
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28f91b0b-6d5b-4a2b-b22c-8376e1f2aebc.roa
File: 28f91b0b-6d5b-4a2b-b22c-8376e1f2aebc.roa (raw, json)
Hash identifier: KKOiIM8CKW9lzxYOD1MXRp49tsLHC4Rf0rP5CWSGFaE=
Subject key identifier: 77:33:81:35:59:DE:99:8E:39:BB:DA:8B:BA:1E:5A:D7:6E:2A:DC:99
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3261DB1CA6FC504B1DC31B625DBD68B39BD2840F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28f91b0b-6d5b-4a2b-b22c-8376e1f2aebc.roa
Signing time: Fri 13 Feb 2026 10:01:44 +0000
ROA not before: Fri 13 Feb 2026 10:01:44 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3a6c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:61:db:1c:a6:fc:50:4b:1d:c3:1b:62:5d:bd:68:b3:9b:d2:84:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 10:01:44 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=06bca8417167bd4a2840b26ddb0cb22f4c901f2e142798bcaae65d75909aa7da, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:3b:84:33:4e:47:5a:6b:86:cc:de:6b:ed:
fe:2f:fd:8a:2c:60:77:61:36:00:4d:5a:5a:0c:17:
a1:24:f4:c1:af:2c:11:c4:a5:45:96:5b:b1:bd:c1:
51:b0:6e:c1:95:27:2f:ee:ec:db:d5:a2:35:20:47:
d0:59:e1:f9:1b:d7:b3:8e:42:20:43:a0:b0:4b:49:
41:0e:b6:e5:bf:3a:cc:da:60:d6:ee:38:f3:49:26:
b6:33:95:30:a3:fd:4c:e9:91:0e:93:68:07:9b:f5:
e1:bb:29:92:a9:bc:bd:15:40:3d:3e:d7:7d:64:2c:
58:f3:e8:a2:37:6d:93:50:cb:62:5d:ee:95:20:34:
dc:ed:fd:28:46:a3:fa:f7:1b:88:f1:3f:6c:a5:95:
ae:b4:4d:82:ba:82:22:eb:8b:4f:a3:49:5b:39:90:
a1:11:10:dc:3b:a4:49:5b:01:b6:fd:68:4d:f8:18:
90:f1:81:3d:02:f3:82:1a:16:7f:5e:00:0e:79:01:
37:81:ef:fa:a0:7b:87:4c:fd:20:b6:3c:b7:ca:29:
75:24:57:b5:d7:40:47:13:5b:6f:2d:39:c1:be:20:
6f:4b:33:5d:cc:27:1a:fd:5e:b1:2d:c5:26:97:29:
96:ba:40:31:af:3d:92:d4:6c:5f:e8:8c:43:8f:65:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:33:81:35:59:DE:99:8E:39:BB:DA:8B:BA:1E:5A:D7:6E:2A:DC:99
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28f91b0b-6d5b-4a2b-b22c-8376e1f2aebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3a6c::/47
Signature Algorithm: sha256WithRSAEncryption
45:4c:b9:1a:de:0a:5b:39:03:b2:53:07:4b:8e:56:c9:4d:c6:
07:6f:49:c3:48:a6:30:1b:4f:50:33:03:0a:3d:1c:e1:b1:0b:
34:87:b9:6f:4b:0d:50:8f:c7:47:30:d6:a3:59:9a:65:2b:00:
05:85:dd:e6:43:19:df:de:c8:de:4f:f9:ca:e0:7b:48:a3:cd:
b7:60:4b:9b:d8:5b:6e:92:b9:02:96:39:55:de:57:93:1f:ee:
4e:9b:96:c2:4a:c0:85:53:b9:5d:ff:24:41:72:04:e4:4a:37:
fe:39:a5:12:1c:ca:fc:b3:1f:9e:5e:37:e5:74:d5:2d:73:c9:
2e:08:57:cc:30:77:f6:8d:42:e3:21:1e:51:07:7e:b3:ae:37:
74:5a:c6:a7:27:ff:ba:a9:18:6c:d6:86:59:0f:fc:ef:92:29:
15:b9:9a:dc:b1:fe:3a:55:c8:15:7e:b2:c7:ad:fb:75:9f:51:
f2:ac:45:85:1b:a3:d8:5d:ce:f3:ee:a6:5e:f9:f1:df:50:0a:
f4:9b:dc:d9:3f:9a:51:c7:f5:82:4a:a3:95:90:f5:ff:42:9f:
24:43:a0:6e:31:3e:af:d0:2b:75:7f:99:cf:13:ef:d5:d0:99:
22:d9:9c:72:fc:23:61:9c:3b:c3:0b:e7:09:56:5e:e3:49:db:
12:64:49:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:20 2026 by rpki-client