
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f7687fe-42a7-438e-a49b-87e6dfd06b75.roa
File: 2f7687fe-42a7-438e-a49b-87e6dfd06b75.roa (raw, json)
Hash identifier: dHgWsbmBUORr0+22GnheXG9YxOAguuNXicm1gvklg2o=
Subject key identifier: 3B:42:C0:34:41:F1:69:82:31:17:2A:6E:5E:99:A6:52:C8:8D:63:D3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 270A78AA500B731C24614EACF10ACDFEE0FB1904
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f7687fe-42a7-438e-a49b-87e6dfd06b75.roa
Signing time: Thu 12 Feb 2026 00:21:53 +0000
ROA not before: Thu 12 Feb 2026 00:21:53 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:27b0::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:0a:78:aa:50:0b:73:1c:24:61:4e:ac:f1:0a:cd:fe:e0:fb:19:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 00:21:53 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=4b909ccfbf7071eb783fc8933a59a474bc32cfa5f43f20170dfd6057e060609a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:aa:d5:e0:b2:16:1b:29:e7:13:83:7e:57:
d2:a6:49:83:88:e5:d5:ba:7e:d5:c5:b7:81:a6:a4:
e3:21:c6:26:b5:3c:0c:ff:91:49:9a:29:b7:37:8c:
32:4e:f1:da:55:c9:8f:dd:41:64:e8:ad:a7:ce:0c:
40:4c:b0:4f:74:f9:4d:f0:d0:2e:c8:18:9d:0e:ab:
cc:78:df:86:29:f9:bc:a8:f1:62:d1:e5:21:a2:45:
06:f2:56:7d:8a:51:01:9b:45:4c:cd:42:27:24:67:
97:a2:ed:17:0e:2e:a2:75:07:e0:51:b8:e7:b9:a7:
cf:fd:d7:a6:2f:28:b6:fa:f0:12:63:d6:1c:cb:e3:
a1:d6:5e:c9:ec:66:62:c5:99:93:82:e8:55:93:3e:
8b:4a:fe:26:d0:07:17:22:b1:3a:de:1f:1e:01:76:
6b:42:db:8c:d3:bc:82:ce:04:93:8a:45:05:f1:e0:
3d:11:5a:95:84:f5:3a:65:5b:f5:86:74:7b:31:82:
0d:0e:7a:da:8a:7d:e7:9f:f0:6a:b7:06:10:f3:ff:
14:7e:68:db:b9:c1:07:e3:b6:58:16:f5:67:41:12:
63:33:30:4c:ea:06:4a:0c:93:ce:68:1c:78:54:fa:
77:67:0d:6f:51:c0:60:11:af:f5:6b:20:4c:a4:2a:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:42:C0:34:41:F1:69:82:31:17:2A:6E:5E:99:A6:52:C8:8D:63:D3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f7687fe-42a7-438e-a49b-87e6dfd06b75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:27b0::/45
Signature Algorithm: sha256WithRSAEncryption
09:76:47:43:df:72:34:b9:66:22:eb:47:ca:6f:44:43:5b:db:
f1:ab:32:59:d4:01:3f:6c:1c:5a:06:9a:d3:33:c6:5a:87:cf:
dc:96:39:f8:e9:5c:81:14:80:af:f7:c3:c6:0c:1d:23:8c:3b:
cc:5e:a8:57:2a:09:76:a9:ab:b3:cb:57:ee:c2:16:dd:9a:8a:
0e:de:9f:80:75:0f:c8:e8:5a:01:1f:6e:c8:6f:38:78:7f:ea:
4b:95:09:d0:e2:88:9b:3f:38:11:17:ae:8b:81:b2:84:94:1e:
d4:11:64:37:66:c2:df:a6:03:5e:e2:1b:a1:be:1a:41:c4:56:
c7:d5:8b:fc:bc:16:7a:59:a2:67:78:e4:67:59:f1:a1:2d:ee:
41:e6:3e:b4:3c:fe:15:56:ed:6f:59:30:dd:49:dc:64:cb:b2:
a0:90:86:c7:e3:95:11:f0:3b:83:85:c3:7c:8e:13:4d:fa:96:
dd:dc:5c:7c:9a:d8:e0:13:e4:2b:83:46:95:be:e1:c8:cc:8d:
32:4b:9a:e5:1c:c2:10:0f:3f:37:b9:53:94:c7:27:14:c4:e9:
f2:ed:6f:73:bf:37:c7:da:ca:d7:a4:d4:d2:8a:3e:be:85:e2:
1f:f3:af:bc:51:a9:87:0b:9e:83:ff:b7:d6:a7:91:ca:23:61:
d1:63:d4:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:01:47 2026 by rpki-client