
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70d8cc70-9de9-4761-8ac1-df26f7c3e675.roa
File: 70d8cc70-9de9-4761-8ac1-df26f7c3e675.roa (raw, json)
Hash identifier: zKoLEAmKKNs3RAf0XL/Ah5IiqlEPMZ5h1xzB+gWvXt0=
Subject key identifier: 96:F0:9C:E4:C3:35:39:2E:1F:DB:6E:0C:B3:59:E2:19:73:C4:1F:13
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0319D28E656DD2C25A67DD4C1EB917A7D48ED305
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70d8cc70-9de9-4761-8ac1-df26f7c3e675.roa
Signing time: Mon 22 Jun 2026 01:50:04 +0000
ROA not before: Mon 22 Jun 2026 01:50:04 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1117::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 05 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:19:d2:8e:65:6d:d2:c2:5a:67:dd:4c:1e:b9:17:a7:d4:8e:d3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jun 22 01:50:04 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=aa972dd79a926212912f463c15fd87e97674af446fd8a9baead71a0f6df6afea, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:60:9b:50:75:25:51:5d:9a:a7:de:68:e0:a7:
07:eb:1a:b6:9a:68:1f:b9:18:a5:74:f3:c5:2b:23:
7c:85:a7:0c:f2:b3:7b:bd:77:10:df:72:b2:39:9f:
c2:ec:43:3b:0d:7e:3b:d3:24:c3:c1:aa:70:9f:05:
ff:66:cf:12:90:ba:01:3f:2f:52:7b:30:20:66:1b:
73:6f:1e:cb:06:f7:51:e2:ee:1a:94:cc:21:98:32:
c0:f3:f1:4e:d4:b3:a7:85:17:40:14:7f:d3:40:aa:
3a:75:3e:d3:4c:50:88:7b:d0:99:d0:d8:0b:2a:02:
77:3c:7d:f4:d3:a4:7e:39:32:ce:06:be:99:b5:95:
9c:46:4e:ae:63:5a:4b:9b:1f:de:e0:88:21:e8:34:
49:e0:2c:e1:47:fa:39:72:75:37:00:ab:aa:3e:8e:
a1:de:13:ed:27:42:71:6f:af:d7:4d:ef:de:99:1c:
37:29:ea:bb:b3:f9:6c:60:14:fe:cf:11:69:e1:59:
33:63:a4:1d:44:d3:74:9e:75:bb:70:ee:28:91:4b:
52:5e:f7:86:86:ee:f8:ce:44:13:40:37:c8:f4:18:
59:13:39:60:39:c9:ae:0b:ad:10:5b:63:84:35:d3:
86:79:b8:d3:7b:41:d5:68:55:d3:e2:b5:c7:04:fd:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:9C:E4:C3:35:39:2E:1F:DB:6E:0C:B3:59:E2:19:73:C4:1F:13
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/70d8cc70-9de9-4761-8ac1-df26f7c3e675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1117::/48
Signature Algorithm: sha256WithRSAEncryption
5e:d2:0c:88:1e:ca:53:82:17:c3:3c:76:7d:58:0b:ea:3c:86:
62:f8:f3:10:6f:b0:92:aa:7a:a7:bb:e4:75:d3:09:fa:7e:82:
f7:cb:5a:67:e1:1f:e3:44:01:d2:5b:42:4a:2a:35:13:37:bb:
a1:ee:9f:06:41:1b:b3:56:d8:24:88:17:5a:8e:b6:fc:4b:d1:
38:03:df:6b:1d:d5:3a:8a:28:32:16:df:55:68:f9:49:b6:8e:
be:eb:25:02:11:ae:f1:8f:db:44:99:49:66:10:79:fc:22:cf:
dc:e7:6d:86:b4:4b:59:db:8e:34:66:0d:2b:c7:12:04:29:01:
fc:f4:49:9e:1c:29:c8:3a:b5:ec:10:be:cc:12:3c:20:84:fc:
f7:3b:24:36:0d:26:19:6b:d4:fa:22:49:e8:14:b2:a5:a7:a0:
4e:61:04:d6:86:02:2a:21:75:26:e9:38:18:11:1d:61:61:2b:
fb:2f:32:a9:fc:ec:02:15:86:51:e6:33:bb:c0:43:2a:67:1a:
da:0e:8a:14:14:10:5e:2b:f5:76:7c:ac:f5:a0:e8:9c:44:27:
46:2a:b6:b0:e0:08:6c:66:53:d3:eb:69:3b:1b:18:6f:2f:5b:
a8:5b:96:df:ab:1e:5f:58:a1:ab:02:df:53:82:eb:5c:8d:81:
6f:31:a8:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 08:03:52 2026 by rpki-client