
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a38174b1-e8a3-414f-8d40-9582eb68a214.roa
File: a38174b1-e8a3-414f-8d40-9582eb68a214.roa (raw, json)
Hash identifier: 21hsor+pK/wxTO6GSU1OuKgh7nt0AxBvC11AYDaQbpY=
Subject key identifier: CC:6F:4B:2A:46:46:F0:4D:6E:E3:86:DC:CD:41:E6:73:02:19:2A:84
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6354F5317C1E3D8CA3E10006B78BBD42AFFA57B9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a38174b1-e8a3-414f-8d40-9582eb68a214.roa
Signing time: Mon 22 Jun 2026 02:30:50 +0000
ROA not before: Mon 22 Jun 2026 02:30:50 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1e17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 05 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:54:f5:31:7c:1e:3d:8c:a3:e1:00:06:b7:8b:bd:42:af:fa:57:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jun 22 02:30:50 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=4d3eb16bf2a3899cb8d6584b1a4b62b9dbe9f066614d8b22149c630cd0c07336, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:62:04:fc:55:37:96:90:52:65:3b:32:93:
8e:c9:4a:4e:5e:4c:fa:84:e9:c2:9e:57:17:19:d2:
12:98:c8:4a:c9:f1:8a:98:02:fc:e3:71:0b:fe:f1:
45:a6:c0:e5:d5:1f:a6:c6:00:dd:b0:1c:67:b0:8c:
17:00:60:08:3a:97:60:88:94:f5:20:b5:87:b7:da:
17:9c:a8:f7:08:ba:5a:a2:77:f2:b3:48:ff:4c:a2:
4c:fe:e3:4f:0d:07:c0:e5:cf:7e:27:66:37:fe:59:
b7:73:71:6e:a6:32:63:33:49:c3:64:22:03:10:d4:
16:a4:42:af:89:86:1e:c9:22:d3:64:ba:79:73:fa:
b6:73:a1:dc:d4:de:f2:5c:08:76:fb:c7:a3:c8:be:
cd:95:25:56:51:85:cc:8d:86:ba:a5:b9:aa:44:a4:
17:5c:62:48:97:e5:75:b8:dd:e0:5d:34:f7:77:92:
ce:53:fb:3b:5e:0c:03:aa:4d:a6:61:6c:31:7d:7f:
7d:4f:98:47:67:5c:80:82:00:d6:36:b7:47:1a:d0:
f1:8c:6e:1c:d0:a9:6a:19:e0:3f:4b:be:23:60:70:
4e:ff:fa:c2:1a:cc:6b:c5:cc:d3:57:ac:2c:31:ab:
96:2c:df:bf:f6:e1:b0:b5:79:3f:d9:5d:d7:b2:4c:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6F:4B:2A:46:46:F0:4D:6E:E3:86:DC:CD:41:E6:73:02:19:2A:84
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a38174b1-e8a3-414f-8d40-9582eb68a214.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1e17::/48
Signature Algorithm: sha256WithRSAEncryption
7d:2a:9e:37:65:07:df:d7:8e:7c:f6:d3:64:64:2f:80:20:cb:
fd:fe:6b:b8:53:b0:70:34:21:24:0f:56:9b:23:a3:c2:e9:af:
34:dc:d3:47:77:b7:96:3c:55:43:fd:73:d1:d4:5d:e5:fa:5c:
98:96:0c:9b:8d:96:6b:6c:8b:26:ee:a8:04:97:b0:62:af:a5:
85:a5:98:1d:1f:c5:9e:1d:79:f4:62:22:e6:f5:bb:97:e7:bd:
e8:dc:f1:2d:d2:6b:b2:e9:8f:82:d1:b7:fa:ca:85:4e:8e:93:
fc:b1:be:e3:1f:e8:5a:63:d8:ed:26:96:5f:c2:57:16:c0:bc:
05:92:a2:53:48:ec:d6:f2:c2:b7:df:a8:df:fc:55:b6:bd:9d:
1b:72:d4:7e:62:8a:ba:52:27:8a:40:03:de:c8:65:67:97:1c:
4f:05:4f:e6:1d:f6:0d:53:66:a8:a6:00:5e:eb:22:d7:d0:8a:
58:0a:60:aa:ec:2c:bc:62:a3:54:03:8a:92:f6:f6:36:50:fa:
50:62:f9:ba:dc:15:89:7f:35:33:04:3e:5e:cd:90:d3:aa:37:
64:71:4e:cd:2e:20:e6:3f:32:46:1c:21:dc:34:c8:9a:52:4f:
e2:7d:71:de:29:5e:ff:4e:26:20:f2:2e:6e:1b:cc:e6:a0:d3:
bf:da:dc:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:00:14 2026 by rpki-client