
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2afca5c7-7f26-45ae-be9c-e853d10ed3c1.roa
File: 2afca5c7-7f26-45ae-be9c-e853d10ed3c1.roa (raw, json)
Hash identifier: scaHhw8961x9y67YP5MD0FNtGsTYUCtwJOwuCYghR30=
Subject key identifier: 2E:46:D1:A9:DD:89:69:85:5D:8E:AF:F4:3A:8D:0A:9D:08:9A:64:2C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 215BF4C37C38FEB48D590EC1D9F1B7D899B80584
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2afca5c7-7f26-45ae-be9c-e853d10ed3c1.roa
Signing time: Fri 13 Feb 2026 08:40:56 +0000
ROA not before: Fri 13 Feb 2026 08:40:56 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:369a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5b:f4:c3:7c:38:fe:b4:8d:59:0e:c1:d9:f1:b7:d8:99:b8:05:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 08:40:56 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=caa814f12f808dac05c6136b5f65f6693f0f1ad4c744bdc10ffaa3e98f2b4ffe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:a6:dc:25:e7:96:f8:fb:55:de:c5:75:08:
29:2e:e3:76:e3:e2:93:2e:1b:d8:a8:1b:8f:1c:c9:
2c:57:ff:ff:56:0d:87:c3:2e:78:fd:86:68:2b:7f:
e3:04:9d:5c:78:a9:1a:16:87:9a:4f:d3:5c:72:26:
96:e1:3e:7e:2b:68:f5:dd:f9:78:f6:2c:86:f4:4c:
2a:1e:7b:de:32:ff:23:d2:89:02:10:9d:3f:68:01:
24:56:38:d3:d4:a4:8b:50:75:e4:de:77:6c:6e:04:
5e:0a:8c:9b:35:5f:ef:6f:c4:e0:ac:ee:a9:fd:5f:
68:9e:1c:3e:21:76:7e:97:3b:06:97:bf:70:ce:b6:
13:65:67:90:b5:66:a3:34:ed:3f:fd:c9:da:ed:f1:
f6:71:29:d2:29:a0:d6:c0:99:47:34:46:ee:3f:f0:
52:98:f7:8c:3b:2a:8d:bc:68:46:de:e8:10:2a:42:
70:a6:23:eb:dd:b3:a1:ad:4a:3a:dd:45:51:48:42:
ac:0e:b8:73:a7:12:45:91:55:99:04:b0:32:b8:20:
9b:76:80:42:bc:2f:fe:f4:a8:e0:b6:43:8e:a8:20:
7b:fb:27:eb:1f:a4:51:76:01:b6:7b:6a:e4:b7:2c:
b0:0c:26:49:35:bc:6a:6f:3b:71:01:1a:bf:ad:2d:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:46:D1:A9:DD:89:69:85:5D:8E:AF:F4:3A:8D:0A:9D:08:9A:64:2C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2afca5c7-7f26-45ae-be9c-e853d10ed3c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:369a::/47
Signature Algorithm: sha256WithRSAEncryption
8b:e2:53:2d:90:25:85:a5:96:93:2f:7b:34:2d:7d:37:d8:8b:
38:7e:fa:be:1f:98:4c:56:99:48:0d:31:f5:f3:3a:dc:d4:09:
d6:5c:de:c3:b0:45:91:89:21:00:33:62:f1:cb:5b:11:ef:3f:
d5:d1:9d:1e:3b:8b:fb:73:9d:33:c6:fb:aa:f3:85:df:7c:3b:
46:6b:6a:41:b5:16:ff:1b:cf:ad:84:f6:bd:b4:02:fa:2d:ce:
88:19:30:25:b9:18:7e:30:95:c0:4d:ff:b2:c6:98:a5:02:81:
a5:f9:56:74:4a:c8:57:fe:9c:e9:c0:ce:be:fd:f3:48:e8:14:
0b:36:b2:5f:a3:51:9c:c4:c1:1c:cf:f8:29:b1:27:91:8e:40:
60:7d:75:55:be:41:cb:e9:45:7f:7e:21:16:9e:35:91:11:30:
a0:61:fe:6a:c0:9b:a2:92:f5:fe:85:b7:c0:e8:3c:df:f5:87:
63:75:e0:bd:30:5e:aa:72:3d:3e:be:0b:57:4e:85:83:be:da:
4e:0b:98:e5:83:1b:de:c5:c9:af:aa:06:04:ed:8e:74:99:f3:
b2:2b:32:5d:2d:4c:31:8b:6f:93:ff:00:e8:ad:4e:1b:7d:f2:
79:ea:c6:76:8e:c6:3f:6c:7b:cc:7e:11:1b:9c:39:a2:28:8a:
fb:bf:2b:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:57:34 2026 by rpki-client