
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a9b9ded-b0e5-4d46-b097-5bb105dd12d7.roa
File: 3a9b9ded-b0e5-4d46-b097-5bb105dd12d7.roa (raw, json)
Hash identifier: g95Iz/+xGzSG9VhHa+IQCdYZPVV34xh1vS38TudAjSI=
Subject key identifier: 72:3A:8E:95:73:51:35:87:F9:12:63:1C:25:2B:1D:F9:9A:3C:FB:B1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 109638FFCC4EE67C5F4D13380AE9466B965EDB26
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a9b9ded-b0e5-4d46-b097-5bb105dd12d7.roa
Signing time: Thu 12 Feb 2026 02:52:01 +0000
ROA not before: Thu 12 Feb 2026 02:52:01 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:324e::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:96:38:ff:cc:4e:e6:7c:5f:4d:13:38:0a:e9:46:6b:96:5e:db:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 02:52:01 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=f488c64fdccf74c42f862af44fe9261691c63f8c9504ac0c3e3e612635f1f910, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:1c:64:80:c9:38:a5:cd:af:78:67:83:02:
1c:77:d4:d5:d4:b9:92:f7:61:6c:67:2d:93:af:17:
c3:be:02:59:fe:87:2d:cc:9e:b6:06:2c:51:a8:35:
9c:63:50:5d:77:ea:14:5d:08:5d:a8:a4:ab:ab:8b:
c8:39:af:be:6e:5f:41:6b:81:5c:53:bc:28:94:08:
df:3d:98:a6:39:29:cb:01:dd:8a:95:35:5a:f9:62:
e6:60:d1:aa:cf:98:8b:34:c2:ae:e8:ca:19:df:cc:
e9:54:0b:bb:15:20:fc:62:a9:b4:e7:55:83:aa:d6:
5a:ba:d8:2f:a7:f3:c4:f8:84:83:5d:00:cc:9f:a4:
af:57:28:d3:eb:93:94:e5:51:aa:a7:de:e5:be:09:
94:2f:06:26:0c:63:d8:67:80:9a:4b:67:49:5d:b6:
c1:c7:12:64:db:54:75:46:4b:23:d6:93:f9:b4:cc:
49:66:02:22:8c:f7:5d:09:49:fa:a4:a8:03:06:af:
53:96:87:eb:6b:62:2d:8e:34:70:49:b2:c9:75:5f:
fb:5f:a8:d0:f1:21:99:0e:c1:eb:62:76:87:43:6a:
c4:11:d7:57:85:96:b1:8a:2c:cb:46:32:4b:ae:90:
fb:04:3e:fa:be:62:7c:4f:e9:64:59:8f:06:88:14:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:8E:95:73:51:35:87:F9:12:63:1C:25:2B:1D:F9:9A:3C:FB:B1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a9b9ded-b0e5-4d46-b097-5bb105dd12d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:324e::/47
Signature Algorithm: sha256WithRSAEncryption
2a:e1:16:7a:6d:44:98:67:76:aa:13:b3:15:8d:74:b6:bf:5e:
ea:ab:b8:cf:b4:b0:f4:e2:bb:6a:f5:63:c7:3c:f4:6c:92:af:
30:37:65:f6:a8:c5:b5:fb:03:e9:b1:d9:c2:c2:8b:09:14:34:
af:09:47:93:0a:8a:1c:30:59:9d:e3:6b:09:23:6e:d2:2a:9c:
5d:c9:45:1e:92:49:97:d9:40:34:36:34:e2:f0:61:49:a7:20:
e1:e2:fb:65:55:30:64:f7:23:e4:4d:96:7b:63:00:8a:e8:0a:
fa:64:14:ee:09:d1:cb:59:0d:c6:dd:7b:bb:08:82:14:d2:f6:
1e:86:41:9f:6d:3e:7e:f7:76:9c:0b:c9:2e:0a:2c:aa:ce:16:
83:a9:26:57:6c:9e:e2:58:54:ce:85:0a:28:27:2b:00:58:f7:
e4:cd:55:21:eb:66:66:8b:fe:8b:d4:9b:f8:4a:d8:42:f0:93:
95:1d:a8:da:65:ce:96:58:0e:02:5f:1f:7d:aa:3c:f8:de:5d:
a8:77:fc:ce:42:10:fd:ec:01:dd:c9:db:7f:ce:1a:31:82:61:
7a:7d:b4:1a:69:07:c4:e0:6c:7a:fc:d7:08:fb:5e:4f:99:4c:
5f:4f:f0:c0:9e:fe:a1:0e:1b:68:a1:d9:fb:3d:78:77:7e:fc:
49:7c:cb:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:24:21 2026 by rpki-client