
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9c57f84-2457-41a1-9ad3-ce57973d9e5c.roa
File: b9c57f84-2457-41a1-9ad3-ce57973d9e5c.roa (raw, json)
Hash identifier: RzxKpucBNmxFZ1L+zYSDkqKYTh2nNY+Y/Cn6Ml/hMS8=
Subject key identifier: 27:C4:14:53:24:9B:CE:47:AD:CC:72:96:32:89:77:7A:FB:94:8F:0E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1001B4DB819E79DC61BCF99D52D7CE685A56DF2D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9c57f84-2457-41a1-9ad3-ce57973d9e5c.roa
Signing time: Fri 03 Apr 2026 00:41:23 +0000
ROA not before: Fri 03 Apr 2026 00:41:23 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1220::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:01:b4:db:81:9e:79:dc:61:bc:f9:9d:52:d7:ce:68:5a:56:df:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 3 00:41:23 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=0b4845b96e23b4f0f31da6f85140c25b0524005828ec669b9bc6a378d852b8a6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:da:a3:44:a5:1a:fd:a8:fd:7d:36:1c:e1:
65:4e:bb:c1:af:97:18:d5:3c:c0:6b:ca:90:7d:a2:
9e:f5:5b:e9:b3:d2:d5:60:fc:84:4f:f6:30:3f:7b:
4b:99:ff:b9:8c:2f:10:c5:17:56:72:7c:3b:2b:ff:
71:df:e5:57:7c:45:c3:df:d2:ad:11:6c:4d:24:26:
10:8c:92:e6:a8:ee:36:b7:66:fa:40:d1:8a:ac:ba:
79:c8:62:78:46:c6:d9:17:63:54:f5:bd:00:65:08:
1b:2d:f8:03:b7:f1:b3:d4:ad:6c:5a:b8:85:e6:dd:
b8:2e:95:ac:15:33:51:ae:b0:92:c0:c1:50:71:9d:
43:48:3f:dd:5c:03:16:09:66:78:44:fe:2f:6e:e3:
56:20:b5:11:8f:74:eb:2a:fe:f8:0e:0d:7c:c0:21:
be:7e:38:89:d6:0c:c9:12:f3:0c:ef:c6:d9:d9:a8:
f0:11:e1:88:6a:39:6c:a1:be:e8:58:2a:08:fa:cf:
bd:2c:10:a8:af:bf:4a:97:4f:b6:27:53:53:9c:aa:
aa:7b:31:00:e6:df:b1:d7:27:e3:26:e1:63:b2:c0:
4f:70:25:ae:69:b5:2c:a8:1a:f8:13:b8:36:db:52:
a0:f5:8e:9d:0f:c3:39:ba:6a:bc:28:32:9b:c2:34:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C4:14:53:24:9B:CE:47:AD:CC:72:96:32:89:77:7A:FB:94:8F:0E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9c57f84-2457-41a1-9ad3-ce57973d9e5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1220::/48
Signature Algorithm: sha256WithRSAEncryption
b4:cf:c4:8d:70:ed:2f:10:9e:49:b9:92:8f:bf:34:02:3d:27:
13:82:c1:77:91:49:42:2d:a7:8c:cc:ce:5d:ba:68:bf:c0:f4:
f9:a5:ec:f7:82:1b:f1:c8:2b:08:e2:24:b9:32:c1:55:2e:6a:
b9:0d:90:b4:3e:79:c2:15:9f:3b:82:58:aa:d4:72:54:0a:34:
0d:e7:a8:59:10:af:d5:34:50:65:35:a5:33:2d:c9:eb:83:10:
e5:2b:e3:5a:99:93:62:10:ef:32:42:c5:40:e2:ee:ae:36:a7:
57:fb:8b:5a:ca:aa:22:9c:d6:9c:84:88:5b:1d:6b:66:d7:cb:
7f:63:ac:8f:09:9b:94:54:b2:5d:f8:58:5d:a8:56:c4:bb:12:
b2:7e:f3:85:f5:16:be:ba:d3:05:d3:fc:e8:f7:48:43:04:b4:
7c:54:a0:3e:f0:df:5b:40:1c:ad:c9:bf:3b:e4:05:f0:c5:d1:
28:ca:5c:e6:f2:bd:11:7f:13:9d:63:cd:48:b8:c2:3c:93:62:
9b:47:4f:ff:9d:b6:15:f6:20:ae:58:95:1f:a4:38:9a:8c:f9:
7a:6a:fc:3b:30:d2:e9:f9:32:af:b1:6e:e8:1a:66:42:99:79:
e5:fb:ce:6d:03:0c:37:09:7f:4b:7e:45:e4:db:8d:90:c3:84:
a0:69:41:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:46 2026 by rpki-client