
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/10669a44-7926-4e7e-aa03-21d44cf9ca44.roa
File: 10669a44-7926-4e7e-aa03-21d44cf9ca44.roa (raw, json)
Hash identifier: diSMRDzgw1+BAWAwekVhiQteAkCx+laYbovPrLBPN98=
Subject key identifier: C0:1A:3B:F2:19:BE:86:CC:1F:A5:18:D4:12:1B:8C:10:25:62:D6:9B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 255AD308F81F9FEA20A2C531E2E04014C03CFC0A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/10669a44-7926-4e7e-aa03-21d44cf9ca44.roa
Signing time: Fri 13 Feb 2026 11:00:06 +0000
ROA not before: Fri 13 Feb 2026 11:00:06 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3ee0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5a:d3:08:f8:1f:9f:ea:20:a2:c5:31:e2:e0:40:14:c0:3c:fc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 11:00:06 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=0ee010728d0a2b6def4c60b02758cd215b7ab0648cb90e16b92ed40f7ed4758e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:56:e0:30:21:03:c8:ab:58:a3:61:e1:c3:
ff:a9:fc:1d:e8:05:2f:2d:6c:90:3d:9e:52:2e:2f:
a5:0c:a6:56:50:5a:c0:ce:42:3e:f7:b8:7e:32:8d:
de:62:0b:25:15:39:bb:70:80:aa:ff:1c:9b:bf:8e:
c2:65:98:94:ed:99:85:e2:b6:cd:d4:33:28:2a:ed:
91:98:de:77:9f:62:0b:f2:0b:b9:af:18:5b:bb:ba:
f9:9f:5d:a4:df:08:d2:23:44:24:a0:bc:56:45:b4:
bb:e4:89:d9:e0:1a:88:1d:fd:40:3a:4f:6f:79:ab:
bd:2e:d2:10:13:45:e0:43:28:7d:7a:2c:04:4c:f2:
90:99:97:2c:63:a3:05:69:ed:f1:12:d9:54:cc:01:
ec:1b:06:02:62:bd:88:95:33:bb:f7:33:3b:57:79:
74:ea:0f:f2:35:6f:0e:20:a4:4d:ca:6c:b1:e5:7d:
77:0e:47:d4:e4:84:5c:cb:6f:fd:89:39:57:e1:fc:
31:95:d0:93:c2:a4:05:b7:12:e6:2c:73:25:e5:d0:
86:b5:40:a4:be:ec:e4:db:8f:e6:5a:94:a2:e1:b7:
21:0d:56:98:be:fe:b9:21:3b:4f:59:f6:c1:bd:4b:
05:fd:2c:ea:90:72:ac:31:8d:aa:e9:d8:1c:f1:85:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1A:3B:F2:19:BE:86:CC:1F:A5:18:D4:12:1B:8C:10:25:62:D6:9B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/10669a44-7926-4e7e-aa03-21d44cf9ca44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3ee0::/43
Signature Algorithm: sha256WithRSAEncryption
59:f6:e5:1c:67:03:40:5a:e3:bb:18:e3:93:cd:c9:98:7c:f0:
c7:e9:2f:1a:2d:98:68:4c:9b:ad:ca:a8:5c:39:0a:07:18:84:
8d:95:26:ba:88:65:69:95:be:7b:8e:89:06:4a:44:f5:70:f2:
99:02:3d:f0:6d:30:30:5c:91:0b:0c:b1:18:82:91:23:e2:81:
c6:c2:1c:76:11:ac:c2:dd:79:ca:61:ca:02:af:75:6b:84:c7:
36:8b:1e:a5:b2:c9:8b:d2:53:c7:86:01:f6:96:79:db:2a:5a:
99:29:fd:01:cd:f6:89:24:87:ea:ba:af:bd:60:11:ac:08:5e:
b1:dd:ba:a8:1e:9e:aa:7e:01:55:27:22:b1:f4:9b:04:c2:a6:
40:5d:13:11:cb:48:67:b8:2c:43:84:38:66:f7:66:6c:1a:92:
fb:65:e5:da:0d:f4:86:44:62:98:e8:b4:b6:d7:41:0b:69:ae:
dd:a1:d9:e2:43:45:f0:c7:ca:fd:3b:3d:9f:c3:7c:c8:75:6d:
2d:16:ec:fa:0a:95:79:c8:e5:57:99:ac:ce:a9:53:07:b9:50:
62:7c:71:0c:6d:6d:81:29:02:58:73:4c:69:26:65:12:b8:ab:
53:39:ef:25:08:24:ea:53:55:4c:08:f8:ee:36:88:7c:3c:07:
d1:5c:22:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:43 2026 by rpki-client