
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3f7723e-71da-4a16-81c0-63d9cf149f9c.roa
File: e3f7723e-71da-4a16-81c0-63d9cf149f9c.roa (raw, json)
Hash identifier: yz5BsEYALmmUQdT0LICSvKfVzuFhDYt6m9DPZU/oClY=
Subject key identifier: 44:08:2B:67:3E:E5:C1:5F:46:6A:97:63:04:1C:C7:5F:B5:E9:1F:77
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2CC45CAEE12258358B77D2135FE8BE3409A1CD48
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3f7723e-71da-4a16-81c0-63d9cf149f9c.roa
Signing time: Sun 03 May 2026 01:20:10 +0000
ROA not before: Sun 03 May 2026 01:20:10 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:31c8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c4:5c:ae:e1:22:58:35:8b:77:d2:13:5f:e8:be:34:09:a1:cd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 01:20:10 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=c630f16d7ae4996193fdacaa4c6dc87c9d678478fe3ecf091843c9eeda646861, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:4a:8a:5e:a7:a6:88:b7:fa:fd:bd:dd:86:
50:56:de:79:0e:03:32:00:48:aa:57:2d:bf:88:77:
62:2d:96:4c:45:a1:5a:40:f2:28:b3:25:0f:eb:82:
1e:c0:62:ac:dd:d5:02:15:8b:4f:eb:87:69:a1:ea:
b8:a6:6a:1a:35:43:7b:9a:83:01:89:47:bb:f3:aa:
bd:a6:00:d5:af:e6:8f:d7:ca:89:ac:8d:60:09:61:
91:27:c9:89:86:03:13:6c:31:d1:71:e0:24:98:d5:
cf:4c:87:64:64:e4:d4:8f:a5:ad:b6:67:32:21:b3:
00:7e:8f:98:7f:fd:7f:38:cd:b3:f4:9f:a5:d4:8f:
06:08:62:1b:67:bc:e2:53:38:0f:8c:13:45:6c:f7:
94:59:4a:33:cf:75:2d:0c:b0:50:a2:49:19:5c:6d:
d8:c0:90:b6:1e:62:12:82:b5:47:3d:0e:8f:5a:e3:
1a:ba:15:d3:92:cb:0a:6f:1a:96:a5:d0:7f:63:fd:
ef:c1:ec:2d:4c:af:f1:ec:c8:ea:6d:50:e8:8e:99:
d8:cd:74:19:3b:31:d7:5c:8b:64:27:ea:08:8a:a0:
cf:ed:65:78:0e:6d:63:57:fa:91:60:d0:6c:86:2c:
c3:aa:b0:36:51:66:0b:4f:a4:c1:32:84:df:d8:36:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:2B:67:3E:E5:C1:5F:46:6A:97:63:04:1C:C7:5F:B5:E9:1F:77
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3f7723e-71da-4a16-81c0-63d9cf149f9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:31c8::/47
Signature Algorithm: sha256WithRSAEncryption
c0:f0:4f:02:11:b7:5a:27:35:51:34:69:1e:47:52:1c:73:e7:
07:db:f6:62:65:44:17:06:c1:c1:e5:89:82:cc:89:dc:96:a6:
2f:f2:8c:08:0e:dd:a7:df:23:b2:0d:ff:53:2e:6f:73:12:d9:
34:6d:13:51:9e:fd:95:f4:97:44:2c:42:ec:f6:9c:e4:f1:af:
be:c2:76:82:27:51:31:eb:85:d1:76:a6:0c:bf:61:b3:8d:d5:
96:aa:11:de:3d:7f:a9:70:00:de:3e:7e:51:0a:a5:f8:68:3d:
25:c5:13:91:fc:db:fd:b2:3f:75:57:4c:8a:40:4c:d3:30:22:
60:f7:f5:5a:3a:d1:fe:e8:e5:99:35:02:d9:8b:8e:25:f0:cc:
b5:3f:a0:3e:aa:20:85:ac:f1:b0:9b:56:d6:ef:26:ec:18:11:
3f:45:33:03:e7:f2:46:57:d3:e5:34:d3:f1:fd:45:9f:ff:04:
cc:c1:48:a8:ff:f8:34:64:eb:b8:64:a5:41:05:a4:16:48:ac:
9b:60:2e:02:25:73:fe:e0:33:fc:d7:e6:72:91:d9:6e:25:df:
60:d1:60:20:cc:25:18:34:1f:0d:5d:19:d1:82:43:cc:d4:77:
e4:e1:8e:9d:ed:34:71:e2:c4:dc:7b:99:27:fc:49:bf:50:ce:
76:53:ec:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:59:37 2026 by rpki-client