
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e8ac085-a3d8-4b83-807d-abda3b7816cb.roa
File: 0e8ac085-a3d8-4b83-807d-abda3b7816cb.roa (raw, json)
Hash identifier: Q1R5mlrB8nPLuO7IIq93TtcNRs8XCcXDI03SO14R8X4=
Subject key identifier: B6:50:FA:EB:35:0F:37:5C:6E:30:5D:35:CE:3B:F6:7E:ED:DD:41:A0
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: C47E3EF5C9A71B9598E03AE94F44EEF3502B2D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e8ac085-a3d8-4b83-807d-abda3b7816cb.roa
Signing time: Thu 12 Feb 2026 01:01:45 +0000
ROA not before: Thu 12 Feb 2026 01:01:45 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ba8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c4:7e:3e:f5:c9:a7:1b:95:98:e0:3a:e9:4f:44:ee:f3:50:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 01:01:45 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=3400a0baf2ec1f5321b26614692d7ff56b97355ccb5770ee7a983c3af685331a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:f0:45:6c:a7:42:b5:95:8e:68:30:37:64:
92:21:26:d9:15:63:0e:53:37:1c:4a:18:17:90:78:
07:f2:e2:a4:b5:ed:37:69:ec:42:20:5b:1f:48:37:
c8:d0:9f:24:3c:9d:28:48:b4:66:e0:b9:10:44:1a:
a2:19:fa:37:e5:cd:c1:d3:2f:c9:8f:63:d7:28:04:
37:8f:7f:22:9e:87:33:b9:ed:ad:8c:17:fb:38:a5:
91:f0:ae:89:da:71:7f:fc:d8:f5:9e:11:3a:44:3d:
1f:49:65:66:d3:12:78:7e:95:9e:96:01:9d:0f:b1:
1f:4f:d4:e9:e4:54:32:06:83:2f:3d:5e:af:3e:c9:
ed:ec:31:5e:a8:d0:e8:bc:65:1f:af:5e:93:57:a9:
3b:62:b4:f7:b8:8f:e2:41:c0:71:e5:ad:d1:6d:e9:
3a:33:39:a5:57:0b:3a:6a:c6:79:81:f3:b1:48:b6:
17:11:07:23:ad:1e:b1:69:58:6f:ff:3f:5e:29:1e:
fb:4d:ef:ec:da:b3:e4:ab:dd:3c:9a:7e:85:76:cf:
be:8e:04:40:5d:a7:8d:25:8d:f1:c0:db:cf:5a:50:
e6:ab:6d:b8:33:19:11:b9:b8:fa:0f:04:85:ba:9e:
3b:6a:58:e4:a7:4e:90:fa:a7:52:9f:20:35:10:ba:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:FA:EB:35:0F:37:5C:6E:30:5D:35:CE:3B:F6:7E:ED:DD:41:A0
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e8ac085-a3d8-4b83-807d-abda3b7816cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ba8::/47
Signature Algorithm: sha256WithRSAEncryption
41:83:d6:3a:c4:87:5a:9a:f7:6a:f5:1c:b1:5e:71:f0:a9:cd:
10:11:76:bf:b4:90:37:04:0a:94:71:4a:f9:cd:e6:8d:cb:2a:
5c:a1:0f:66:a4:2e:95:35:fc:af:bd:ca:bd:89:26:3b:15:8b:
50:c2:54:84:b4:5f:60:0b:e6:15:31:de:a3:77:05:34:07:67:
2b:5c:53:2f:2a:a0:63:a3:d0:7a:a6:29:90:fb:79:a2:25:4d:
3b:e8:e3:d3:9e:a5:7c:a8:c0:c6:06:b3:6c:f8:64:18:b6:75:
ee:1d:7a:09:a5:f1:bf:76:fd:7a:09:eb:5c:a3:51:96:ba:0b:
e0:bd:23:d6:8e:07:05:de:1d:b4:70:6b:36:bb:ad:27:24:22:
ee:a2:d0:b8:60:cd:4b:e9:42:4a:0c:98:a6:f6:89:1f:af:2d:
cf:45:9a:ec:97:42:f1:24:a4:ec:c7:08:0d:bb:c3:ea:95:38:
93:07:f9:54:a2:b6:67:4b:93:1c:f5:87:cd:6e:7b:05:e8:63:
8a:b4:29:f0:b3:98:d3:7b:44:76:81:08:db:42:cf:ee:5d:cb:
a8:25:f0:b8:bd:f4:9b:24:d3:25:2d:e7:16:c2:35:ca:ef:55:
2a:af:e0:e7:8b:b4:b6:64:0f:6f:e3:00:2c:88:ce:c3:0f:b4:
39:6b:30:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:15 2026 by rpki-client