
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ae2ba6e-c479-4a21-82fe-c57171be837d.roa
File: 3ae2ba6e-c479-4a21-82fe-c57171be837d.roa (raw, json)
Hash identifier: 3C9JuS+TMv/cDsWdHvFvzAxe4PAbOeJIRGuuJt3uTj4=
Subject key identifier: E1:A8:4F:22:0F:1C:EF:20:D7:64:FB:74:FD:09:CA:F3:3F:DC:22:70
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0E29360B0D7F9BAECEB66763C6393295EAB8205C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ae2ba6e-c479-4a21-82fe-c57171be837d.roa
Signing time: Fri 13 Feb 2026 03:50:45 +0000
ROA not before: Fri 13 Feb 2026 03:50:45 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:29:36:0b:0d:7f:9b:ae:ce:b6:67:63:c6:39:32:95:ea:b8:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 03:50:45 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=2ea5938b520acbd4457f113856cd7c9d1a322bb8c8c4a8f9d45b4beb88fd7f12, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:2f:dc:a6:e4:a7:72:b7:dd:e7:0b:42:dd:
c8:ac:fc:50:83:52:86:a2:ee:d0:7c:dc:16:93:69:
3a:9a:6b:ad:77:59:ca:4e:ec:60:38:e7:d4:59:e6:
6a:ee:09:2a:af:25:03:b3:9c:4b:24:23:41:bf:34:
9c:5a:29:4f:a7:30:b3:fe:c7:35:2d:92:e7:84:ac:
bd:5e:12:ce:79:02:71:7c:66:6f:4d:d1:01:73:99:
ee:5c:f2:73:58:c5:f8:38:11:39:74:70:96:bc:c7:
70:b0:87:aa:c7:ec:9e:74:e2:52:51:71:e3:7b:17:
ac:08:8b:59:3a:ac:7f:cb:92:9e:4c:75:86:18:b6:
65:1d:11:74:8a:51:e5:fc:eb:02:56:8b:06:dc:f9:
3a:2d:af:b8:25:78:14:66:0c:eb:4b:f6:84:33:63:
23:48:50:67:b5:b1:18:8c:c3:0a:0e:4d:2b:d4:f8:
a6:97:c8:8e:eb:e2:65:25:7b:40:43:4b:04:58:e8:
d2:1d:ef:83:f7:d7:15:47:55:83:3c:67:cd:34:6a:
c1:6c:5f:7d:7a:36:53:14:d9:a2:42:76:f3:40:22:
81:7c:3c:a6:46:40:24:16:b6:6a:99:f2:f2:d2:d2:
01:d5:e3:a3:0e:f3:7c:62:f8:67:b5:89:f2:41:a9:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A8:4F:22:0F:1C:EF:20:D7:64:FB:74:FD:09:CA:F3:3F:DC:22:70
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3ae2ba6e-c479-4a21-82fe-c57171be837d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c50::/44
Signature Algorithm: sha256WithRSAEncryption
3e:ed:80:25:f2:72:72:6c:0b:c5:27:cf:df:8a:98:1a:f0:4b:
f5:1c:86:ff:8d:a6:a0:85:bf:f0:25:86:e5:0b:27:b0:0f:de:
53:be:11:65:e9:8f:57:c3:a3:d5:3c:ff:71:93:95:6f:f8:67:
78:ee:9a:80:17:e1:7b:bd:f6:08:8a:eb:12:af:6c:48:ec:2f:
25:c8:e5:1e:71:12:35:33:b0:bf:14:d7:49:09:41:60:af:98:
f6:5c:d3:5b:43:b5:3a:cc:65:8f:bd:f3:89:69:c9:ca:ca:2d:
5b:95:46:73:e0:34:60:6f:5e:3d:5e:c4:ca:cb:9c:b4:a7:ea:
46:bb:1f:7c:1c:d5:f9:09:90:64:31:d6:be:7f:c4:6c:c0:dd:
46:a3:04:23:e0:61:91:2a:8c:38:44:78:2d:ff:c8:ea:64:4b:
97:3a:bb:48:99:0d:c5:f8:a5:44:96:7f:b3:64:da:5f:fe:ec:
65:70:28:82:ed:c7:d4:52:8b:67:10:af:d3:cc:0e:0f:a0:2a:
5f:bd:81:a8:f4:35:3e:73:08:92:a6:b6:03:01:60:69:34:41:
67:19:c2:b3:3a:7b:89:76:d9:52:de:d4:31:fe:8e:66:1e:17:
bc:78:f3:34:0d:79:96:bd:b1:2c:ad:eb:a0:e5:9f:38:74:ee:
49:69:c6:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:51 2026 by rpki-client