
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fac9826-e110-44d8-8ff4-3043f62ef54f.roa
File: 0fac9826-e110-44d8-8ff4-3043f62ef54f.roa (raw, json)
Hash identifier: bPlXUwCnaEKUtPg7f6SDlic90wFTI2Vr4LvkZtsNeoo=
Subject key identifier: F2:AD:A8:12:E6:9E:0E:79:D7:46:05:8D:95:58:CB:3B:E0:DE:9C:07
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 284F578BB59A01FC8B2EAEBB1D06F85D6222CE42
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fac9826-e110-44d8-8ff4-3043f62ef54f.roa
Signing time: Fri 13 Feb 2026 11:10:11 +0000
ROA not before: Fri 13 Feb 2026 11:10:11 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2cac::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4f:57:8b:b5:9a:01:fc:8b:2e:ae:bb:1d:06:f8:5d:62:22:ce:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 11:10:11 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=1c5114423f0cea3aaa8d372b3769163ea4d4dd476ae71b4a35c007d176fc484c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:9f:61:03:b7:bb:53:c3:ee:e8:96:93:31:
a5:80:68:47:17:da:cc:46:bf:96:44:30:39:eb:c6:
45:f3:2a:62:de:64:f0:3c:41:cf:9a:7e:ac:e1:c6:
c8:b0:2c:1f:65:25:82:fc:16:98:46:4f:08:f6:05:
3d:1e:2b:a2:d8:83:46:74:d0:15:d2:58:7d:7e:91:
50:8b:4b:7e:1b:50:49:d5:6c:85:5c:9c:1a:f0:d2:
f0:a4:aa:8d:d2:68:82:62:d0:04:2c:6a:c1:99:4f:
4d:2d:52:3b:b4:25:ef:08:5e:83:92:1d:f2:39:56:
0e:ff:0b:11:12:d7:8b:87:5a:ba:62:bc:92:19:38:
36:64:5f:79:df:1e:60:2c:fc:34:91:5c:7a:80:79:
3a:dc:7e:ba:e8:6f:1e:d1:b3:43:cf:7d:8c:0d:4f:
58:af:5a:61:d6:91:8a:14:b7:54:75:b3:95:0c:be:
a0:cd:f3:53:41:66:a5:70:ff:a9:7f:e2:9f:1c:e7:
48:7f:a7:8f:fb:b9:95:cf:b1:07:3e:96:fd:34:22:
65:b0:77:80:33:40:db:7e:78:a1:59:7f:59:5b:ad:
cf:e6:c5:c8:8e:f8:70:e8:b3:36:11:38:a7:66:5f:
ac:46:10:5c:fa:e7:f6:8a:2e:02:5d:e8:2c:26:83:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AD:A8:12:E6:9E:0E:79:D7:46:05:8D:95:58:CB:3B:E0:DE:9C:07
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fac9826-e110-44d8-8ff4-3043f62ef54f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2cac::/46
Signature Algorithm: sha256WithRSAEncryption
2e:77:cc:51:07:d5:23:7b:af:65:be:2e:55:d7:29:bc:47:a6:
d6:be:04:b3:fb:3e:bd:d1:7f:5d:1d:52:9f:9f:98:63:f3:c0:
57:34:bf:05:68:18:3f:41:20:5b:37:52:31:fd:5c:18:28:05:
bb:c5:97:c0:1b:8c:68:22:ff:fc:5f:82:31:b4:78:29:83:71:
4a:6d:75:93:e0:62:b9:d9:60:12:c2:c5:58:e2:d8:09:14:90:
09:d8:7f:f0:58:d1:b7:75:62:b8:0c:15:7c:82:af:66:f3:31:
20:c8:4b:c0:14:8d:20:a2:9b:b2:06:89:08:32:4f:1c:18:a2:
82:69:b5:9c:ff:79:09:44:d9:ae:fc:b6:43:0e:87:64:3c:55:
5b:78:a6:84:ad:ec:6d:f7:77:20:56:43:45:c4:e8:68:84:58:
f0:4b:d2:a4:9d:2d:f7:72:ae:42:93:2c:e4:74:5b:63:e6:bb:
cf:6d:54:ac:a6:f2:44:9a:cb:95:6a:4a:53:61:98:9c:85:aa:
28:6a:01:fa:f2:a5:b6:04:53:d2:8c:5e:9c:82:70:e8:ae:d5:
d3:8a:2d:7e:5b:8d:6b:0f:3e:92:c4:67:e3:23:14:05:cc:9c:
27:17:dc:d8:38:22:3e:10:01:cb:d0:d4:82:a3:2a:83:87:3c:
c8:8b:9f:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:59 2026 by rpki-client