
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32bab56c-0e64-4785-89fe-af1c5121bc79.roa
File: 32bab56c-0e64-4785-89fe-af1c5121bc79.roa (raw, json)
Hash identifier: z+I+zbFxHiZScpa4MZ8hV71zH4VuxMfEpkDG+lSFCo4=
Subject key identifier: 17:7D:7D:D8:D5:2C:6A:76:A3:EB:C9:0C:D4:71:68:8C:1D:94:A6:BD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 38D3066524027367FBC033021853B4DE107F5F6A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32bab56c-0e64-4785-89fe-af1c5121bc79.roa
Signing time: Fri 13 Feb 2026 06:30:47 +0000
ROA not before: Fri 13 Feb 2026 06:30:47 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3932::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d3:06:65:24:02:73:67:fb:c0:33:02:18:53:b4:de:10:7f:5f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 06:30:47 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=1ee460f8e4130d8f6ddcb81cc75afec82adbcfcc09ccceed64e1c2022e4cee0a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:16:b8:92:73:52:07:2f:85:f9:92:36:47:
88:03:76:9d:f7:85:a1:99:36:97:cc:93:d9:5f:d9:
8f:f9:55:4c:44:56:e1:5e:9a:c9:13:48:6b:86:68:
b3:30:70:b1:64:f1:af:a9:68:8e:11:29:fa:3f:bf:
91:8c:3f:b1:4f:26:5e:a3:70:a0:99:63:f8:30:83:
51:31:d3:e6:4d:da:8c:0b:00:1a:7d:01:45:31:07:
ce:79:eb:1e:c7:e9:5a:37:ea:2e:78:ef:cb:38:ba:
39:aa:ca:77:48:60:38:3a:41:50:10:12:da:36:aa:
e1:4f:fd:6c:b0:b0:18:ac:79:d5:a5:84:58:4a:26:
d7:ec:6b:d5:c9:57:52:2e:ce:26:83:18:58:6a:0d:
f9:a8:2d:8f:86:bd:a7:a0:96:90:ff:c3:19:2f:79:
87:ba:30:0a:72:45:a0:39:20:5b:39:92:22:01:89:
5a:70:9b:ad:cd:19:52:26:4d:48:b1:f1:2e:3b:d3:
e2:4a:30:40:d3:f8:06:f0:d9:df:7c:f1:aa:21:16:
93:81:81:05:cb:35:5f:52:c5:14:63:c8:23:c5:35:
9e:2b:b8:0c:61:05:52:01:41:6e:9e:31:62:ff:99:
a4:cc:2a:9e:6b:5a:f6:5f:c4:c4:08:a5:88:fc:b6:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7D:7D:D8:D5:2C:6A:76:A3:EB:C9:0C:D4:71:68:8C:1D:94:A6:BD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32bab56c-0e64-4785-89fe-af1c5121bc79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3932::/47
Signature Algorithm: sha256WithRSAEncryption
90:8b:82:b1:25:96:7a:47:43:20:d7:20:aa:ff:c8:0d:4b:bb:
ac:e8:80:1b:b8:1b:4b:13:16:44:a4:6e:1b:f8:35:a2:b3:c4:
c2:eb:b5:0a:27:80:29:b0:d0:f0:72:58:f8:cf:7a:94:43:1f:
1c:64:ae:4e:93:aa:5e:96:fb:39:64:b8:8a:91:b9:e8:2f:85:
b5:80:d8:bf:3b:2f:e9:10:7a:21:b2:18:fc:f9:8a:64:7a:79:
24:1b:f5:d9:2b:4b:a5:c6:aa:37:70:be:fc:27:03:ed:88:1f:
eb:ba:86:e9:5f:c2:87:cd:56:32:bd:fa:2d:cb:6a:e1:f4:21:
ee:9f:07:aa:8e:70:4b:8f:b9:b3:11:b9:b6:7a:22:32:c9:77:
5d:f5:8d:b7:fe:74:71:95:ed:0f:dc:de:9a:15:4a:de:ea:d8:
5d:b8:03:11:8a:5d:f3:78:4f:28:6c:d3:eb:65:f9:ab:12:54:
a6:d9:08:74:01:a2:18:52:c9:74:f2:b5:d6:c1:b5:05:d5:ee:
96:c1:fa:6d:7d:4c:dc:9e:6e:4a:fa:b4:b2:59:00:d1:92:55:
57:74:18:55:09:6a:31:a5:2a:bd:f6:d7:65:92:82:55:fb:64:
f0:f8:25:8b:8f:a3:72:88:5f:fe:22:e0:0a:4e:cf:a8:16:64:
f8:6d:f6:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:49 2026 by rpki-client