
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24b1e7d4-733f-4541-b2fa-367203b70618.roa
File: 24b1e7d4-733f-4541-b2fa-367203b70618.roa (raw, json)
Hash identifier: WVfL8VdwazDs0rQgl+77hhZXkrjk803bcBP4feIjbXc=
Subject key identifier: D5:A9:37:D3:FF:17:2D:23:F3:CE:2A:EC:3D:04:AC:36:4B:75:DD:1A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 55B03A5CBAC095B07737F2280AA06E6F48C3F5D9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24b1e7d4-733f-4541-b2fa-367203b70618.roa
Signing time: Fri 13 Feb 2026 07:51:54 +0000
ROA not before: Fri 13 Feb 2026 07:51:54 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c08::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b0:3a:5c:ba:c0:95:b0:77:37:f2:28:0a:a0:6e:6f:48:c3:f5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 07:51:54 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=f36765149db32b4ba3c09e811daacb4f6481bac1c576ba582626ad1f5d1d82a0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:e1:07:4a:3a:e2:be:24:29:1d:0b:ec:d8:
86:64:91:4a:a7:95:59:c6:77:7e:6e:4b:2d:60:a5:
d3:55:90:63:0e:3b:cd:29:ae:2f:27:c5:04:f8:3b:
f9:36:b3:8f:37:92:d9:ef:35:d2:87:64:d5:2e:52:
2e:c0:ac:90:b3:92:75:54:73:46:45:a7:25:47:8f:
57:86:b9:77:8a:cb:c7:2d:30:08:3a:63:ad:e5:ed:
13:1b:2e:cc:f6:11:4b:b5:65:4d:5b:cd:3d:0d:08:
0e:39:2b:a0:d0:38:5c:ce:4a:fe:3d:6a:92:13:be:
be:4e:e5:8d:a5:76:b6:a1:d1:c6:1b:3a:ad:bb:c2:
fb:5c:06:78:23:74:e9:49:e4:19:4e:a6:ca:47:f3:
f4:a1:19:87:76:71:6e:13:a5:da:31:20:60:42:63:
d5:fe:0f:b6:5e:df:cd:37:ca:fc:d6:91:49:05:49:
d7:d0:1f:4c:e2:24:2a:da:91:08:0c:d4:26:b2:cd:
08:ca:4c:c3:a4:f4:8b:7a:92:19:a0:72:64:71:47:
dc:03:d3:f7:8c:09:d2:af:ff:7c:c4:88:db:6d:91:
ce:2d:ad:88:2f:2b:8c:79:a3:69:6a:c5:a0:59:ef:
3a:2c:2a:82:42:3f:8f:51:ca:06:bd:93:89:85:06:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:37:D3:FF:17:2D:23:F3:CE:2A:EC:3D:04:AC:36:4B:75:DD:1A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24b1e7d4-733f-4541-b2fa-367203b70618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c08::/46
Signature Algorithm: sha256WithRSAEncryption
71:e4:11:53:09:7c:0e:af:be:6d:92:63:a8:bf:85:13:70:38:
7d:8d:0a:9d:de:1a:0b:8a:2f:46:02:7c:1d:ef:4a:a7:12:8e:
9a:49:98:70:74:8d:fa:ae:bf:65:af:5f:c0:d4:24:08:d3:93:
ef:8e:3b:a9:3d:ba:56:6b:93:71:cc:40:4c:cc:22:04:8e:04:
6a:58:1b:6e:15:f9:7b:06:7c:1a:d6:cf:ee:85:17:b6:b3:fe:
bf:8d:08:ac:cb:19:4e:a7:c7:61:a2:5c:82:64:4c:a3:31:11:
47:e6:82:b7:f5:e8:aa:b9:f0:b9:d3:82:94:b8:f4:8d:4c:fb:
37:e7:4e:06:90:22:e0:91:2c:f7:fc:16:40:fc:2b:63:a6:1b:
2e:9a:9b:e2:a4:2c:9d:15:51:60:5a:d7:a1:c0:7b:4e:43:56:
44:2a:c5:9f:a2:e9:28:41:7c:40:a2:9c:cf:df:7f:ad:42:cf:
05:e7:1c:c6:e2:d5:b5:1a:e9:62:33:43:0b:2d:91:84:39:70:
51:16:89:05:79:88:66:c6:a2:19:48:e6:58:ce:4a:aa:fe:1c:
1e:e9:81:64:ba:3f:7f:73:e2:48:50:a9:59:ef:7c:c4:c8:db:
6c:2b:06:b1:9f:72:db:e4:c0:d2:f6:97:60:e2:8e:2c:da:ee:
b5:5e:be:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:19 2026 by rpki-client