
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/059c8d5b-fad5-4065-adb7-ca1b0bcaaf81.roa
File: 059c8d5b-fad5-4065-adb7-ca1b0bcaaf81.roa (raw, json)
Hash identifier: /WlUoQPGKp+yjQS6oGsTbeBKG73FHSwfeH5i9iqInB4=
Subject key identifier: 44:0E:7E:5C:08:D0:4F:EB:EC:71:F8:A4:4E:A1:36:F1:B3:C5:B9:FF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 08E02580827CE0C82B3EEC2F5AF5E28B4729BA3A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/059c8d5b-fad5-4065-adb7-ca1b0bcaaf81.roa
Signing time: Mon 22 Jun 2026 01:00:06 +0000
ROA not before: Mon 22 Jun 2026 01:00:06 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1081::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 05 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e0:25:80:82:7c:e0:c8:2b:3e:ec:2f:5a:f5:e2:8b:47:29:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jun 22 01:00:06 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=974ed485bb6e1c29fa073fefa29af36a841192382492ddecc55e08317ccd3729, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:cc:ba:73:33:b2:99:91:ad:d0:b9:43:c6:
32:12:14:fc:fa:35:24:6e:69:71:4e:ae:98:8a:68:
52:4a:e5:a8:fb:b9:63:dd:61:f9:4a:c6:8e:1a:1d:
d3:7a:1a:e0:68:44:37:ff:00:f6:bd:4e:e3:e2:ca:
88:d5:9f:a0:52:97:2b:69:d0:f2:38:c7:e1:52:6b:
d9:64:e9:74:8d:df:de:9f:94:82:14:05:37:e4:bf:
0f:36:1a:08:f7:af:c2:0b:38:8a:7a:a3:25:f3:d4:
08:0a:40:8f:62:b6:97:c5:13:78:dc:8d:de:5b:4e:
24:c0:80:78:34:70:6e:c5:5d:f3:e7:26:d3:d3:b2:
bd:74:89:0b:0e:14:9f:07:e9:37:6c:37:34:e8:6e:
ad:bb:d7:45:75:0e:2a:f0:8f:c6:49:25:b0:64:ff:
a4:4d:f2:9f:a7:7c:10:54:af:2f:1c:01:56:9b:a2:
3d:d0:45:1f:72:eb:ee:30:3b:20:b3:cc:34:1f:6a:
f2:0b:1e:7a:32:b6:c2:b8:45:48:83:6d:44:19:83:
f1:59:97:59:83:c6:d0:01:a2:b0:83:1e:a9:df:35:
91:67:1a:f7:b0:e6:87:98:20:aa:74:ec:f7:57:d6:
5f:1c:bb:e4:0e:af:65:ba:e1:68:c3:b8:cd:92:96:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0E:7E:5C:08:D0:4F:EB:EC:71:F8:A4:4E:A1:36:F1:B3:C5:B9:FF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/059c8d5b-fad5-4065-adb7-ca1b0bcaaf81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1081::/48
Signature Algorithm: sha256WithRSAEncryption
1d:eb:32:1d:de:1e:a4:6e:33:bb:c7:e4:9b:0a:83:70:37:3a:
2c:7f:78:84:53:d2:57:e7:57:f6:d2:62:f5:d2:b8:d6:70:bb:
f2:6d:8a:27:5c:07:50:2a:c0:2f:8e:45:41:60:bd:ea:f0:02:
2a:85:29:f8:84:71:2f:bb:96:1f:f4:c2:5f:e0:84:64:bc:5c:
97:0f:bc:2d:2a:d5:d7:bd:f9:79:5d:68:50:ff:4c:85:83:b4:
ec:9a:05:de:91:ad:77:a5:6d:c9:f8:c8:d9:d6:b7:f7:a3:8a:
94:3e:28:c2:a9:5a:d4:89:c6:87:50:e5:f7:7d:ac:ca:f6:60:
cc:db:08:c1:fd:a0:7b:a7:41:05:c3:7b:07:0e:c4:f2:44:c4:
fc:af:22:7a:a5:57:29:81:ac:49:ab:8e:e2:fa:4e:73:de:8b:
09:21:b2:1a:9a:78:67:51:09:5e:1a:4b:89:99:58:31:58:71:
9e:e8:2b:99:fb:03:3b:42:b2:75:50:59:12:5a:9b:eb:95:49:
cc:12:6f:fd:00:c6:f1:4c:44:9e:2d:b4:de:e6:13:6e:af:f8:
bd:cb:f7:49:67:02:bd:cf:ce:91:51:4f:e0:53:cf:5c:f2:85:
80:44:a5:cd:70:a6:34:7c:e6:5f:85:41:01:63:b1:55:0c:9b:
3e:47:4a:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:07:19 2026 by rpki-client