
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/13688fb7-a71f-4173-8b9a-fea8b46e7167.roa
File: 13688fb7-a71f-4173-8b9a-fea8b46e7167.roa (raw, json)
Hash identifier: TB20RP2ZBBdfWYZrgvg9pp2XN9+jEmO3su4RS+78H/Q=
Subject key identifier: B6:36:51:55:91:77:46:68:08:ED:A1:3C:A7:B6:88:CD:9B:13:B1:8D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2AFDED1AED5D87AD4B2BA3208B35CEFF649F178F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/13688fb7-a71f-4173-8b9a-fea8b46e7167.roa
Signing time: Fri 13 Feb 2026 02:00:51 +0000
ROA not before: Fri 13 Feb 2026 02:00:51 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3336::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fd:ed:1a:ed:5d:87:ad:4b:2b:a3:20:8b:35:ce:ff:64:9f:17:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 02:00:51 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=42d60ff1a231ed19e2b7b9e1f0ae6e25eae4284bc40b8e8973e3a8945d4fd6c9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:9e:dc:c1:fa:57:18:16:14:90:59:88:ef:
8d:0e:6b:fe:ec:b5:43:77:63:ad:65:fa:78:62:e0:
dd:fd:b0:56:d3:8f:6e:aa:9d:97:8c:aa:d2:d8:58:
52:06:d1:10:33:42:77:ee:5f:c2:30:59:f7:17:fc:
27:34:d7:96:83:ca:c0:83:91:56:aa:77:57:76:4b:
00:b2:52:e7:58:4b:2c:f5:08:3f:86:a1:85:5a:c5:
b8:c9:06:23:dc:84:3d:04:b9:cc:e2:db:8c:48:ca:
55:2d:b5:27:d3:cf:ed:68:15:79:bb:3d:67:fc:28:
48:93:6b:bf:13:d7:c9:28:d0:a3:5e:9b:f1:ec:3b:
46:ca:9a:db:17:6b:5e:b5:18:ed:11:a8:f0:af:e0:
c1:6c:61:96:9c:15:75:89:aa:05:af:2c:26:2b:83:
41:06:f8:f9:4e:ad:67:da:0e:bf:29:aa:01:87:2f:
0f:d2:08:a4:eb:d5:51:e4:da:fa:be:55:ff:6d:c5:
cf:89:5d:34:6d:eb:2e:75:66:71:62:34:25:b9:b5:
92:fc:c4:22:6d:00:fe:43:dd:a5:99:a5:c3:7e:23:
91:68:eb:6a:d9:89:05:40:46:e8:9b:a3:b1:01:25:
f3:e5:37:ec:4c:61:c6:1f:06:c6:c0:38:e2:f0:1e:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:51:55:91:77:46:68:08:ED:A1:3C:A7:B6:88:CD:9B:13:B1:8D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/13688fb7-a71f-4173-8b9a-fea8b46e7167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3336::/47
Signature Algorithm: sha256WithRSAEncryption
1c:68:a8:89:30:3c:6c:1d:47:a5:43:44:b8:42:e7:31:6b:03:
ad:43:19:5c:2a:7e:33:8c:53:c8:bc:0d:6d:ba:29:f9:de:06:
1f:1a:87:45:a1:7b:06:5d:47:5e:9a:45:43:37:76:6e:b3:10:
bd:29:8d:c8:d0:6e:16:3c:76:88:ea:0f:9f:27:bf:df:76:9f:
7a:0b:34:dd:c3:05:22:dd:36:c0:f4:d5:8f:7c:f2:ad:9d:a9:
00:22:21:98:17:02:ca:27:d3:92:91:2a:41:58:6c:7d:c6:30:
93:27:c1:66:ab:82:42:96:4d:85:ad:d0:87:80:1d:8d:6e:fe:
dc:4b:0f:74:5e:63:92:36:58:b8:fe:a3:4c:de:5c:9f:58:09:
d0:bc:f1:f3:c9:19:33:29:c2:2e:5a:21:69:82:b7:12:9b:94:
90:19:82:1d:7a:94:e1:94:2d:98:3f:a8:fc:61:da:d6:ce:7d:
1b:61:7a:ac:d0:0b:2a:dc:f9:2a:77:3e:23:8e:aa:c3:6d:b8:
be:c0:02:fe:ec:33:7e:af:58:86:51:12:0e:a0:8c:72:5b:62:
5c:79:68:59:77:b7:c6:7c:5a:f0:2f:ca:0e:c1:14:14:a5:31:
f2:61:a0:06:17:36:cf:e3:09:35:70:b2:06:c1:55:c4:8e:cf:
4a:b8:e6:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:22 2026 by rpki-client