
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a905890-88a7-4708-b55d-388e7b456bc0.roa
File: 3a905890-88a7-4708-b55d-388e7b456bc0.roa (raw, json)
Hash identifier: rl9IhPxYJUdsdWFQzyi2ekAslpz4559yHFXaPTm5PPw=
Subject key identifier: BC:6F:4B:A1:F2:18:F5:CD:43:19:38:60:90:26:E1:19:1B:67:29:D5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 599B7EF7DCCA3854FCF62BA202BF760DA80F020F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a905890-88a7-4708-b55d-388e7b456bc0.roa
Signing time: Thu 12 Feb 2026 00:20:47 +0000
ROA not before: Thu 12 Feb 2026 00:20:47 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b14::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9b:7e:f7:dc:ca:38:54:fc:f6:2b:a2:02:bf:76:0d:a8:0f:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 00:20:47 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=24d72ca14a697a89bdfb75e8f57884a000aaeebbfd82633d6f48ca6074a6e630, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:30:7a:2d:e9:13:5a:d9:6c:e5:9e:17:52:
dd:4e:d4:95:1b:34:cb:fd:71:e3:9a:4c:47:b2:31:
4b:24:00:80:2f:01:9c:4d:95:93:9b:53:e4:84:09:
22:7a:72:17:4f:19:ce:d4:77:83:e1:4d:00:fe:30:
2b:1f:f6:42:30:44:fe:f3:68:ef:97:41:21:31:52:
17:04:ee:10:94:a0:e7:dc:29:7e:36:0f:5f:18:ae:
7c:8e:11:f1:52:da:f5:e5:08:e3:bb:93:53:2a:2b:
08:e7:c9:02:d6:00:d3:34:ec:05:f0:b8:55:16:1d:
48:9c:ac:08:3f:e2:f2:fc:3a:f0:47:1a:8a:56:f9:
66:2e:8c:77:57:18:e0:a8:57:4f:ff:17:57:5e:ce:
ab:37:62:ce:e0:8d:a8:b4:de:7a:37:7e:5b:4a:d1:
3c:80:ed:e9:91:ac:41:1a:cd:6d:46:42:49:ad:64:
48:b2:4c:e5:7c:9b:38:b5:bc:a7:f0:23:fe:d7:2b:
00:2f:c3:14:4b:f4:8f:93:e1:03:4e:2a:08:fd:89:
48:10:49:44:9e:82:97:05:b2:31:da:6a:a2:1a:a1:
52:d3:d8:44:a3:52:f6:65:61:0d:26:7a:fc:c1:4f:
a4:d6:e3:94:d9:6a:93:30:9d:37:f2:7b:05:db:13:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:4B:A1:F2:18:F5:CD:43:19:38:60:90:26:E1:19:1B:67:29:D5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a905890-88a7-4708-b55d-388e7b456bc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b14::/47
Signature Algorithm: sha256WithRSAEncryption
75:28:2d:65:16:a4:67:ae:9d:59:39:d6:91:fc:bd:64:e7:b2:
b2:cf:49:42:8a:df:aa:95:50:18:61:f4:09:0d:32:44:2d:55:
4f:2d:bc:ea:ab:43:1d:11:a1:ee:a7:1f:a8:47:17:e9:2a:01:
7d:30:1b:ab:62:94:47:68:ab:a3:f1:d7:e2:c0:67:21:b1:3e:
b3:6b:52:c1:f7:5a:36:de:6a:e1:3e:e8:19:a9:cf:ec:94:7d:
7f:3f:8a:aa:e3:fd:f4:1a:79:a1:9a:78:5c:cb:ba:5a:42:68:
99:76:df:02:1e:77:e3:f5:ee:f1:ab:2c:55:f8:93:cc:8f:49:
7c:a6:7e:7b:09:81:0b:af:b8:a6:ee:c4:77:63:2c:cd:d3:8b:
e5:7a:a1:6e:79:7d:63:eb:78:c7:55:ef:ff:ff:fe:02:d4:5a:
52:19:b8:80:3e:33:68:91:d1:92:79:fa:0a:86:73:6f:ae:13:
cf:fa:c6:7f:3d:39:49:cc:af:a6:3f:03:98:f8:1f:da:07:18:
8b:f8:44:3f:19:d7:8c:23:f7:53:89:6f:2c:37:19:fc:6e:79:
95:7d:90:77:44:dc:35:9a:3f:23:49:7e:82:11:01:c8:a3:97:
58:b4:d5:6a:7b:35:50:45:36:2a:ec:34:e5:25:a1:3f:37:bc:
79:38:b0:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:01 2026 by rpki-client