
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c02cd14-44d2-4f41-822e-45a8b97fe6c0.roa
File: 0c02cd14-44d2-4f41-822e-45a8b97fe6c0.roa (raw, json)
Hash identifier: IE8+R6/sImh6kdc67m8Vz+q8x0QQLf+bABK6jqnvTYc=
Subject key identifier: 32:83:6D:44:04:58:DE:91:AD:52:F7:92:48:58:CE:3A:C2:99:83:FB
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 25FC29AC275241F79AA6BDF222AEE524A3913082
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c02cd14-44d2-4f41-822e-45a8b97fe6c0.roa
Signing time: Fri 13 Feb 2026 06:00:12 +0000
ROA not before: Fri 13 Feb 2026 06:00:12 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f18::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:fc:29:ac:27:52:41:f7:9a:a6:bd:f2:22:ae:e5:24:a3:91:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 06:00:12 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=7cfae7e54cf56e329971adc275f015c927652996ceed642a4ed2981bf27729fa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:23:a1:18:5a:09:46:d1:4e:a9:cb:b0:60:
d6:fa:dd:bc:68:0e:61:8f:89:c2:e3:5c:41:3e:fd:
1c:44:ab:f6:8a:6a:99:92:a9:e5:fa:f4:fc:53:b9:
2f:a8:b9:be:bd:bb:f2:76:e7:97:81:38:5b:5f:8e:
ac:e4:ff:1e:7e:71:72:73:79:d4:e7:d0:b8:d6:62:
8b:a1:90:af:63:ab:5f:01:0a:d2:7a:5f:48:72:44:
70:20:a5:9c:ee:28:2c:7e:e7:8e:1b:9f:6e:c3:32:
c9:18:c3:6b:08:28:d6:6c:c2:57:1d:6b:05:35:ea:
7a:15:02:de:f1:37:1c:64:c4:93:6d:71:bd:77:08:
ca:bd:b6:93:a1:10:0e:4e:90:bb:e2:39:b6:1f:0b:
50:27:78:1e:13:6c:e1:24:c7:34:4f:06:dc:b6:ef:
d5:67:d4:48:9d:94:da:9c:8a:de:23:01:6b:62:80:
79:14:f5:c2:20:bc:42:63:45:79:46:d0:5c:a2:2a:
b8:9f:1e:af:0d:e9:68:75:38:a0:14:0d:2b:0d:95:
b4:bd:73:05:2c:a0:6d:82:65:4e:1c:b5:1c:dd:76:
77:38:1b:b4:5e:eb:d4:80:f8:ba:d9:b0:de:ba:52:
47:5b:70:07:c4:bb:eb:76:14:b2:d2:2f:c2:31:a6:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:83:6D:44:04:58:DE:91:AD:52:F7:92:48:58:CE:3A:C2:99:83:FB
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0c02cd14-44d2-4f41-822e-45a8b97fe6c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f18::/46
Signature Algorithm: sha256WithRSAEncryption
43:be:a7:3e:70:69:42:c5:2b:01:50:ce:84:12:1d:e2:0e:3c:
ab:81:11:55:f1:7f:04:a0:a3:ba:88:14:b7:5a:ee:51:f1:98:
dd:99:a8:56:3d:cb:ef:25:65:19:d3:fc:00:a0:ef:3b:d2:95:
4d:65:c2:3f:25:f9:bb:4a:c3:3d:67:f7:98:d9:e9:4f:ea:b9:
bb:ae:64:fa:de:ee:31:63:12:e6:78:99:44:a1:8b:86:55:b8:
e9:d6:f3:d2:8f:38:75:30:90:13:40:15:53:53:75:8c:c5:9d:
37:ed:ab:07:61:e4:60:30:25:ec:c9:66:b4:62:16:43:b4:c2:
a9:40:1b:ce:5b:55:0e:d3:d0:59:cb:03:da:da:80:3a:3a:fb:
70:f0:5f:e1:21:31:9e:0a:04:8a:f4:a0:2d:bd:8e:1f:8e:38:
1f:37:f6:b4:3a:99:89:e4:28:60:d2:49:36:0c:0d:f8:8c:ce:
07:ec:57:ac:2e:70:c3:d9:6d:c2:37:3d:3a:46:88:cd:18:28:
f2:1c:e3:ae:8a:3d:fa:75:2d:93:ad:74:8d:6a:72:b3:fc:d0:
7b:34:b4:d1:fe:45:54:26:99:da:5a:6e:50:e3:74:88:31:97:
90:b5:68:33:38:05:94:81:4c:ed:79:c3:b4:a2:a2:28:94:5d:
7f:86:2b:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:10:00 2026 by rpki-client