28:89:
28:65:63:a5:e9:32:b6:a3:de:cb:4b:e7:6d:d9:11:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8E:58:51:28:13:E7:A3:77:DE:3E:06:7F:EF:24:0D:CA:F7:34:41
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9677e1b8-20cb-408d-97fd-616a99e64661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:10f3::/48
Signature Algorithm: sha256WithRSAEncryption
49:f9:91:29:15:84:63:21:6a:a2:07:83:25:b1:de:f6:c9:37:
a6:b6:df:6e:e6:ea:51:cf:66:a1:e7:58:bf:9e:2d:b7:3f:6a:
36:b7:78:0f:a9:b9:31:32:b5:71:11:b8:7b:56:0a:6f:ac:f0:
ee:b7:39:9d:2c:07:66:41:3f:38:33:05:6c:aa:e9:f3:1d:50:
33:d3:66:1d:e7:42:98:c7:74:9d:67:de:4e:4a:46:57:82:38:
4f:da:07:81:4b:04:3b:cd:02:e0:6b:21:c3:db:55:d0:d7:98:
ab:20:47:d6:ea:da:28:c7:b6:59:4e:4f:84:75:17:48:db:a8:
d2:a4:e5:ed:9a:22:f3:6f:08:95:59:17:fe:4f:db:68:b9:97:
c9:a9:39:73:ba:2d:5a:d3:26:84:d1:71:a1:1c:1a:c5:f7:c5:
3e:46:9e:4b:03:1f:2d:e1:03:48:eb:b0:ba:03:4f:af:de:94:
9c:a7:4a:c6:4b:16:c1:81:ee:d3:36:95:db:31:cc:1d:82:a5:
b6:32:1c:7f:67:55:97:e8:20:06:2b:54:5d:1f:9a:17:fc:fd:
4d:c7:cb:f6:54:bd:64:22:7d:95:ef:2a:29:de:ad:47:95:8e:
fa:7c:d8:34:a0:58:d7:83:69:f5:a6:ca:f7:09:1a:db:61:07:
19:31:5d:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:38:59 2026 by rpki-client