
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2d3f41d-f5f6-4ca1-b563-45000dc34b24.roa
File: e2d3f41d-f5f6-4ca1-b563-45000dc34b24.roa (raw, json)
Hash identifier: 2NJOvnSJq/QzEHxQr/ttXJsyAJlc4NBrOn0TR+XZ348=
Subject key identifier: DE:10:12:DA:E8:07:79:7F:9F:9E:C9:D5:F0:9F:16:5E:DE:8D:E4:82
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3AD7337F34F06ECDB92A021A1C21FD96231B9C07
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2d3f41d-f5f6-4ca1-b563-45000dc34b24.roa
Signing time: Sun 03 May 2026 00:20:38 +0000
ROA not before: Sun 03 May 2026 00:20:38 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:11df::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d7:33:7f:34:f0:6e:cd:b9:2a:02:1a:1c:21:fd:96:23:1b:9c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 00:20:38 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=65812958d26251f5c4926fb7a9de9ae6fc4daeaa28ffa21c2696053f472f5dee, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:6d:81:7c:a2:9f:df:f7:e6:80:f0:de:40:
e9:cd:8e:4b:f2:71:70:e2:0a:86:8e:a1:12:d1:43:
df:c1:21:aa:e3:bd:f7:c2:a6:d3:54:44:23:81:c1:
5d:11:74:e7:96:64:36:7f:b3:b5:fe:02:c5:d6:e6:
ca:d6:90:21:cf:a3:a0:15:a8:f0:b5:1f:ae:54:c9:
9d:f2:be:e3:b0:c7:7c:ea:ae:54:e6:f7:40:20:86:
4e:d9:c6:fd:91:79:1b:9d:8f:21:d9:75:c1:2f:3d:
9d:35:a5:ef:20:b0:9f:86:26:6d:56:88:08:09:02:
f5:c6:92:c6:8b:0a:95:ac:f2:bd:2f:3e:33:b1:32:
8f:80:3f:8a:50:48:cc:90:51:34:3f:59:44:26:b0:
a3:e5:36:fa:eb:5a:b4:9b:a2:8e:e7:1a:0d:44:9f:
cb:21:21:49:6d:c2:5b:63:f6:75:1f:e4:88:d2:18:
73:7f:9b:b9:e0:f5:dd:4b:e3:5c:64:c5:27:ec:4e:
27:af:61:50:72:76:e2:03:b2:96:b3:06:e6:b2:c6:
82:39:3b:d3:3c:c2:aa:77:d3:c1:e8:ca:00:b7:2d:
14:56:ca:bb:2b:bd:1a:92:0e:a8:ee:1c:ea:08:3a:
d2:be:f8:f0:0a:15:1d:ad:76:c6:23:20:fa:eb:1a:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:10:12:DA:E8:07:79:7F:9F:9E:C9:D5:F0:9F:16:5E:DE:8D:E4:82
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2d3f41d-f5f6-4ca1-b563-45000dc34b24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:11df::/48
Signature Algorithm: sha256WithRSAEncryption
14:94:78:20:e8:9e:29:9e:41:67:73:55:a6:d0:e7:42:b9:3f:
f6:39:e0:c0:8d:23:63:f8:02:c0:c3:89:52:93:f6:84:29:ee:
8b:3b:83:3a:ea:8d:03:1d:a1:0d:8c:93:9c:ef:4c:56:a8:a5:
97:cc:a7:72:f8:ce:49:a0:c6:b9:ab:4e:7f:4c:12:c0:6c:68:
43:44:01:80:45:a1:92:5f:26:db:c2:b3:85:db:f5:fc:42:f8:
3a:54:00:52:07:5d:d3:2d:68:b6:7c:65:35:99:e1:e6:54:65:
45:84:af:db:1b:f9:6c:0c:d0:08:d2:3b:04:cf:6f:7f:73:ec:
c0:48:d6:c4:1f:28:96:c2:00:1b:ba:70:03:f3:d4:fa:9e:70:
20:e2:f2:ae:74:cd:ac:da:ec:60:52:21:96:d9:70:3d:0a:2c:
c9:a2:32:1c:76:10:68:fc:d8:68:01:e0:e7:e9:5e:ba:d0:3e:
65:c5:0b:00:84:79:02:5e:1d:f5:04:66:61:89:8f:0f:78:d8:
be:47:8f:54:ef:7f:21:62:9e:70:a6:97:f4:7e:26:5a:ab:11:
e0:69:fc:0d:e7:17:af:36:67:c7:e7:dc:b6:a9:47:27:06:05:
82:26:9b:fd:2b:bf:3f:05:2d:2a:65:50:5a:f9:78:2e:03:53:
f7:73:d6:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:13:42 2026 by rpki-client