
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a667fa3-bb0a-4579-abad-7b357224837e.roa
File: 2a667fa3-bb0a-4579-abad-7b357224837e.roa (raw, json)
Hash identifier: 6gN1dWNCpL3zxQvMq2WK3M4dYKLMgnaVG9a1r+0h3JQ=
Subject key identifier: B0:14:AF:5C:65:51:93:84:14:49:40:DE:A2:EF:C1:AF:55:51:67:63
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5A8135808FAE6DB87ABE0794C84E19633B1CE266
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a667fa3-bb0a-4579-abad-7b357224837e.roa
Signing time: Thu 12 Feb 2026 01:11:58 +0000
ROA not before: Thu 12 Feb 2026 01:11:58 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:244a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:81:35:80:8f:ae:6d:b8:7a:be:07:94:c8:4e:19:63:3b:1c:e2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 01:11:58 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=80836735e095ff05348ac340ff3e3f1a79c1f60b6ad9d4bdac16c965806ec8be, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:36:b1:88:dd:52:57:41:71:25:ff:5d:e0:
18:2c:bb:71:1d:1a:04:32:51:8d:11:2b:33:c8:4f:
d2:a7:bf:ae:e2:4a:e0:81:b3:e3:d1:7b:c1:85:05:
b4:9c:1b:a2:c4:ba:a8:b3:04:47:b9:58:43:44:77:
29:f3:e5:b7:48:84:2a:0c:13:5d:4a:60:cd:18:24:
d0:d9:2c:e7:42:17:f4:66:a6:5a:c1:75:f7:b4:7b:
34:e2:d9:dd:4d:f0:67:88:9c:35:26:55:84:a2:33:
6e:5a:53:fb:cd:a3:7f:46:18:94:35:6a:ea:ec:37:
e2:b6:bb:49:ff:9f:0f:57:d6:da:9c:b6:59:92:2d:
48:97:2b:37:9c:5b:a8:1b:30:1c:b2:fe:9f:77:3b:
0e:29:e1:3e:86:0a:ec:4b:36:41:c9:14:c3:09:53:
22:6c:86:a8:62:a8:5e:ae:96:09:ff:86:cb:44:66:
ca:37:95:27:84:99:50:21:69:07:cc:f9:5b:07:2d:
4f:04:4c:37:ed:72:eb:f8:79:04:48:6f:56:94:73:
32:25:5e:bb:6a:1c:e0:a4:f2:47:a8:fa:be:b3:33:
5c:7c:e2:6b:99:ce:92:74:41:67:92:d5:30:85:e9:
c4:3d:73:24:eb:b5:50:c5:b8:b7:13:b7:a9:9c:9a:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:14:AF:5C:65:51:93:84:14:49:40:DE:A2:EF:C1:AF:55:51:67:63
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a667fa3-bb0a-4579-abad-7b357224837e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:244a::/48
Signature Algorithm: sha256WithRSAEncryption
44:98:17:87:c8:f9:77:f8:65:40:a7:03:a1:1d:3e:d7:ef:10:
fd:55:fd:f6:52:ae:2b:75:53:0d:78:7c:2c:95:7c:f7:63:90:
aa:36:cd:25:be:89:a8:92:c9:88:87:e3:cc:3e:81:a3:04:da:
94:e9:da:16:3c:be:3a:f0:0a:dc:e9:61:ce:2c:bb:87:01:77:
dc:6d:bc:c3:40:fc:5a:95:1c:98:67:00:fb:d4:4e:8f:c9:f8:
75:55:bc:15:01:88:ad:7d:56:71:9d:ff:30:7d:1e:2d:eb:8e:
29:fe:6d:1f:45:b5:37:44:f0:5b:24:26:6a:c6:77:ee:2b:3f:
f5:70:72:e2:75:5e:bd:70:d4:30:27:1a:b7:f9:45:58:7b:c9:
53:0c:a4:d5:0f:80:83:a5:bf:cf:55:9d:58:e6:42:91:63:f7:
2a:d9:a5:2a:73:fa:ec:d5:5c:5d:55:b2:4b:71:d2:52:94:a3:
ba:eb:f2:58:93:4d:4e:d0:dd:d7:ca:5a:f4:10:a2:08:a1:55:
bf:59:bc:c4:7f:c4:ae:94:09:7d:ff:24:94:4d:20:a5:23:c6:
81:83:29:ac:fd:6a:85:39:33:f4:12:f7:7b:d2:1b:a1:eb:79:
21:21:7f:02:05:62:76:d8:cf:a6:32:29:9e:36:36:af:32:2d:
10:38:a1:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:39 2026 by rpki-client