
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/97df07c2-d3ff-4226-a16e-bf323c17a31e.roa
File: 97df07c2-d3ff-4226-a16e-bf323c17a31e.roa (raw, json)
Hash identifier: U6DzTzcPEsnVllaRL90ffRK9pwlWno2GQplwPHgrdgM=
Subject key identifier: D2:AD:78:1D:B3:58:71:A6:3F:E4:C6:EC:92:E3:BD:18:6F:A0:8D:65
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6A586777F044FAD902935010FE25C3F29E64A733
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/97df07c2-d3ff-4226-a16e-bf323c17a31e.roa
Signing time: Fri 03 Apr 2026 01:41:38 +0000
ROA not before: Fri 03 Apr 2026 01:41:38 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1125::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:58:67:77:f0:44:fa:d9:02:93:50:10:fe:25:c3:f2:9e:64:a7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 3 01:41:38 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=2195b3f135420eaff6402976dd81ec7e1c1f827b2979d345501c74c95a427edf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:91:34:2f:33:63:7e:0c:19:94:bf:7a:0e:
3a:bb:1f:fe:e4:3a:f8:09:44:ad:49:91:5b:21:e3:
54:c5:1b:2e:64:fb:98:b1:33:47:a2:20:f7:2d:ac:
df:a5:5e:78:cb:1a:53:1c:c5:c4:67:42:12:84:86:
8c:08:61:15:f2:0c:c6:38:ec:35:bd:cc:7e:0b:5c:
47:ba:a7:89:5c:9d:67:d8:17:26:b2:ca:0d:d6:6f:
9b:9b:ca:e0:12:0a:6e:c0:ba:c5:67:f5:ca:1e:27:
76:cb:75:28:87:68:69:3c:78:cc:22:5f:00:70:b0:
8c:61:88:67:44:9a:93:ee:9f:72:a5:e2:b8:8e:2a:
04:ed:65:62:33:85:d4:17:b7:52:e0:c6:2b:cb:ea:
4d:66:0f:2f:ea:eb:27:7a:d1:91:7e:a3:d3:8c:7e:
fe:61:cc:4c:90:28:22:f4:e3:ed:89:4d:06:13:0e:
71:77:03:0e:19:23:7f:32:7b:c9:db:0d:0f:a0:8c:
a0:2a:eb:59:29:a3:c7:39:95:02:db:a1:58:f6:5f:
5c:0d:ba:f4:28:bc:21:71:48:f9:fe:c9:66:63:c8:
2c:49:69:64:21:42:46:a0:04:64:dc:fb:cd:f8:68:
14:eb:d2:a7:f7:b7:60:68:b4:89:09:4a:62:8e:c5:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:78:1D:B3:58:71:A6:3F:E4:C6:EC:92:E3:BD:18:6F:A0:8D:65
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/97df07c2-d3ff-4226-a16e-bf323c17a31e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1125::/48
Signature Algorithm: sha256WithRSAEncryption
0a:57:48:67:43:e9:41:74:f6:8f:b1:d1:0b:a3:b9:c0:28:17:
97:96:54:4b:ec:d7:69:0e:54:51:49:4d:01:fa:40:09:82:52:
14:2b:c5:15:f4:8f:5c:5c:52:76:94:58:36:d7:21:95:00:43:
3e:ce:0a:fb:be:87:33:a6:a8:b5:2a:aa:20:48:2f:c9:26:02:
f1:04:ef:f1:d7:b8:ac:3d:a1:d8:ec:a6:c4:77:22:fe:f1:c5:
80:16:de:38:99:b8:a0:38:df:2b:82:c1:ff:8c:7e:43:fa:19:
ad:ba:54:b7:c8:a6:74:0c:19:5f:89:8b:89:c2:8b:a0:c1:f3:
f2:f0:9e:b3:b7:28:52:d0:d3:9c:80:bf:98:5c:93:a7:94:df:
9c:cd:d2:c2:96:d7:b8:1c:6a:f0:fe:f3:a9:2c:91:2c:51:ba:
7c:2d:0a:75:f3:c7:0a:56:cc:ad:a2:fd:d0:09:8c:7e:46:ee:
b3:7f:fa:6d:f1:55:72:c4:e9:c0:66:8c:13:10:ec:18:da:f3:
71:88:eb:35:db:d1:cd:81:52:40:63:94:51:a7:a7:85:97:de:
15:3d:fe:50:4e:15:06:48:d5:b1:74:df:3e:7c:b0:b6:a2:b6:
d4:0d:02:de:4f:68:89:3c:3f:a1:47:1a:a0:13:86:7e:22:ae:
8c:99:44:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:42:41 2026 by rpki-client