
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb2c56a-a790-4af4-bfc9-b93f1389d655.roa
File: 1fb2c56a-a790-4af4-bfc9-b93f1389d655.roa (raw, json)
Hash identifier: R7M/Dyr7Jkb8/d3Dsr+w00pHgHJVPWTLK0eBUqWP6eo=
Subject key identifier: 48:9D:3A:E1:51:1F:32:34:BC:E2:F2:F7:8D:D8:61:85:4C:2B:3A:1B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1C7362B8B4C09B9DDFC9DAAB012B899CEC90D42E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb2c56a-a790-4af4-bfc9-b93f1389d655.roa
Signing time: Thu 12 Feb 2026 02:50:08 +0000
ROA not before: Thu 12 Feb 2026 02:50:08 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2e9a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:73:62:b8:b4:c0:9b:9d:df:c9:da:ab:01:2b:89:9c:ec:90:d4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 02:50:08 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=5cd43b3f0e22ab903859f8b883b16b4054c1967c78720b900d896a81f1b56edb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:cb:66:0a:3c:84:d3:bc:10:f0:46:8a:d3:
c3:ec:fb:67:c7:2d:9e:72:52:fc:53:b2:f2:13:8d:
0e:03:fa:30:2f:f8:01:4c:79:f3:60:b3:00:5d:85:
c2:32:98:a3:23:fb:99:94:fd:e4:9d:63:ac:1d:67:
50:8f:b6:36:89:9a:e8:ba:ab:28:fd:b2:3f:03:75:
03:b8:c7:c5:0f:b4:f4:fd:a8:cf:33:92:5d:27:61:
d8:1e:a9:46:66:fb:25:a1:1f:f4:86:1f:7a:d4:40:
68:cb:c6:9b:ef:33:7b:30:22:88:b4:12:61:ee:a3:
ad:46:53:ed:c8:e1:88:b5:8c:ce:5d:7e:fc:e9:b1:
e5:58:3b:17:e8:70:18:eb:e3:de:22:3a:e7:ea:e0:
c0:92:9d:5f:ef:54:f7:79:6e:17:d0:38:24:9a:76:
f4:fc:9e:5c:d4:c2:20:70:d5:f0:8d:73:42:0a:a1:
7d:c2:c6:19:d1:53:5d:27:0d:1d:d6:56:d5:12:af:
e3:d0:45:ef:4e:d9:8a:24:72:75:97:5c:8d:41:56:
8c:3e:8d:79:7e:69:bf:36:bc:ca:00:1c:d2:5c:2e:
53:9c:8a:79:2b:f2:ca:1d:3e:63:3f:cf:29:d9:f6:
61:08:27:36:5f:94:a6:f7:e9:e1:9e:a5:eb:cc:35:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:3A:E1:51:1F:32:34:BC:E2:F2:F7:8D:D8:61:85:4C:2B:3A:1B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb2c56a-a790-4af4-bfc9-b93f1389d655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2e9a::/47
Signature Algorithm: sha256WithRSAEncryption
8c:b2:cb:86:f9:6e:af:06:0e:2d:6a:3a:fa:01:30:cf:ad:7a:
2c:94:b9:40:45:1c:17:86:b1:71:09:21:80:e2:1a:ae:48:39:
fe:a1:79:3d:d5:3e:97:e2:4d:30:9c:b4:16:07:62:b2:d9:76:
63:7d:22:6f:fd:8d:53:92:5b:b1:08:1d:a5:b5:d1:ba:da:92:
4a:65:92:47:3c:53:9f:e5:9a:39:9d:d5:13:5e:a5:81:03:4d:
8f:36:70:16:bc:eb:d7:04:22:ae:e5:20:05:57:a9:99:58:78:
e6:ef:ba:04:5a:37:dd:1b:b2:51:65:9e:57:58:0e:b4:61:75:
1e:72:a7:63:95:15:50:65:ec:71:08:98:14:11:aa:1d:2b:1b:
0c:37:fd:23:b2:0c:40:66:4d:b5:fc:1c:3a:a7:71:81:86:eb:
69:a9:f0:04:63:19:e9:43:2e:da:42:5c:91:60:c5:7d:a9:42:
4e:1c:fa:70:9a:de:7d:a0:2e:47:12:ce:7c:3f:e8:9a:eb:fd:
9a:5e:5b:d9:14:ce:3b:db:f6:7e:63:6f:45:ef:51:54:20:00:
28:3c:57:22:71:8f:44:e3:b3:f1:84:c2:f4:9d:db:6a:68:ab:
9e:4d:8b:46:f0:01:10:2d:1c:71:d3:3a:4c:cc:d5:6e:32:e8:
b1:1d:00:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:03 2026 by rpki-client