
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3566ec0f-6f3d-468f-b208-c4708330d1ac.roa
File: 3566ec0f-6f3d-468f-b208-c4708330d1ac.roa (raw, json)
Hash identifier: Y4TQ7XQu02uFkskEYNdNfBeal7jYesAnp6FoWxWtadI=
Subject key identifier: 0C:0B:94:1F:06:7A:F4:51:4A:34:DC:E4:84:48:B7:48:C5:41:A2:B1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0806CE3B0F8EAD085B6D37041B7726DB26EC2B3A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3566ec0f-6f3d-468f-b208-c4708330d1ac.roa
Signing time: Mon 22 Jun 2026 01:10:53 +0000
ROA not before: Mon 22 Jun 2026 01:10:53 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1ec5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 05 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:06:ce:3b:0f:8e:ad:08:5b:6d:37:04:1b:77:26:db:26:ec:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jun 22 01:10:53 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=4ee6031dd0d02399ea17423e572abfdb991c2e0c63b37524f95f6c76d4812d3c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:1f:1c:a5:91:3d:ce:ce:5b:29:cb:84:91:
0c:b2:11:8d:b9:b9:04:04:c8:ba:c5:b9:a9:d2:bb:
ac:6d:f9:80:e5:59:55:c7:e7:0c:12:1a:d9:a8:6e:
41:7a:e0:69:cf:fe:a8:02:cc:d0:b0:f9:2b:7b:0f:
3e:59:ca:66:93:05:e2:ca:0c:22:4c:32:c2:6d:ae:
70:b7:2f:1d:49:5e:62:91:0a:db:16:2a:b9:28:f2:
15:7b:71:c4:35:dd:56:91:3c:9a:8b:a1:a6:b8:eb:
d4:85:db:da:a9:65:54:84:1e:d5:fe:e8:11:c6:26:
3f:db:50:2e:0d:cc:88:66:39:e5:f2:c1:79:7a:33:
08:a9:88:e2:2f:3e:29:13:58:12:b8:77:de:0f:64:
4a:9e:e1:5e:f6:17:6b:f0:15:b9:4c:4d:4c:74:53:
23:29:4e:41:64:99:b6:c4:a0:bb:5f:40:91:a1:14:
9f:98:99:a8:61:a5:4e:f3:0b:17:14:ee:58:7d:4d:
e3:b9:ef:32:ce:3e:74:94:27:8f:d7:18:73:78:1e:
a7:c6:73:67:07:a8:f2:7b:eb:6a:77:08:e6:51:4c:
8a:2b:86:25:1a:86:f6:cc:d5:93:6e:79:5c:ef:95:
b3:b8:e5:19:0e:8d:de:3a:b9:b2:fa:8f:38:08:4a:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0B:94:1F:06:7A:F4:51:4A:34:DC:E4:84:48:B7:48:C5:41:A2:B1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3566ec0f-6f3d-468f-b208-c4708330d1ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1ec5::/48
Signature Algorithm: sha256WithRSAEncryption
8e:89:f2:52:48:f4:4b:26:21:a9:8c:30:c7:65:f9:8e:8d:53:
48:a9:80:d6:f7:0c:b7:62:19:1e:f7:eb:1d:b0:ce:8a:ce:32:
92:a1:02:3d:5d:d5:d1:29:9a:65:8f:35:e9:80:e2:74:59:02:
0d:f7:61:24:a0:6c:78:9c:7b:db:4f:2e:2e:95:7c:fd:4e:0e:
7d:a1:a5:37:3d:57:24:3a:b3:f1:25:75:57:b2:db:41:2e:65:
e0:5c:e7:f6:d9:a4:47:bb:a6:5e:4e:8d:3f:39:0b:1d:95:63:
a5:c2:7f:38:65:5d:97:e0:98:eb:bf:75:99:38:b8:0f:2d:79:
8d:33:5d:09:8e:ac:a3:f7:d5:de:09:2c:67:b4:ba:6c:2e:1c:
6a:32:75:96:81:f3:86:29:12:5c:d2:8f:c1:ef:db:05:2c:e6:
c5:1e:5b:37:7d:52:ab:d5:3a:2e:6b:91:ed:42:af:e3:dc:bd:
72:4f:2f:fc:86:f5:39:09:4f:a0:63:99:a4:59:83:b7:b5:e1:
a5:82:54:07:19:ea:c3:a0:13:ef:78:0a:c6:03:bd:38:20:44:
51:9f:88:bc:d0:51:8e:a3:1a:c2:eb:9d:3e:fc:52:59:7e:82:
07:16:03:f7:81:96:7f:99:ee:9a:e0:f1:df:55:3d:2e:0a:50:
75:62:a0:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:10:33 2026 by rpki-client