
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a026bd95-13ec-435c-9176-0c384da322fa.roa
File: a026bd95-13ec-435c-9176-0c384da322fa.roa (raw, json)
Hash identifier: 8WSE4QHrWG/2N34ZCjKyOKw+aKPtUVxhuq23FqEybfU=
Subject key identifier: 7E:8B:94:92:B0:0B:E2:D8:A9:EB:DF:7B:00:55:C6:6C:7F:45:3D:74
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7BBC2053F2DB53BB2CD00D589549FA2A8738C7CA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a026bd95-13ec-435c-9176-0c384da322fa.roa
Signing time: Sun 03 May 2026 03:21:54 +0000
ROA not before: Sun 03 May 2026 03:21:54 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2900::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:bc:20:53:f2:db:53:bb:2c:d0:0d:58:95:49:fa:2a:87:38:c7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 03:21:54 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=ca195b0d7e09c5e88b958988fa8483a82400cb6fb3149bbf496f2c234a033f13, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:af:32:0e:04:52:a6:dd:d8:38:92:75:4f:
46:23:83:5f:7d:3c:1c:5f:59:6e:97:06:fb:60:cc:
9b:8f:12:93:87:09:6b:fc:89:57:c1:08:bc:b7:9b:
d2:1f:f1:41:0d:1a:8d:1e:2e:64:d5:e2:2b:ea:57:
9f:1d:69:27:ee:54:0c:02:65:da:be:41:33:98:3b:
3f:69:6c:72:02:c0:11:2f:e6:a0:c8:9d:de:b9:fe:
ed:e7:a5:9c:ce:31:43:82:a3:e7:31:0e:c0:b2:a5:
77:fd:76:e5:7e:34:83:bd:a7:da:72:cd:b2:ad:e1:
a2:cb:13:73:50:b7:b7:4f:b8:12:93:13:1e:8b:03:
9a:c7:8d:47:07:34:8d:81:90:26:48:77:92:46:8d:
f5:47:21:34:59:e1:c2:af:bf:a6:7f:7a:0a:b7:09:
ad:e0:42:d3:b2:30:4e:1a:19:30:6b:5e:df:ba:59:
91:3a:c7:52:70:f2:9c:54:bc:d8:3a:07:6e:21:d2:
b2:8c:d6:6b:6a:37:8a:9c:6b:68:86:38:8e:fc:a9:
f5:45:ca:db:25:a4:b2:73:69:cd:f9:cc:13:ec:b0:
45:85:aa:dd:5c:01:82:76:f9:6c:b9:f4:10:74:47:
fc:c5:7a:ca:d3:b3:61:0a:ff:92:9f:91:db:f9:20:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8B:94:92:B0:0B:E2:D8:A9:EB:DF:7B:00:55:C6:6C:7F:45:3D:74
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a026bd95-13ec-435c-9176-0c384da322fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2900::/47
Signature Algorithm: sha256WithRSAEncryption
79:08:5b:9a:cd:0a:b5:b6:58:ad:fb:84:6f:7c:12:ba:2d:4f:
42:ee:f2:9b:39:fe:2a:aa:54:b0:fa:33:95:cc:50:49:77:99:
44:41:68:4f:f7:f6:44:fe:bb:90:13:ea:32:30:83:88:fc:8f:
6b:72:0b:9c:16:24:73:6e:28:7c:f6:f0:4d:eb:97:47:d8:86:
ce:5d:da:8f:20:ce:64:0a:32:a5:02:f6:76:d0:ac:e9:23:e0:
26:9f:6e:81:aa:1d:48:c6:4c:25:53:49:37:76:36:62:30:46:
c1:5d:1f:7d:d0:01:98:dd:f1:ce:14:7b:96:d3:81:b5:b7:20:
37:e8:ba:cc:d2:30:f7:87:92:a5:2b:96:d9:9b:22:e5:e7:17:
73:e2:bd:63:8c:fe:13:28:90:c2:46:cc:79:9d:04:62:83:c7:
1a:7d:0e:5a:56:d4:75:92:71:2f:5f:dd:50:96:bc:fe:3e:94:
fc:4e:2a:9b:9d:a3:72:09:3e:b8:51:b7:9f:bf:33:49:3b:96:
ea:25:cc:a2:04:89:bf:fa:53:a5:2f:ad:82:6c:9d:3e:58:99:
7d:11:94:ba:db:df:55:66:45:44:09:3b:45:82:5a:0b:c7:f1:
f0:b0:73:5f:da:bb:22:00:b5:f1:4d:1b:51:b3:be:b5:f7:0a:
d2:d5:14:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:12:08 2026 by rpki-client