
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/44e1b3cc-f9ad-4817-a95d-3a2d871ab9c6.roa
File: 44e1b3cc-f9ad-4817-a95d-3a2d871ab9c6.roa (raw, json)
Hash identifier: MYsnDfwpRit6htmvDbX1x93i9PJy4f4/6oJa4jkryk0=
Subject key identifier: 3D:43:71:2C:A1:0A:CE:18:D2:C6:03:6C:02:A1:18:66:2F:99:82:D0
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5AF808249B17878E31D1ED771D6BFE65349B24D3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/44e1b3cc-f9ad-4817-a95d-3a2d871ab9c6.roa
Signing time: Thu 30 Jul 2026 00:40:28 +0000
ROA not before: Thu 30 Jul 2026 00:40:28 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 204.246.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f8:08:24:9b:17:87:8e:31:d1:ed:77:1d:6b:fe:65:34:9b:24:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 30 00:40:28 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=55dd181b9c7a3d2fe5d93bde5e3a1005cdba0fc7f3f9667016cd585d613560a0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:aa:f7:d1:0e:e3:ca:64:6d:19:42:60:03:
2c:be:29:0d:ec:83:67:30:b4:bc:45:e6:10:3d:63:
3c:bf:91:8a:a6:3e:28:88:1a:61:3b:e4:01:de:46:
02:13:47:38:f3:07:7c:2e:6b:f2:98:71:00:00:53:
92:45:f4:7d:39:50:fc:29:de:c4:06:68:4b:1a:c0:
e7:85:d0:0b:dd:36:95:50:8b:61:8c:d1:f7:46:58:
96:dc:ac:68:3d:d7:90:36:8b:32:28:71:4d:5b:f8:
c9:42:94:65:14:b2:b6:40:e8:e3:18:0c:bd:69:b3:
24:71:58:fc:ba:22:84:2a:59:15:d1:c1:b5:cc:df:
73:9c:c6:03:6b:3c:65:47:e5:03:a3:be:cd:8f:89:
a4:ff:1c:ea:fe:66:d1:56:17:a7:26:25:a8:06:5a:
85:99:b0:12:1f:24:e4:13:f6:05:c1:ec:54:72:20:
a6:18:64:c5:94:01:e3:27:1a:9a:a9:ba:e0:ac:de:
13:97:1e:ec:2a:98:bb:14:45:2a:6f:aa:68:ad:66:
b4:93:79:71:48:37:54:9d:b9:7c:59:27:ce:3b:51:
9d:0e:57:53:0c:30:fa:09:81:ef:3e:62:5b:6c:61:
e4:00:4c:5a:2a:7e:4a:6d:8e:b8:66:b1:53:9d:da:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:43:71:2C:A1:0A:CE:18:D2:C6:03:6C:02:A1:18:66:2F:99:82:D0
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/44e1b3cc-f9ad-4817-a95d-3a2d871ab9c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.246.168.0/22
Signature Algorithm: sha256WithRSAEncryption
23:5e:8c:4d:30:84:3f:e2:94:bb:98:bd:3a:01:f9:e2:6d:40:
47:d2:96:cf:26:01:73:da:07:7b:6c:c7:60:1f:24:3b:8d:49:
ae:6f:e5:db:5d:77:40:9c:ef:ae:77:0f:0f:c9:8b:48:af:40:
2a:50:b9:84:cc:00:15:35:26:64:35:73:20:fc:8e:68:44:23:
e0:28:db:01:e1:13:8a:c6:b0:cc:68:4c:29:e8:c7:12:cd:9f:
04:6a:1d:14:4b:6b:46:aa:d4:be:66:89:0a:ec:b7:3e:e8:f7:
7f:58:d4:7d:41:db:54:a7:83:6e:79:64:b3:70:57:3b:a8:98:
22:86:b9:ff:1a:a2:c7:03:52:68:cf:f1:de:75:0b:ad:d9:5e:
19:a4:52:99:91:42:15:5d:c1:99:0c:68:d5:26:9e:d5:57:c3:
29:67:ef:21:2e:03:70:21:ab:df:ee:a2:91:ec:bb:b9:bf:86:
4b:3b:85:df:4a:07:ea:46:52:5c:39:d7:b0:f9:af:50:41:22:
b5:1d:a5:7c:6b:41:1d:d1:80:68:f9:93:17:8b:ad:11:43:95:
cf:89:4e:ce:8e:47:f8:3a:0f:9c:69:4d:ab:3a:4e:b9:dd:61:
52:68:c8:2e:96:49:83:98:7b:5b:69:9d:f5:4b:eb:52:65:db:
d3:46:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:17:53 2026 by rpki-client