
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/39d9a58f-42f8-4f49-af82-f1e350384687.roa
File: 39d9a58f-42f8-4f49-af82-f1e350384687.roa (raw, json)
Hash identifier: 6GEYrsQCP0YUijwseODfMUicyxDvsnu0DDk7quIpntM=
Subject key identifier: 50:47:C8:89:31:75:53:22:51:71:6A:02:AF:7D:A4:C2:1B:F7:5C:6A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1778B35225FAC96A09874B36E7BC6AD241369999
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/39d9a58f-42f8-4f49-af82-f1e350384687.roa
Signing time: Thu 12 Feb 2026 00:21:19 +0000
ROA not before: Thu 12 Feb 2026 00:21:19 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ebc::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:78:b3:52:25:fa:c9:6a:09:87:4b:36:e7:bc:6a:d2:41:36:99:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 00:21:19 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=633c4dfbfd07eabffe394ed5e14361f3f0598512fe4247d9f6fb70d2ff1b79d1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:69:a3:30:98:ed:30:4d:2d:5e:c3:af:58:
11:71:84:0b:91:cc:54:47:f8:a8:b3:a7:b8:5c:53:
99:bc:45:09:e5:de:47:60:2f:98:20:a9:68:00:25:
f9:5a:5e:67:0d:d4:29:8c:39:b9:70:87:2e:0b:8b:
4f:7c:10:ca:2e:f2:1b:66:4e:bc:de:f1:33:69:dd:
4c:5c:4b:30:44:74:b8:5e:92:30:a6:81:b2:18:90:
96:63:42:fa:4f:18:e1:5b:a2:ab:67:09:84:4f:8a:
42:68:2b:dc:fe:9e:87:26:bb:eb:0f:66:6e:f1:22:
8d:9f:03:93:bb:61:d1:37:a2:8d:8d:9d:52:9d:c5:
a4:12:a5:fa:88:99:ea:f9:be:d7:57:5a:8d:fb:55:
9f:76:a6:c9:e1:f1:07:43:3e:e8:ff:a2:68:0e:9d:
bf:84:1a:44:2c:2e:a6:af:05:c2:d2:fd:be:15:8a:
0d:c4:67:ff:c1:07:16:b2:eb:9e:32:60:ea:bf:91:
dd:7c:eb:b9:de:a6:b6:9f:d2:7f:60:14:8e:b1:20:
ec:20:7e:d3:95:e6:c2:7e:32:c4:e9:2b:bf:f8:28:
cb:ad:32:a1:30:3a:ac:f9:58:15:f8:31:46:fb:7b:
2f:be:e4:fd:f5:b1:22:a7:f4:97:b9:4c:13:7a:43:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:47:C8:89:31:75:53:22:51:71:6A:02:AF:7D:A4:C2:1B:F7:5C:6A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/39d9a58f-42f8-4f49-af82-f1e350384687.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ebc::/47
Signature Algorithm: sha256WithRSAEncryption
a8:66:54:8a:bd:6a:85:90:dd:05:01:a8:2f:58:63:60:7b:61:
c6:02:35:9f:dd:a8:0a:f6:4f:bb:f6:66:a8:46:eb:d3:67:1e:
07:e0:ce:e7:67:af:42:e5:a1:a6:32:9e:87:84:fd:ca:df:6f:
84:a9:18:c8:c1:cf:66:63:bb:ce:5c:ad:9d:78:ed:d2:41:72:
80:2a:bd:da:af:ac:61:bb:f2:bd:39:10:94:5b:01:c2:64:fa:
ca:3d:f7:55:65:4f:c0:bd:90:97:35:43:38:5d:29:33:61:44:
67:75:c2:ee:57:6d:55:5f:7a:d3:af:fe:c7:e0:41:0a:4c:13:
1d:47:44:57:ea:42:d8:05:b5:7e:e7:98:1d:02:b6:77:ba:1b:
13:5f:ce:65:b0:6d:f9:c1:1b:ca:5b:4f:1b:67:fc:59:38:b8:
a8:db:68:2a:8f:af:a7:df:2e:92:00:c3:b4:fc:31:ff:c7:ac:
be:ec:c6:fa:b9:ab:40:49:b8:db:1e:e2:6b:a4:bf:7f:85:4a:
fe:c5:ef:8a:1b:13:a6:c7:95:8a:79:7a:c7:69:95:4e:51:b3:
81:59:55:32:15:97:c5:cf:c1:04:8d:cc:0c:93:0a:b8:2a:8f:
db:b7:8e:90:18:4c:5a:a7:fe:ff:97:26:0f:2b:f6:de:22:96:
6c:20:16:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:34 2026 by rpki-client