
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03947e34-cbb9-4499-ad54-cd167d713196.roa
File: 03947e34-cbb9-4499-ad54-cd167d713196.roa (raw, json)
Hash identifier: +K1lm4Z4RFHGj1P7h5kcdfoOwmwxoKBr6k2Ofg792zk=
Subject key identifier: 95:46:6E:08:E1:00:CC:77:9C:D4:2E:60:D3:D2:A2:C0:BD:73:C9:AB
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 01EA210089771A0AE5BFDC02DCC0D990C870A7E9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03947e34-cbb9-4499-ad54-cd167d713196.roa
Signing time: Fri 13 Feb 2026 12:30:12 +0000
ROA not before: Fri 13 Feb 2026 12:30:12 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3260::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ea:21:00:89:77:1a:0a:e5:bf:dc:02:dc:c0:d9:90:c8:70:a7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 12:30:12 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=f8faee1c93e0dfba3f4178c7cdbdf4c91beb80486c44fbb2f30460c8075698b1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:3e:11:07:d9:34:31:10:c6:c2:78:55:75:
f9:09:9d:36:61:7e:fa:1d:2e:bb:8a:f0:3c:19:8f:
cc:cb:af:ab:79:5d:78:57:11:73:13:0c:8f:f5:3f:
ac:c0:ce:4a:f2:75:ac:33:5c:69:c3:4c:99:25:bd:
d4:94:14:4c:bf:8d:3b:d8:19:fc:b7:47:08:64:f2:
ea:77:85:5b:f0:1e:a2:83:c1:c3:23:64:39:b0:5d:
fa:71:1d:24:85:0e:bc:c4:b7:85:50:59:5a:00:6d:
1a:da:62:fa:92:d7:af:38:4b:d5:ed:6d:2a:57:9e:
46:da:a1:6d:ed:bf:2d:b7:1d:e0:77:44:8c:59:51:
b6:fb:6c:d6:47:c2:6d:80:4b:84:6d:94:96:31:ce:
25:92:22:5e:96:86:61:f9:0b:de:51:6f:ee:3d:7d:
fe:93:4d:f8:bc:74:95:83:04:cb:b5:46:4f:6a:c5:
d6:c1:d3:f5:bd:a8:71:70:15:9c:f9:b9:9b:5b:0e:
19:e7:dd:fe:d4:ed:83:7b:97:a8:e2:f2:77:a4:9f:
b8:57:d4:ab:e0:d4:cf:f3:60:99:1c:43:c6:82:dc:
fc:f8:8d:8f:da:55:cd:7b:7e:83:99:3c:22:e8:d3:
7b:4a:d7:83:9f:40:eb:69:c3:f2:74:b8:34:e6:31:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:46:6E:08:E1:00:CC:77:9C:D4:2E:60:D3:D2:A2:C0:BD:73:C9:AB
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03947e34-cbb9-4499-ad54-cd167d713196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3260::/46
Signature Algorithm: sha256WithRSAEncryption
c1:ab:ab:d8:2b:2e:3e:2a:4a:6c:42:7f:1c:4d:bc:fe:37:fb:
ea:75:6d:96:2a:cb:97:f9:b5:da:28:32:21:34:47:fa:b9:ac:
7f:39:f3:be:ce:26:6e:bc:3d:ab:a3:a4:c9:2a:df:ed:09:2f:
66:cb:83:e9:61:94:0b:12:9c:bc:ae:0e:0f:55:c9:2c:00:73:
54:29:5b:9f:60:1b:86:97:ed:9a:13:51:70:e6:30:b9:fa:9e:
a1:c2:40:24:0f:f2:24:6a:76:12:42:70:ad:17:10:48:dd:5f:
54:cf:bf:d8:5d:a2:73:41:78:b9:69:b7:3c:b9:72:dd:d1:8b:
57:81:7b:72:ad:55:97:72:c9:c4:64:1c:d0:54:57:43:0d:12:
de:88:42:48:d3:ed:c1:df:17:51:ce:ce:35:dd:81:a8:5d:e2:
46:0d:aa:b2:e4:1a:9b:8b:47:90:c3:a7:1a:d7:ba:82:7f:3b:
c8:fb:c2:a4:4e:72:ab:37:03:18:67:0b:2d:6a:3f:20:ad:a9:
db:c8:7e:96:25:d7:9d:8c:72:48:6e:57:c9:d8:b2:eb:dc:79:
32:2c:0d:6e:f6:8c:67:96:71:7d:c3:43:86:84:e9:00:ad:00:
09:56:92:25:d0:87:1d:dc:9b:97:d5:e4:dc:3c:8a:9f:23:01:
75:64:2a:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:33 2026 by rpki-client