
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/337bb606-6212-4603-965e-77d9e3237f90.roa
File: 337bb606-6212-4603-965e-77d9e3237f90.roa (raw, json)
Hash identifier: 9KG+qd6x6E91r1tfQoDUaKn2FVDpeTREFUEOjrdq0PE=
Subject key identifier: B0:48:5E:2A:C0:09:E9:AA:8E:B9:38:35:37:51:59:ED:CD:74:0F:E5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1C2B92D88E858565262A234BE92273296CC9DC28
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/337bb606-6212-4603-965e-77d9e3237f90.roa
Signing time: Fri 13 Feb 2026 03:31:03 +0000
ROA not before: Fri 13 Feb 2026 03:31:03 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c5a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2b:92:d8:8e:85:85:65:26:2a:23:4b:e9:22:73:29:6c:c9:dc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 03:31:03 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=f6e65ac7540a7255130b07edf84d8bd2916e59fe2150c45e511f87b6e83d2940, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1f:c4:84:0b:2f:8f:93:46:0e:19:b2:78:ee:
ab:f1:14:09:98:10:bb:67:98:89:04:d1:74:48:f1:
fe:0f:4a:92:b5:f2:a6:b1:52:14:f6:7c:90:62:d9:
dc:e4:76:6c:fb:bc:09:b0:0e:9b:b8:5c:00:b5:a5:
f1:bd:b0:30:2e:64:30:97:e3:89:de:07:c5:86:6a:
ef:aa:7a:7d:52:a4:bb:43:eb:b7:97:58:7d:8e:ec:
d7:94:52:0d:02:90:f4:d2:a8:f1:4e:b7:6a:20:93:
21:1f:15:37:e6:f5:9f:b3:1a:13:5c:60:00:9d:d2:
b8:41:66:35:e1:f3:e1:53:65:24:96:28:7f:d3:30:
9d:dd:9b:7b:b9:09:01:00:e7:89:0c:7d:f8:45:0d:
17:08:f5:ab:b6:eb:fe:04:56:55:54:dc:13:b6:59:
7f:c1:db:ff:07:97:c7:75:19:d8:3a:86:d1:5b:3e:
68:f8:3f:1b:f7:b8:6b:f5:50:77:c5:04:2b:cc:26:
a3:a9:c1:1a:ec:b6:ee:07:c3:63:e6:58:bd:42:54:
fe:a2:88:89:a6:38:33:03:da:da:5c:db:78:c2:99:
11:6e:54:71:e4:5a:bc:fe:e2:a5:c7:91:ea:f3:fb:
bb:99:4e:f9:c4:88:5d:ff:d5:18:9f:bc:92:98:71:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:5E:2A:C0:09:E9:AA:8E:B9:38:35:37:51:59:ED:CD:74:0F:E5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/337bb606-6212-4603-965e-77d9e3237f90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c5a::/47
Signature Algorithm: sha256WithRSAEncryption
be:64:8f:f1:65:7a:c7:ca:f8:57:21:f7:bb:18:d0:8c:ce:7b:
83:7a:3d:82:9b:ad:d7:3b:11:17:fc:5d:79:d6:f0:66:c3:01:
b2:15:44:4e:45:88:87:66:ed:7f:00:32:9f:eb:7c:be:80:75:
39:b9:2b:d0:cb:23:fa:39:be:3c:d3:74:39:f2:59:1f:6a:1d:
04:fc:56:d7:d6:65:f2:85:e0:af:eb:09:ab:f1:48:31:15:3c:
9a:40:7d:2d:e0:14:83:3a:4f:00:be:55:3f:df:01:58:19:9e:
76:fa:cf:73:d2:8b:93:87:40:18:47:96:20:1e:5a:37:dd:9d:
13:68:7b:6a:e4:81:a0:3e:d8:f8:e3:fe:f0:b1:5e:e0:c6:6c:
53:67:d2:bf:19:0e:32:8e:50:1d:56:0b:f1:28:4e:6e:6d:ce:
47:c9:8f:0f:39:44:e5:95:b8:b0:d1:96:7f:9d:73:36:7f:f7:
3d:ef:cb:16:3c:54:8c:35:68:9f:5e:84:b5:37:42:59:3d:27:
a1:e9:ba:19:80:f1:4a:26:74:88:74:16:a3:7f:69:fe:62:54:
4b:80:c5:2d:a6:42:60:a3:a0:a1:58:69:9d:c6:f8:47:4c:f7:
e5:d3:29:d8:bb:ad:cf:94:b5:78:a0:64:77:84:fd:c9:20:a7:
c5:72:8f:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:54 2026 by rpki-client