
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae088395-6226-4ed2-99e6-6e602894622e.roa
File: ae088395-6226-4ed2-99e6-6e602894622e.roa (raw, json)
Hash identifier: K9zRxnetUkPw3bKIM/0BdU/K4QjcKJhyQ9HDzmRw8E8=
Subject key identifier: 79:6B:1C:26:A2:26:51:C4:49:B8:E2:AA:5F:50:05:74:F7:AD:06:8F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1772F3A507ADC9405D2D5AABA56FDA4D56F7C79D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae088395-6226-4ed2-99e6-6e602894622e.roa
Signing time: Thu 10 Sep 2026 01:11:48 +0000
ROA not before: Thu 10 Sep 2026 01:11:48 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1ea3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:72:f3:a5:07:ad:c9:40:5d:2d:5a:ab:a5:6f:da:4d:56:f7:c7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 01:11:48 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=b6332e11b557cfc4ef4fe6e89586ad78d2b1de57a131b21307bc634c74cf04e8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:72:65:2b:f2:c1:e7:e7:cd:61:21:21:ce:
5b:b0:c0:86:ff:97:3a:0e:62:ad:03:08:48:a2:81:
47:cb:b0:ed:31:ce:2a:1c:f2:07:94:db:4a:1a:0c:
e7:e6:8d:18:a1:8a:ea:75:1a:18:ae:e3:de:02:2f:
75:1e:b3:9d:31:3f:96:3e:40:72:ed:63:c0:90:f4:
2d:3e:0c:76:7c:e0:ab:e4:cb:0a:5a:fb:7b:ce:09:
a8:56:22:bf:c4:75:5e:8f:a9:1b:e6:41:9a:f7:fb:
cc:4a:b4:74:a8:08:7f:ad:05:93:12:f1:ee:fa:91:
38:65:69:ca:cb:a5:c0:b3:6f:3e:86:0b:04:79:1c:
74:8f:08:19:ea:73:a9:6a:bb:f3:ad:91:70:24:5c:
9f:91:0e:08:b7:5c:4f:3e:df:da:fe:a2:44:9b:81:
7a:ae:6c:f9:e1:05:bc:ed:2a:65:00:50:5d:c0:01:
21:e3:04:35:01:3d:6a:de:ec:50:4b:de:6d:87:ac:
5a:3f:4e:13:a4:4b:b1:78:55:a5:d7:b2:01:9c:98:
8e:23:1a:c8:e4:c1:ae:40:67:96:4a:67:49:da:75:
17:14:8a:c3:b8:14:a0:e4:98:9c:63:48:d4:62:4d:
49:bb:d3:c8:da:e6:92:93:d6:27:ba:b5:26:d7:04:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6B:1C:26:A2:26:51:C4:49:B8:E2:AA:5F:50:05:74:F7:AD:06:8F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae088395-6226-4ed2-99e6-6e602894622e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1ea3::/48
Signature Algorithm: sha256WithRSAEncryption
ab:f0:c3:2e:1c:f9:bb:74:02:1c:2b:2d:6a:a7:54:f5:ec:c8:
8f:aa:03:06:a2:2e:43:c3:9b:7d:ba:11:7d:84:bf:31:0f:fb:
79:f9:5d:dc:a6:4e:fc:c1:82:aa:1d:2a:e9:f5:e5:37:7b:b1:
69:db:f1:d6:58:b4:c9:64:c4:f0:af:2f:5e:a8:6b:84:9f:cd:
8f:5c:a5:45:78:0a:7a:aa:49:1a:aa:ab:cc:1d:cb:b6:28:33:
9e:b5:a8:5a:15:d0:b0:aa:61:42:c1:00:28:77:b1:e9:a0:53:
a2:c2:10:87:c8:62:25:20:f7:2a:d7:bd:4a:42:45:2e:14:c3:
62:c5:d6:94:4e:e9:cb:90:88:7f:9e:ed:16:52:07:9b:e8:7d:
17:bf:fa:e3:fb:3a:b9:e9:ba:ae:5f:f6:ec:12:24:0b:8f:d6:
f5:f8:c3:55:32:ac:eb:10:9f:37:b6:76:f4:40:88:1b:93:2e:
b6:e2:cb:7b:0f:87:83:97:d7:a7:30:3b:dd:9f:07:ec:69:3a:
91:7f:73:47:c9:a7:b2:7c:8d:e9:53:f4:c8:ca:0d:75:8d:ce:
2d:e7:50:b9:ec:a2:5c:49:da:69:9b:b0:eb:29:62:ad:60:45:
7e:a4:6b:bd:ee:e4:1c:4e:7d:de:d7:04:55:71:42:ee:00:8a:
11:9a:b5:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:11:44 2026 by rpki-client