
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/286cc2ef-3f13-4612-b833-6724edf0fc22.roa
File: 286cc2ef-3f13-4612-b833-6724edf0fc22.roa (raw, json)
Hash identifier: ZhmdXFz1CD7OnqU9dVyf1Fe/Po2QxM9Ma5A1a6CgOPM=
Subject key identifier: 39:4B:D8:95:4A:B4:3F:30:CA:8F:56:F1:BD:B0:AB:8D:17:C1:C0:64
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5C8779C09D93D08C89FB3CB6A7A6AD0A0F4DCD87
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/286cc2ef-3f13-4612-b833-6724edf0fc22.roa
Signing time: Sun 03 May 2026 02:00:05 +0000
ROA not before: Sun 03 May 2026 02:00:05 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2c6e::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:87:79:c0:9d:93:d0:8c:89:fb:3c:b6:a7:a6:ad:0a:0f:4d:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 02:00:05 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=07ee6aeb12441cd43d743de40c9a97b2991b5c9c18a81f914a0e594ecc3cb34f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:31:67:4e:cb:0c:d0:ee:25:20:8e:c2:79:
12:e6:67:c3:16:b0:f3:eb:7f:13:59:b8:13:1c:ef:
73:1b:96:dc:aa:d9:d8:d8:00:60:16:c0:41:c4:b3:
d7:81:5c:b6:5d:59:2b:9a:24:8a:ff:80:6b:08:5f:
55:9e:64:29:30:bf:47:f7:34:4a:08:36:57:f3:6f:
46:11:92:f4:17:cc:3b:c0:76:ee:3e:36:f2:e4:7c:
18:a6:dd:6e:80:6d:8c:63:b7:be:c2:5d:b6:52:16:
b6:09:3e:96:7b:7b:1d:29:e8:48:24:a8:10:ec:75:
94:8e:b0:87:9e:02:6d:67:ad:7c:52:0b:65:61:2f:
80:9a:36:27:9d:30:0e:ed:7e:fb:04:39:03:8d:cc:
22:27:ec:59:ad:a2:a6:93:55:43:83:2d:55:92:ae:
37:fa:a1:10:8b:b5:53:30:0d:95:44:66:21:35:31:
44:bb:be:4f:c1:ec:88:50:8b:35:e2:23:c0:75:64:
78:cb:90:bc:7a:02:1e:45:6e:f3:96:fc:e9:85:ba:
5a:a6:0b:0e:1b:40:54:e4:0e:f2:1e:4d:d0:40:bf:
7a:47:5c:59:f1:fc:e9:3f:90:f4:9b:24:9c:47:8b:
c2:cf:b8:2e:8e:8a:63:fb:bc:9e:ff:63:0a:2d:d4:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:D8:95:4A:B4:3F:30:CA:8F:56:F1:BD:B0:AB:8D:17:C1:C0:64
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/286cc2ef-3f13-4612-b833-6724edf0fc22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2c6e::/47
Signature Algorithm: sha256WithRSAEncryption
1d:b4:47:a2:71:42:6f:e5:10:c2:9c:49:cd:64:2f:7d:cc:e0:
d1:e1:34:31:48:a0:fb:39:ad:de:d8:7f:66:46:19:55:c7:d3:
ac:7c:c4:3d:6b:f5:bc:44:30:14:a5:42:e8:2c:09:fc:d0:a6:
8f:6e:9e:aa:95:9a:88:b8:35:35:7a:7b:83:b1:49:07:ce:d8:
11:e5:48:4a:84:fe:52:de:10:3b:89:fd:31:16:1d:8f:cc:aa:
56:35:55:d0:dc:b1:74:6a:f9:b8:87:7e:18:5d:c8:a1:09:28:
92:23:22:96:42:d1:c7:08:f4:72:13:11:e6:3d:0a:4a:6f:a1:
f8:9d:d9:d2:d2:21:cb:3d:99:ad:0e:e5:e5:02:64:28:f6:90:
a4:3a:94:c1:df:72:58:40:cb:bb:bc:6d:ce:83:88:ec:92:de:
90:38:a2:cb:55:ce:17:0d:ef:4f:69:ed:29:8f:c8:d2:fb:e1:
06:3d:e6:c6:d6:2f:c6:ab:c6:96:af:65:56:1b:3c:13:3b:6c:
fa:25:6f:d5:a2:40:6f:5e:76:ec:d0:56:ee:d3:42:61:09:93:
80:fa:c9:67:fc:05:c2:25:5b:af:e1:4a:f1:84:3c:a0:35:38:
55:1a:e4:01:ad:b1:a9:8e:02:ef:67:47:00:dc:c4:3f:9e:f3:
af:1d:80:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:30:34 2026 by rpki-client