
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/256243b7-faf3-43a6-b97b-37c21bf2481e.roa
File: 256243b7-faf3-43a6-b97b-37c21bf2481e.roa (raw, json)
Hash identifier: Hh5Sy8PldBtHMApGiQjq0IhuT7oWnOaMEwRGu5GqYXU=
Subject key identifier: B4:CC:23:EA:5B:25:40:EE:7D:D7:21:E3:EA:35:53:FC:9C:3E:39:70
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 40E91983BE1451FE6570691927133322E6196C68
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/256243b7-faf3-43a6-b97b-37c21bf2481e.roa
Signing time: Thu 10 Sep 2026 00:50:09 +0000
ROA not before: Thu 10 Sep 2026 00:50:09 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:10cb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e9:19:83:be:14:51:fe:65:70:69:19:27:13:33:22:e6:19:6c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 00:50:09 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=7ab9b93df1f2d963f305cd4364827c957c006ff440f20c496ee3862a979494d2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:5e:d9:4c:c6:46:41:b6:ce:a1:60:d7:1e:
13:f3:bf:13:8d:3a:f2:cf:0d:c1:bd:57:34:73:08:
39:e7:9b:a8:e4:cf:85:2e:cc:4c:8d:a3:5c:f0:9d:
3c:81:5b:ed:52:87:cb:e2:12:83:be:75:d5:ef:41:
aa:32:28:a8:9c:3f:55:d2:17:70:b1:e3:03:fe:fa:
47:e6:d3:e5:a1:ae:8b:1a:13:1d:ac:e3:06:0c:f6:
f8:08:15:ae:c1:a8:77:12:87:6c:0e:19:5a:bd:2b:
f4:fe:b6:45:42:a9:81:d6:05:4f:e2:0a:80:f8:bc:
81:03:06:ff:26:95:76:0c:ad:d5:fa:e6:fc:0f:c9:
bd:3b:87:da:c7:58:fd:1d:fe:ee:d2:51:5a:c4:e9:
df:1b:d7:f2:bc:2c:dc:9b:22:38:f0:af:be:3d:42:
e8:27:07:b4:4c:75:4e:94:38:67:0a:e6:d8:13:ac:
a5:96:75:8d:32:97:3c:d8:bb:38:59:c0:b1:bf:93:
67:6a:a8:6b:0a:b1:75:ec:9f:4f:43:af:f6:16:b8:
6f:21:ad:f4:f9:5c:41:53:8c:33:5b:d0:44:c9:7c:
2a:82:5a:58:e1:7e:d9:79:1a:38:cb:6a:a2:ff:e8:
95:7e:72:58:bb:e3:e1:98:f4:90:4f:ae:7b:4b:d7:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CC:23:EA:5B:25:40:EE:7D:D7:21:E3:EA:35:53:FC:9C:3E:39:70
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/256243b7-faf3-43a6-b97b-37c21bf2481e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:10cb::/48
Signature Algorithm: sha256WithRSAEncryption
ba:1d:e7:d6:50:77:48:b7:ee:c2:dc:e1:c6:42:84:12:c1:da:
28:bb:12:42:70:44:d3:a7:7b:22:19:b6:02:26:a7:ea:2e:fd:
8e:5e:b5:cd:c0:10:a0:77:62:b5:2d:3f:f8:c0:2e:4e:e5:64:
75:33:8a:9b:69:9c:d0:f1:a1:3e:00:2e:db:8c:ba:84:e3:f5:
d8:6f:75:e5:26:aa:7a:4c:9f:31:79:6f:11:1d:4a:b8:28:fe:
6a:4b:a0:dc:9b:4e:a3:ff:ce:25:40:ee:e2:bc:f0:10:ef:06:
5e:eb:8a:61:91:db:d1:5d:e1:39:f6:8d:bf:20:b6:a1:7c:86:
e2:c3:ef:0e:84:8b:d7:c6:15:47:0f:08:ea:c4:bb:99:6a:6c:
91:a9:e0:d3:e3:90:d6:19:e4:04:38:7d:f1:9b:1b:93:3a:e6:
c2:bc:dd:48:1c:ea:8c:5f:17:20:09:27:fb:c2:84:bd:c9:d3:
27:97:66:de:8b:69:7b:26:fe:91:70:cb:a5:5e:75:5f:cb:a2:
16:65:ac:db:f0:a7:72:87:05:19:4d:42:1c:43:a0:83:72:01:
94:19:dd:07:65:ec:c1:80:b6:17:8e:6c:6f:99:56:44:e8:80:
b8:e3:74:a9:56:bc:a2:a2:21:ad:b3:d0:5d:e9:2b:44:ed:42:
7a:b9:26:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:32:54 2026 by rpki-client