
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0d22096-a2ae-46a6-8572-1bebb150356d.roa
File: b0d22096-a2ae-46a6-8572-1bebb150356d.roa (raw, json)
Hash identifier: SxjAC/DlZkUNU3ND7auTl2a76eur9iZbKUekwILtWUc=
Subject key identifier: 64:B5:02:EB:4C:4A:D1:8E:0B:65:19:EB:41:8D:E0:1A:A3:03:AD:7F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5AC88DDF4A272279FD73BF0092EC612F425CADAA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0d22096-a2ae-46a6-8572-1bebb150356d.roa
Signing time: Mon 22 Jun 2026 01:01:32 +0000
ROA not before: Mon 22 Jun 2026 01:01:32 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1e66::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 05 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c8:8d:df:4a:27:22:79:fd:73:bf:00:92:ec:61:2f:42:5c:ad:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jun 22 01:01:32 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=7bf0de2f4199e491dc5490af2b40d0ed189659da53f30c7bf9747132225abaa7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:bf:42:d2:2e:9e:6a:75:1e:72:81:9d:25:
47:1a:0f:5d:94:48:d9:49:40:d0:35:0c:8e:b8:9c:
33:1c:a5:cb:65:0a:0d:67:07:f0:6a:6a:9e:c2:58:
89:b9:95:eb:0e:e8:f9:25:f0:b2:3b:fc:06:86:ad:
db:85:93:1f:74:3e:f7:4c:b4:ac:cb:66:1b:a5:9d:
f9:e1:4e:e1:11:84:9b:00:d8:9b:66:71:f3:50:0f:
b2:40:52:2f:3f:f7:35:e0:34:0c:73:bc:8b:f2:35:
19:6d:be:b5:21:98:13:fd:4b:da:99:fd:2c:73:d1:
8d:e0:65:55:65:7a:58:f7:dd:a1:6b:f8:9a:d4:71:
9e:0a:cc:8a:66:2c:8f:3e:d7:f4:f9:b0:e9:74:49:
e5:9d:46:4a:3b:51:7a:ca:ad:c0:15:af:9f:c2:2f:
cc:8c:48:5a:8d:57:57:ff:a4:1c:d9:d3:ba:ac:36:
e6:2c:a7:eb:04:0c:d2:93:85:1b:51:4f:34:47:d0:
29:72:48:71:90:5b:dc:1b:6a:ae:42:9c:aa:31:33:
c3:a5:47:bf:c1:65:ee:bc:80:46:d9:9b:32:c4:c4:
5a:b9:82:ac:80:34:1b:39:ed:a9:a0:a0:1c:72:54:
0e:64:2a:f9:53:8a:35:76:4c:40:2e:78:23:48:74:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B5:02:EB:4C:4A:D1:8E:0B:65:19:EB:41:8D:E0:1A:A3:03:AD:7F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0d22096-a2ae-46a6-8572-1bebb150356d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1e66::/48
Signature Algorithm: sha256WithRSAEncryption
42:56:03:9c:d7:ea:5a:93:8b:1b:45:d8:00:72:db:39:86:cf:
9d:31:88:3a:19:96:df:bd:ce:4f:c5:45:90:29:17:a4:1c:90:
4d:a5:f0:57:7c:34:97:36:dc:27:9f:94:4f:04:2f:7e:26:72:
56:31:23:d1:38:4b:b4:f5:9a:9a:58:a6:6f:47:9b:71:18:76:
77:c7:83:cb:2e:37:69:19:43:70:63:0b:29:a7:92:cf:e8:1e:
eb:19:0f:b7:d6:bc:79:cc:32:fb:82:c9:33:11:71:ad:aa:a4:
2c:dc:be:8c:d6:5d:be:66:ca:42:81:62:02:6c:ea:d3:62:05:
b9:cd:17:55:a4:bf:0e:ca:82:c4:7f:d2:37:54:11:db:c6:ba:
2b:7a:17:93:53:c7:52:17:c4:e8:9f:54:d2:ad:12:d1:e8:39:
da:52:ab:ff:40:89:36:3f:dd:84:ac:b6:db:1b:59:23:95:4b:
5b:9d:39:f9:82:3e:73:26:a8:33:b6:c7:bf:36:0e:ee:e5:95:
a2:8d:dc:b5:e0:a6:bf:bd:3a:a2:83:9a:d9:02:c4:c5:48:60:
c8:c0:1b:cf:af:08:42:e1:37:12:20:ba:80:c3:e0:34:e6:c0:
fc:b3:ca:35:18:8c:23:77:d3:9f:9e:07:82:a0:0c:50:41:36:
50:9c:12:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:09:10 2026 by rpki-client