
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/475c1def-0344-4a3e-b407-695a6fdd02e8.roa
File: 475c1def-0344-4a3e-b407-695a6fdd02e8.roa (raw, json)
Hash identifier: YLbOX3N5CAioM7fc1XVsuxEeNJVSPTg32WW+wy0SZoQ=
Subject key identifier: 49:7B:3D:A9:2C:09:A3:D2:FB:21:CC:4F:7C:D4:E0:F3:DA:48:98:29
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0AF7D4C27388AECC47B4A212BBEFE9DA4074F449
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/475c1def-0344-4a3e-b407-695a6fdd02e8.roa
Signing time: Sun 03 May 2026 03:10:10 +0000
ROA not before: Sun 03 May 2026 03:10:10 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2f5c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f7:d4:c2:73:88:ae:cc:47:b4:a2:12:bb:ef:e9:da:40:74:f4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 03:10:10 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=0dc1293a3a139133d72d1f666055ee99993b4aacde1eee6bf41087b32e7c5e13, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:68:a9:38:1f:ab:90:8f:49:e1:7d:a2:07:
26:41:f5:56:c9:89:f4:b6:2b:aa:0e:1c:d2:3a:65:
19:70:d3:9b:6c:1d:c6:82:f2:ac:35:51:de:04:b5:
6c:db:65:29:9f:d1:27:11:bf:9a:21:99:81:b6:a8:
c8:98:f6:55:1b:cf:38:f6:a8:f5:d4:04:ca:ad:04:
bc:2c:5a:a4:fc:f7:96:5f:a0:4b:f3:e1:20:69:13:
74:67:87:df:de:cc:8d:05:99:29:d7:88:c2:78:3a:
80:dd:20:db:18:b7:9b:9d:1f:56:56:24:df:a7:c3:
20:79:d5:ec:8c:04:c8:da:3e:4c:c2:bf:5f:88:a9:
ff:aa:7e:f0:77:ff:f1:55:70:9d:4e:45:b1:21:62:
0c:61:09:8e:ae:96:7b:9d:45:3a:b4:7f:35:b3:ea:
ad:13:5b:b9:db:2e:d6:d6:ca:ac:54:76:a6:72:bd:
ce:00:36:db:47:6b:7b:5f:d8:a2:4b:ab:bb:f7:c4:
b9:db:80:79:20:62:03:0b:42:ee:7c:df:df:80:b4:
f8:d3:16:14:bb:1b:38:ae:eb:35:41:81:ed:5a:28:
23:2e:35:de:c3:ef:f9:aa:cc:58:ab:cc:f4:f3:9a:
a8:39:39:75:e0:ed:1f:e5:cb:32:4d:1c:6f:ce:bc:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:3D:A9:2C:09:A3:D2:FB:21:CC:4F:7C:D4:E0:F3:DA:48:98:29
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/475c1def-0344-4a3e-b407-695a6fdd02e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2f5c::/47
Signature Algorithm: sha256WithRSAEncryption
91:ea:70:d9:98:81:0a:09:78:f3:96:2c:12:9f:c7:2c:6d:13:
a6:bc:3e:3b:63:78:bc:4d:1c:f6:45:24:b6:fa:4f:31:fc:71:
8f:eb:b3:d0:7e:61:09:dc:9e:17:c3:c0:39:09:a3:f0:77:9f:
4e:ed:51:8f:e6:e4:9a:e3:03:2f:7a:6d:98:bd:10:2f:f5:90:
24:ae:00:40:5d:82:3f:d7:b3:6c:10:79:2c:0b:60:cd:e8:5f:
12:6f:16:62:45:65:cf:f2:66:54:8c:1f:ce:45:ff:6c:d7:06:
8c:91:4b:c0:c0:da:46:c9:ef:24:98:13:d0:9b:ed:43:2e:ac:
0d:02:d1:24:0f:f7:46:48:ef:3b:ca:c9:9d:5c:13:a6:ee:31:
cd:44:66:e1:84:1f:89:85:ec:19:9e:70:a0:ae:c9:3d:b5:f0:
aa:18:4c:07:7e:b8:73:c6:11:9e:d4:b5:bf:df:2a:b6:3d:79:
4f:cc:0b:de:20:f1:ab:8f:12:34:e3:41:37:14:1b:00:ad:ba:
c8:cf:29:c7:1e:5f:4e:26:0d:c0:64:73:d8:33:61:a5:d9:95:
b9:f8:1e:f3:d0:b1:bb:b4:78:37:bc:a1:06:75:ad:79:c6:ad:
90:27:5c:29:f3:a0:92:68:b0:25:aa:bc:a8:db:49:0f:62:af:
d3:c7:32:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:12:57 2026 by rpki-client