
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57958888-70c8-4a3c-b0e5-f02952e82873.roa
File: 57958888-70c8-4a3c-b0e5-f02952e82873.roa (raw, json)
Hash identifier: gFAevveTwlFUFq9m/+zuNG85w9BIcWoXDEqWibTwFE4=
Subject key identifier: D8:71:4B:5B:F0:80:17:F9:69:1D:03:09:1D:C5:74:65:BC:B2:09:7B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 362412FC5C9E79D9319AEA76091DBD81B0287355
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57958888-70c8-4a3c-b0e5-f02952e82873.roa
Signing time: Sun 03 May 2026 00:42:11 +0000
ROA not before: Sun 03 May 2026 00:42:11 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a00::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:24:12:fc:5c:9e:79:d9:31:9a:ea:76:09:1d:bd:81:b0:28:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 00:42:11 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=59c76a5425b746d67696e16b1f5e66e76d7ec5830bfa8edebdd32346d7e8f55e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:ec:0f:c0:4d:82:86:3a:39:bc:c9:8e:97:
36:78:7d:f1:c0:65:8e:a9:7d:09:b9:2e:74:77:9d:
eb:a0:a3:b6:5f:ba:42:7a:48:0e:3d:af:de:b8:b7:
32:68:bc:8f:7b:89:97:bc:de:52:ee:c9:66:a3:ce:
c0:77:c0:37:14:16:28:b6:7d:3d:fb:dd:71:cb:c3:
a7:b0:1a:6f:bc:f4:c5:26:c2:cf:87:9e:e8:19:46:
c1:d1:0f:15:b4:c7:d6:b1:2b:5b:f2:fc:17:ac:19:
b9:8c:08:60:74:23:ee:fd:11:9b:07:7d:d2:4f:ab:
ab:de:a2:d1:93:47:f6:f9:c0:e7:b7:2a:53:13:e5:
41:4c:dc:65:6d:b2:8c:eb:f2:9c:17:e0:be:bb:4c:
7d:8e:2b:7f:58:33:12:81:f4:2e:29:c9:13:3d:5d:
a4:b6:56:76:12:b1:94:85:fe:8d:91:30:e1:35:85:
09:09:65:38:7b:de:49:a4:23:54:ac:16:80:fa:b9:
4e:9e:77:70:f4:70:13:73:5c:31:33:2a:96:a1:bb:
43:4c:e7:a8:aa:1c:c2:ae:0c:5c:2a:92:01:3c:24:
ff:ab:77:66:ea:70:f0:0c:29:52:f6:6e:11:ee:38:
7f:79:63:77:04:d0:79:8a:f4:f8:f7:87:a3:d5:d3:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:71:4B:5B:F0:80:17:F9:69:1D:03:09:1D:C5:74:65:BC:B2:09:7B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57958888-70c8-4a3c-b0e5-f02952e82873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a00::/47
Signature Algorithm: sha256WithRSAEncryption
5d:f5:74:d9:50:98:b6:78:3b:f3:3c:91:27:5f:c8:68:d6:76:
1e:ba:af:d4:f6:30:48:32:46:ab:fc:33:9e:bd:15:bd:10:82:
a6:02:d8:88:a8:0a:1b:e7:2c:e3:6e:0c:6f:01:3e:5d:e3:dd:
a6:61:60:db:ab:8b:9e:35:60:f0:b3:88:6d:55:4d:59:25:c8:
4c:ef:88:85:35:ae:c0:6c:1c:91:19:95:4f:50:e1:ac:76:59:
cc:bb:60:13:79:7c:b7:16:90:53:af:e3:c5:1c:0e:f8:e0:31:
53:eb:49:b0:ff:45:25:89:e2:6d:4e:0a:fa:32:2c:de:33:40:
f6:b1:57:fc:9c:06:9a:58:00:10:67:22:ee:c1:cc:fe:1b:55:
54:4e:bc:08:6a:51:54:06:eb:ba:a0:e1:44:07:a8:eb:5e:d0:
59:f6:a1:62:65:ec:aa:3b:1d:21:a0:49:67:31:a8:34:5e:74:
56:2e:47:7b:6c:11:38:db:76:84:2b:a9:a5:6b:67:72:8d:07:
be:8b:d4:7f:3d:20:f0:fc:72:2b:9a:eb:4b:75:2c:df:b2:aa:
18:e3:56:1b:04:80:fb:55:d9:29:9e:3b:8e:f9:37:19:f1:2e:
4d:26:14:a2:64:98:cf:e0:24:72:ca:e6:f0:97:ba:c7:87:37:
af:3c:e5:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 14:50:43 2026 by rpki-client