
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04823cf2-e0e9-4dce-9970-431f70e42156.roa
File: 04823cf2-e0e9-4dce-9970-431f70e42156.roa (raw, json)
Hash identifier: a8TQOc0iH6rUlBa4vV6HJ8FzgMWQOu2CaH7qGtYyglw=
Subject key identifier: 7C:3B:56:4D:27:90:EF:F3:50:1F:DC:61:FD:24:2B:D9:BA:C4:0F:40
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 63A24C72BD4D933175F37E0867F9F790ADE97A70
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04823cf2-e0e9-4dce-9970-431f70e42156.roa
Signing time: Fri 13 Feb 2026 03:40:48 +0000
ROA not before: Fri 13 Feb 2026 03:40:48 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3fe0::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a2:4c:72:bd:4d:93:31:75:f3:7e:08:67:f9:f7:90:ad:e9:7a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 03:40:48 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=bde216c9aecb9a8563fe9a3c149000d60880f0820361bca815ff1150e4b4ceba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:57:c7:d0:92:65:5c:58:d0:06:be:cb:db:
fb:4b:ba:2e:0b:e2:7c:16:c7:46:b4:5b:7f:2a:67:
5b:10:cf:53:dd:fd:09:3c:4a:72:38:ba:c7:87:c0:
c8:f9:f5:cb:0a:79:e9:ab:77:f6:de:50:06:8f:04:
b0:11:1f:09:2b:6c:4f:f8:a5:68:1f:17:00:2b:75:
70:2f:cb:f9:99:d5:bd:9c:5a:1c:c7:72:14:33:62:
f7:79:5f:72:f2:d3:6a:f5:af:e5:16:3b:76:8a:fc:
1d:6a:8b:73:ce:1d:72:de:2e:96:55:90:35:2d:18:
ed:85:a5:e7:e4:a7:b2:e7:c6:d3:02:a8:98:95:55:
e3:cf:6b:9d:98:ad:f9:aa:fc:9e:55:4e:c8:bb:22:
f6:81:a1:f8:c3:4f:54:40:44:6b:03:21:e0:42:d4:
02:78:af:69:0f:df:70:12:8e:64:d7:94:a5:b6:21:
99:75:07:ed:00:2b:57:04:26:2b:39:a8:29:c1:f0:
13:45:73:5c:2c:0d:bc:52:bf:86:19:f7:8e:c5:eb:
76:06:82:1a:7d:7e:61:54:64:5f:36:68:57:d8:80:
07:4f:9b:f6:18:7e:8a:4e:15:d1:37:74:37:21:dd:
33:fb:c7:f4:22:af:df:6a:d1:0a:b3:77:0e:d6:61:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:56:4D:27:90:EF:F3:50:1F:DC:61:FD:24:2B:D9:BA:C4:0F:40
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04823cf2-e0e9-4dce-9970-431f70e42156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3fe0::/47
Signature Algorithm: sha256WithRSAEncryption
18:c2:b6:5d:52:0a:be:92:98:e9:05:b2:19:47:ed:a1:ae:93:
85:11:d9:51:e3:d7:f1:49:44:aa:91:e2:14:48:36:83:3e:da:
95:39:7e:7a:4d:88:0b:94:5d:44:a9:0e:e2:6a:f1:65:7f:67:
e3:54:05:d8:e9:eb:53:40:0c:d5:1f:95:52:7c:08:2c:a2:25:
46:af:54:73:80:5f:06:b3:e2:9e:9b:84:45:2e:94:35:4a:96:
ce:34:f9:d6:48:b9:3d:94:12:51:e0:f7:b0:2e:27:1a:ff:38:
b3:d1:f6:61:80:44:b4:58:a6:9d:60:fb:ac:72:63:88:0d:6d:
75:c8:ec:38:8b:ae:ce:69:a4:50:99:27:33:9a:68:3d:24:4f:
ca:5d:14:fe:6a:16:ba:a5:5f:ec:40:ef:65:5f:ee:a3:62:ce:
c2:56:b4:ee:68:81:0b:32:85:98:f8:02:4c:a7:b3:b7:cc:30:
4b:f7:01:42:5e:3f:3b:28:f3:40:92:0d:d6:d9:2a:67:03:00:
2b:b9:f5:f1:17:82:ca:00:41:57:ff:62:23:c2:44:16:1f:3d:
c8:72:7f:45:ef:dc:40:72:f1:aa:e6:b7:a5:4a:4d:61:16:76:
26:c9:dc:f6:52:4d:d1:f9:de:fc:ce:d5:2d:d2:6a:41:43:bb:
e1:f9:6f:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:24:36 2026 by rpki-client