
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/398ef5f0-39c1-4b58-b83b-336840c30b4e.roa
File: 398ef5f0-39c1-4b58-b83b-336840c30b4e.roa (raw, json)
Hash identifier: yXRH0qKmf4b1Es7KqYQkaAh0gnq8tuoykwaP00X9RV0=
Subject key identifier: 49:06:50:9B:DC:05:E6:20:3A:73:D8:53:0C:53:D8:E7:7A:F4:CD:44
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4F4CC3671A994E0D4D753829012DCDFDAEBA21EB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/398ef5f0-39c1-4b58-b83b-336840c30b4e.roa
Signing time: Fri 03 Apr 2026 02:20:44 +0000
ROA not before: Fri 03 Apr 2026 02:20:44 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:11bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:4c:c3:67:1a:99:4e:0d:4d:75:38:29:01:2d:cd:fd:ae:ba:21:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 3 02:20:44 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=860b490a12501e90e1817d5176d6bfb72043c27283f42686f4165d4a7f239cdf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:87:18:af:7e:e4:b2:57:f0:9f:c3:0a:4a:
6f:73:49:f6:d1:bb:1b:22:e7:a7:de:1a:6b:3b:4b:
e2:70:90:08:83:60:5d:0a:2c:23:fd:e1:43:23:25:
04:dd:b1:2f:7d:3a:3b:b2:20:82:5e:4b:76:b4:fc:
57:cc:d9:b4:1f:f4:4a:88:f2:6f:11:0e:04:8f:47:
43:17:89:ef:3e:ba:28:cd:d2:c6:7e:a2:cc:f6:87:
a3:0b:a5:fc:68:f3:67:5f:18:b1:fa:18:af:09:9c:
a4:c5:38:1e:7e:f8:ff:8b:09:ef:56:f8:31:18:1f:
8f:12:c9:7a:16:dd:bb:81:bc:3d:14:0a:ee:f4:0a:
22:fd:c5:9a:5e:bc:10:bd:ae:9d:6e:60:54:5e:44:
79:d4:e2:9b:99:5d:0d:2d:d9:ec:18:70:3f:00:b1:
c2:db:be:f5:75:39:ef:34:b8:0c:d3:49:16:5a:9b:
28:27:fa:d5:c4:6b:ca:e1:9e:ba:54:cf:1c:cb:25:
46:33:f0:87:b3:13:a4:18:dd:7b:26:21:97:1e:7a:
4e:16:db:db:87:e6:8e:72:f9:c1:85:7f:0a:a1:a4:
af:41:a1:cf:e9:be:cc:b4:9d:23:cb:0f:ec:91:34:
78:bf:e7:88:d3:df:17:83:9c:d1:5d:d4:70:32:7a:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:06:50:9B:DC:05:E6:20:3A:73:D8:53:0C:53:D8:E7:7A:F4:CD:44
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/398ef5f0-39c1-4b58-b83b-336840c30b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:11bc::/48
Signature Algorithm: sha256WithRSAEncryption
1f:3a:09:ea:39:1e:01:98:4d:e4:fe:45:b0:f8:26:ca:44:39:
63:84:b7:0b:d1:97:e5:68:60:0b:72:62:54:2c:95:82:6a:fa:
d4:e6:25:66:2f:19:20:5a:52:57:3d:75:00:e7:0b:6f:0a:89:
cf:61:b6:73:9c:52:8e:3d:d6:83:33:9f:bb:e3:f2:3c:ee:d9:
4c:c9:b2:77:44:3c:5d:8a:8b:62:c2:7a:af:fa:51:ac:7e:af:
64:bd:2f:ed:87:57:9d:c7:97:dc:36:bb:b9:fa:bf:b5:7f:a3:
e8:2d:9b:37:1a:08:dd:ba:55:d8:c7:37:b1:64:16:18:0f:6b:
68:20:b3:2e:da:22:4f:28:30:5d:80:9c:51:42:c7:e7:36:d8:
af:a0:96:18:cb:98:57:45:53:b7:52:b7:b6:55:35:30:d8:1e:
ba:1c:dd:78:e2:e9:cb:68:93:6e:e6:e9:57:54:c8:6d:c7:b6:
64:20:69:56:2a:b6:bd:16:13:a7:ee:83:e6:c9:6d:92:2d:b9:
58:c3:7e:fb:33:7b:1a:89:4d:92:f0:7b:c3:94:0f:a5:90:e4:
ee:39:e0:ad:c6:81:72:ea:8b:9b:80:bf:49:48:44:cc:8a:0e:
c5:0b:c4:55:f1:1a:62:ca:ed:09:32:64:b1:d0:63:92:1e:f7:
7d:8f:3d:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:46:25 2026 by rpki-client