
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f6658f8-51a6-4f75-ab59-c35bbaedc439.roa
File: 0f6658f8-51a6-4f75-ab59-c35bbaedc439.roa (raw, json)
Hash identifier: LkTF7PByoPJzdy9XdmcNrtYGPDoLsxQwuRKgE4bswJE=
Subject key identifier: C2:1E:3F:59:C0:93:9F:C3:70:8A:D8:67:5D:AE:1E:53:61:A6:4D:CA
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 381AA825A3528D61953FCDB1388938A67B5D5F3A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f6658f8-51a6-4f75-ab59-c35bbaedc439.roa
Signing time: Fri 13 Feb 2026 05:21:47 +0000
ROA not before: Fri 13 Feb 2026 05:21:47 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3610::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1a:a8:25:a3:52:8d:61:95:3f:cd:b1:38:89:38:a6:7b:5d:5f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 05:21:47 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=b66e281fd79cc077a91fb7fa44125765b946eb723379bfa765eb6900842fb97d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:73:d8:36:4a:52:82:7a:cd:36:d0:da:dc:
c7:90:ff:0a:80:9a:73:7d:bb:2a:86:5c:c2:3e:a7:
03:cc:95:b8:2a:32:8c:c4:3f:a1:b3:57:0a:b2:0d:
1a:e4:ca:4a:6a:15:71:fb:44:bc:a7:84:66:05:06:
30:1c:ea:da:6d:28:99:74:9f:94:38:ed:72:d5:75:
f6:14:91:a5:e2:43:07:54:49:e8:03:d1:e7:87:fa:
5b:52:b7:c1:23:04:91:d8:e7:2c:60:c5:32:13:11:
1f:20:9f:f6:c4:09:eb:76:2b:cc:4e:7f:54:79:0d:
24:d2:dc:3c:3c:64:65:54:ab:a6:e7:85:84:51:34:
c8:f2:f5:95:62:e5:e7:04:ac:2c:f1:e0:f0:83:40:
4c:3f:66:aa:c2:92:8a:3f:20:a6:ad:e1:ba:4e:53:
47:2d:de:b9:b4:b4:55:b7:00:2f:d1:9e:10:3f:e4:
14:87:47:1d:e4:11:29:48:79:4e:3d:4f:5b:ae:8d:
78:2f:f9:4c:ff:c8:6f:0e:8c:53:ab:ce:99:f4:62:
87:0e:bd:4d:c9:24:c9:46:91:c6:f7:0a:e1:11:2e:
3d:07:68:d6:0d:f7:4a:2b:dc:68:d6:64:71:e7:55:
c7:13:01:65:04:94:c3:41:74:8d:e2:27:c3:b1:2c:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1E:3F:59:C0:93:9F:C3:70:8A:D8:67:5D:AE:1E:53:61:A6:4D:CA
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0f6658f8-51a6-4f75-ab59-c35bbaedc439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3610::/46
Signature Algorithm: sha256WithRSAEncryption
15:dc:c9:3d:00:85:6f:22:23:c2:cb:93:ae:dc:63:8c:24:45:
e2:e7:da:43:e6:26:c9:79:02:c3:9a:68:db:a1:71:66:60:d2:
d5:9e:7c:1a:a5:8e:06:20:cf:05:ee:7a:52:83:4e:c6:7b:7d:
13:09:4f:c3:d6:09:51:99:27:e3:ac:e7:4f:d1:2c:04:f9:f8:
27:72:37:64:27:22:66:05:10:de:9b:c0:9c:25:08:70:1e:e2:
3e:6e:75:78:3e:dd:91:8b:26:08:f8:df:1d:95:9e:d7:09:92:
32:d6:36:2d:52:30:35:0c:b6:81:03:72:40:98:70:03:a8:e2:
68:11:7d:99:7e:c4:b2:b8:8e:af:47:c6:c8:de:dd:1b:47:13:
3c:db:6e:5d:14:38:f3:57:63:32:b3:5d:10:e8:31:de:84:81:
b6:9c:77:b2:48:56:48:1b:ed:e2:44:ff:7d:08:3a:df:6c:f8:
a2:0d:a0:b1:b9:e1:68:70:e5:54:36:a9:c1:00:c7:82:ab:ea:
f3:cd:c6:6d:72:1b:31:2a:dc:1f:ee:40:d8:a1:0d:0b:14:75:
f1:da:8f:8e:cb:9c:65:1e:69:32:49:4a:b3:09:5e:3d:dd:b9:
c0:ef:ce:12:89:fb:b5:e5:e4:14:24:cd:0c:d3:98:f7:2e:85:
53:69:a0:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:21:51 2026 by rpki-client