
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0d22096-a2ae-46a6-8572-1bebb150356d.roa
File: b0d22096-a2ae-46a6-8572-1bebb150356d.roa (raw, json)
Hash identifier: asaO5BzKv3+CdQjP/OL8svnK+2V3hoYuTADbENp0+xE=
Subject key identifier: B9:5D:C9:A9:B9:AE:CB:8F:21:A1:00:AC:3F:89:26:42:25:A7:69:32
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 451D28681F9F7BFAD83C67FE446ECDB5CE020D71
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0d22096-a2ae-46a6-8572-1bebb150356d.roa
Signing time: Fri 03 Apr 2026 01:01:00 +0000
ROA not before: Fri 03 Apr 2026 01:01:00 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1e66::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:1d:28:68:1f:9f:7b:fa:d8:3c:67:fe:44:6e:cd:b5:ce:02:0d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 3 01:01:00 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=bd37b78f6e57ca7c5a24cb0fbbda321b35e6307bd97cb7eef78fc3b92dbac3ae, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:e4:43:3b:39:62:ab:fe:c0:46:85:96:8e:
4f:11:77:ad:3a:73:47:a3:5e:74:c7:b7:f6:8f:b4:
76:3c:88:87:e0:4d:f8:09:6d:8a:83:a1:27:33:48:
14:9f:7e:ac:f8:01:35:05:e2:e5:c0:c6:45:d3:a8:
95:79:f6:58:53:dc:03:cd:62:ff:9d:54:27:39:e2:
64:52:c5:f1:cf:c7:9e:ce:93:de:43:31:35:dd:dd:
d8:9c:02:6f:71:61:18:71:b3:0f:dc:cd:e9:b2:a6:
37:d2:59:b2:55:7c:55:9b:47:87:6a:37:89:5e:1e:
ce:4d:7d:f3:df:eb:1b:b9:c0:1c:fe:cf:86:0f:9b:
a6:b5:81:9d:28:95:c3:f1:56:05:a4:70:94:1d:45:
c8:cd:0e:f8:59:17:a2:13:20:28:b3:7c:5c:cf:14:
0a:68:80:94:32:71:ef:1b:b5:9f:16:a1:bd:1e:8a:
7e:bc:8b:f9:fa:2f:33:4f:f7:bd:2b:d3:91:40:b2:
b1:17:63:3d:af:9b:21:7d:80:fe:e2:43:50:ce:56:
7c:32:c7:2e:e7:62:e9:e4:ed:b5:5d:d1:13:c4:48:
08:56:46:a4:49:3b:bb:95:c2:d1:29:de:ca:da:cc:
c2:f1:04:a6:05:51:19:67:15:b9:2a:e1:e7:b9:9a:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5D:C9:A9:B9:AE:CB:8F:21:A1:00:AC:3F:89:26:42:25:A7:69:32
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0d22096-a2ae-46a6-8572-1bebb150356d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1e66::/48
Signature Algorithm: sha256WithRSAEncryption
c2:e1:0e:86:1e:ca:90:58:65:06:88:4e:ca:f1:4b:a7:61:ec:
19:d8:93:8c:71:46:86:00:5f:9d:c4:a9:b0:2a:c1:00:87:3d:
0f:06:8c:31:f5:0b:a2:23:a7:2c:1e:a1:44:d9:ec:8f:78:b9:
0d:6e:a6:b0:a0:e7:f4:4a:cd:9d:90:74:bc:cc:9c:65:4b:0f:
5d:da:73:ea:d4:c3:59:89:ee:c9:5b:f0:74:0c:5a:96:73:e1:
fd:c5:9a:2f:a5:0f:f3:e4:57:3d:a4:73:0f:21:ad:36:63:16:
8a:10:52:b8:99:ef:24:60:58:80:ef:78:67:47:0a:54:71:fc:
e1:f9:d6:fb:c9:40:8d:0e:15:90:e2:88:ce:60:9e:22:b5:1f:
c9:d2:85:94:2a:29:46:6e:6b:4d:a5:fb:30:1c:07:a0:97:bc:
62:b1:0a:c7:bc:8b:bb:4e:a8:ba:04:80:e1:8c:8e:f6:89:e2:
93:b4:f3:ac:23:b2:2b:1a:08:29:d5:5e:64:e2:43:80:55:d5:
62:2a:7a:39:84:47:de:78:84:72:24:f8:5c:1b:db:00:e0:15:
5a:f1:e1:bc:fd:11:62:5e:ce:10:67:c0:a0:ea:84:e5:e0:c2:
87:59:89:f1:6e:17:4b:a1:72:d7:92:2e:2b:bb:0e:0f:15:be:
ab:18:0b:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:37 2026 by rpki-client