
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28e942f2-c1ee-4683-8473-5bd5541b7247.roa
File: 28e942f2-c1ee-4683-8473-5bd5541b7247.roa (raw, json)
Hash identifier: MR2+6AV8KXAw6LlonfyNN/T0d1Q/4nyR97t5ucj61nA=
Subject key identifier: AF:41:5D:03:A6:E0:33:42:7F:62:53:50:5F:6C:26:40:30:AE:2A:1B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 23EFD5A7C71EF7EEAD70C088D9AB16AA3A7F5C15
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28e942f2-c1ee-4683-8473-5bd5541b7247.roa
Signing time: Thu 12 Feb 2026 00:00:51 +0000
ROA not before: Thu 12 Feb 2026 00:00:51 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ee0::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ef:d5:a7:c7:1e:f7:ee:ad:70:c0:88:d9:ab:16:aa:3a:7f:5c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 00:00:51 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=6bdca16778707bd7ac85570185a77fedfb3940086750734b658b841ea0cd8d6b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:eb:f9:1e:50:0d:4b:fa:4a:9e:dd:26:39:
c2:78:a5:61:f1:1a:a4:34:b3:b9:d9:e3:ed:27:28:
eb:79:d3:47:66:47:a8:89:a8:47:76:6e:a7:af:52:
bf:b0:fe:11:ec:43:f3:df:a9:44:83:8c:ad:27:b5:
8f:88:79:87:ff:bd:2c:4a:4e:aa:f4:c1:20:78:e4:
72:b5:45:84:bc:28:1a:14:8c:22:31:92:9d:01:03:
ce:53:e0:bb:d4:32:6c:cf:79:87:1e:d1:cd:1d:d7:
83:40:11:7c:63:e9:ff:c4:a8:32:06:6b:a4:65:f3:
e1:0c:55:84:c1:cb:fb:00:6d:63:8d:8a:20:49:61:
80:61:ea:c4:3f:eb:4e:cf:4a:88:38:6e:34:a8:b7:
50:e3:9a:2b:74:b3:ca:d1:92:23:21:d4:5d:9e:37:
dc:1a:c0:26:20:8c:8e:7f:2b:36:ae:e4:58:52:e4:
b2:b3:f8:94:58:43:c1:a6:6b:fb:7a:8b:56:9e:5d:
91:96:83:15:a6:37:1f:cd:8e:b4:ee:32:f4:31:f2:
23:84:9d:61:0d:4b:73:43:33:05:45:65:e3:01:f7:
a6:e9:83:44:92:cd:bd:2c:d5:fa:5f:00:ef:1e:17:
81:9e:46:8a:80:dc:50:01:82:4d:1a:17:bf:06:5a:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:5D:03:A6:E0:33:42:7F:62:53:50:5F:6C:26:40:30:AE:2A:1B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28e942f2-c1ee-4683-8473-5bd5541b7247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ee0::/47
Signature Algorithm: sha256WithRSAEncryption
22:ba:06:ba:a7:cd:af:ae:40:06:bb:53:b4:ff:88:e8:d1:bb:
c1:de:19:3b:8a:42:f4:7c:8c:9f:4f:65:b0:f4:15:f1:76:cf:
df:af:24:3a:57:f0:18:13:5c:bc:05:38:1f:61:76:44:6d:c0:
97:62:9c:3a:e3:67:14:db:5c:f5:39:38:fb:09:d6:07:dc:5a:
7e:d4:9b:ab:bf:b5:7c:86:b4:b8:9f:bf:05:28:1c:0f:5d:54:
02:50:26:71:20:1e:6e:8f:e0:a3:93:3e:84:7e:16:d2:00:2a:
69:40:a6:3a:b6:8e:65:86:19:b5:bd:81:b1:69:2c:05:17:de:
ba:48:75:04:40:8d:d0:a3:e1:09:f6:e3:3d:6f:c4:96:25:f1:
8e:8f:d2:20:d0:7c:53:82:e7:04:1b:e8:8e:3b:45:62:35:71:
65:a9:45:69:6c:3c:d5:84:ba:44:7c:09:55:d1:93:9b:31:d8:
70:75:87:45:b3:e1:80:f2:51:48:0d:a9:38:d3:99:30:29:85:
f8:e1:50:67:2d:1f:e5:da:2e:83:8b:7e:34:72:3f:80:56:d3:
0e:6f:a3:16:58:ac:a2:86:42:43:3e:77:9f:f4:4f:c0:9e:97:
19:6a:69:dc:d9:a6:3b:fa:fb:46:0e:67:c5:a6:ff:72:58:fd:
3c:5b:8b:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:22 2026 by rpki-client