
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa
File: 09324f72-174c-4531-a3c3-417a0ebf8a11.roa (raw, json)
Hash identifier: QbcJkhcYs94Py0nHAkp7YWHDa0eGp5v8tsuoq3xpMM0=
Subject key identifier: 80:6F:23:69:55:66:B4:B4:84:86:F0:9B:AF:5F:90:6D:CB:C9:F3:F8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0389F84EA297BCFAB32DCE568B6C28B7BFFF4D18
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa
Signing time: Fri 20 Feb 2026 00:40:55 +0000
ROA not before: Fri 20 Feb 2026 00:40:55 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 205.251.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:89:f8:4e:a2:97:bc:fa:b3:2d:ce:56:8b:6c:28:b7:bf:ff:4d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 20 00:40:55 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=c60d517bed46a9bede37b4cfa3e3e16bd86b3babaefcff0f599927db8c1e937d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:0d:59:0e:dc:e3:46:ef:ab:16:6f:dd:56:
5a:c8:0c:ce:4f:6b:1e:3f:4f:80:65:08:e3:5e:8b:
77:ad:7b:57:61:32:1d:6f:ec:89:03:ac:83:bd:a0:
f9:4b:14:d9:04:8f:44:49:2b:dd:4c:a0:af:bb:48:
c9:e0:dd:30:27:38:f0:34:be:6f:58:ca:ed:e3:c4:
76:ec:f2:c4:6f:a2:03:09:ce:5c:52:dc:fb:8f:98:
48:db:e3:62:5a:1c:17:70:13:73:35:fe:27:66:41:
fb:19:bd:ee:72:a7:ac:4d:d4:31:50:5f:e0:df:ab:
27:00:a5:93:fd:e5:97:1d:f0:67:93:7f:f6:8b:76:
1d:31:b7:43:0f:6b:62:73:b9:54:ed:ee:8d:80:85:
09:05:de:ea:62:8c:f7:67:8c:cc:e3:c7:fe:3f:24:
c6:d6:ef:b1:4e:75:81:2c:cf:b3:79:ab:e4:72:9b:
d9:b1:e8:04:40:1b:63:4f:a3:8e:47:8f:a6:55:9b:
75:bf:b6:93:a5:53:66:86:06:70:28:1f:3b:5f:a5:
52:09:3e:88:a7:c1:c3:86:52:80:c1:08:d4:31:91:
04:e7:a7:34:a8:17:5c:e8:9f:f9:d6:84:11:bf:6d:
72:70:3a:e5:53:ae:0d:6a:36:c1:8f:3f:2d:e8:8c:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:23:69:55:66:B4:B4:84:86:F0:9B:AF:5F:90:6D:CB:C9:F3:F8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.251.216.0/24
Signature Algorithm: sha256WithRSAEncryption
45:88:e7:11:00:28:28:4a:7a:2a:3a:0a:f4:0f:25:83:d9:08:
cd:ed:ad:0c:38:ad:1b:8f:0a:0b:29:72:53:3e:af:9a:cc:0e:
81:ac:ce:de:a4:a0:50:18:19:8d:57:08:c2:19:34:ae:d8:d0:
9e:f6:59:27:01:e2:c7:9a:de:d5:88:10:f4:8d:4a:64:b5:67:
3e:03:b3:ba:db:a3:83:d9:08:7b:f0:4f:11:79:83:0f:0b:d6:
a6:a6:07:6b:2d:87:bf:3b:f0:c4:f7:79:fb:6c:33:06:17:49:
50:ad:06:28:5a:19:42:54:51:8f:ae:e8:72:42:73:b1:0c:c8:
ea:6f:ca:7c:34:05:34:bf:06:a9:62:ab:4d:c4:ca:92:a3:6e:
e4:31:f4:6f:0e:19:86:7a:77:e2:cb:c3:70:c7:6d:52:e6:32:
ed:56:cd:ec:d9:86:fa:98:8f:ad:89:af:d5:3d:76:72:6c:99:
65:7a:ee:5f:ad:99:dc:ef:2a:23:2a:44:c0:bc:79:1a:61:c8:
30:30:af:88:8e:1b:64:a5:62:69:cc:b3:1c:dc:f7:de:25:12:
30:ce:96:d0:59:1f:57:27:c6:3e:e1:f2:f5:50:99:35:af:34:
d4:a7:f1:63:62:90:71:18:b9:d9:3a:66:59:77:34:12:f0:8d:
58:ca:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:50 2026 by rpki-client