
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f7530a4-02dd-42e0-817b-19dba92efbe8.roa
File: 3f7530a4-02dd-42e0-817b-19dba92efbe8.roa (raw, json)
Hash identifier: J08ubs0q/Y6x/qcvSH6NMNMBK/0Vn+Dd6PTNypPnEY0=
Subject key identifier: CD:54:3D:FA:0C:4B:F8:5B:93:B1:63:5C:F8:9E:1B:72:A2:17:A3:A8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1E74F95CB729B8CC88335F67F76F354268831DB9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f7530a4-02dd-42e0-817b-19dba92efbe8.roa
Signing time: Fri 13 Feb 2026 08:00:59 +0000
ROA not before: Fri 13 Feb 2026 08:00:59 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3fcc::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:74:f9:5c:b7:29:b8:cc:88:33:5f:67:f7:6f:35:42:68:83:1d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 08:00:59 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=4e5645783b1742efbd333158b5a53314dad2743358d97d38cf110b0544d26997, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:7c:7f:da:cd:0e:2f:4d:82:ae:d2:90:44:
c3:f7:85:e6:58:21:d6:02:02:0e:44:07:d7:37:0d:
fa:7b:21:b9:fc:4a:47:60:de:2c:50:1e:d0:24:e6:
20:6b:ad:96:83:4d:10:f0:32:fb:96:57:bd:da:90:
30:5f:ea:8f:e9:ff:a2:49:d1:3d:1f:52:a2:0a:85:
28:d0:00:bd:c3:1d:a9:26:97:29:11:a7:96:69:25:
d9:dc:e5:da:ce:a0:db:ce:8e:e9:23:53:fe:0e:4c:
c4:e6:d3:63:54:4f:87:06:19:58:ba:52:6f:82:ec:
47:43:86:e5:26:2a:73:0e:59:af:8c:bd:a7:d5:ca:
98:8c:f1:4f:4b:7b:11:4b:11:3c:ab:5c:a0:e0:ba:
8e:f2:cb:c4:76:0d:7c:e1:d2:4a:f3:35:30:b4:70:
92:a9:72:7f:10:ee:e4:b7:a3:48:91:94:bd:57:13:
0f:16:18:2f:f1:7e:60:c4:6b:53:bd:37:b5:03:19:
9d:ad:f3:75:4e:71:0a:7d:2b:53:6c:86:9a:92:d9:
cf:db:95:b4:52:3f:78:37:74:de:4e:6e:db:f9:b6:
c8:c3:85:0e:67:11:49:67:a3:3c:b0:6f:37:a6:27:
f0:09:bf:ee:e8:b6:5f:0e:5f:ad:cb:b2:fe:f6:59:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:54:3D:FA:0C:4B:F8:5B:93:B1:63:5C:F8:9E:1B:72:A2:17:A3:A8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f7530a4-02dd-42e0-817b-19dba92efbe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3fcc::/47
Signature Algorithm: sha256WithRSAEncryption
b6:49:3c:05:e3:77:b8:cc:a4:ff:6d:b1:ef:04:75:c6:40:df:
d4:08:13:b5:eb:a7:d2:73:83:46:b3:9d:e8:96:20:d2:7d:3c:
21:f3:f3:8a:ef:82:8d:32:2a:de:27:69:a1:ee:a2:cf:7b:c3:
d6:c3:d7:0e:1c:a1:d9:fb:09:9d:d8:e6:c7:36:7e:84:33:2f:
fd:39:66:81:62:d3:79:d2:96:c8:01:ef:7a:87:6f:9f:ac:35:
a7:55:1f:5d:c5:90:48:63:0b:34:a0:1d:4f:cb:e2:02:48:a2:
8e:94:e3:80:83:c6:ae:32:4e:96:34:db:d6:ee:e2:8d:3c:13:
ae:0f:0e:86:51:26:d1:01:5a:1c:09:bc:b3:0a:e8:a4:f5:bb:
63:cf:3d:f4:06:1e:2a:2a:be:c7:0f:ad:c2:c6:14:d6:a8:09:
27:ad:bd:ef:43:ae:f2:94:f3:d7:84:30:b4:07:04:ea:b3:1b:
47:9c:6a:2a:37:b7:2e:07:d8:1f:f6:75:a9:ff:f6:b6:c6:3b:
91:9b:17:fa:25:2f:d4:6c:d7:01:17:50:2c:2a:af:08:c9:b5:
a0:69:fd:06:42:30:c5:60:e2:f2:39:40:80:f6:3f:aa:a1:7b:
18:93:ad:6d:42:ce:cf:61:fb:fb:e1:e3:b4:41:f7:b0:67:55:
b4:84:52:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:20 2026 by rpki-client