
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43941138-e647-4972-b072-4554ca138928.roa
File: 43941138-e647-4972-b072-4554ca138928.roa (raw, json)
Hash identifier: pR1e/yOw6qXRQh1P76cB9bSkQXqhiBGm9oOkiZcYT08=
Subject key identifier: 51:F5:12:CB:A8:54:52:54:29:60:16:21:52:89:16:48:5D:E0:D6:70
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7EAFB1A88E7105C5F68A736F2B9FFB0C55EE22E7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43941138-e647-4972-b072-4554ca138928.roa
Signing time: Fri 13 Feb 2026 13:41:40 +0000
ROA not before: Fri 13 Feb 2026 13:41:40 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:338a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:af:b1:a8:8e:71:05:c5:f6:8a:73:6f:2b:9f:fb:0c:55:ee:22:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 13:41:40 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=71e8c9f417277cacd9f61368ae6205457811e24ddd03e2ecf2d9f3e13cf3d0b7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:77:2c:e8:55:a1:5a:ea:07:0f:4f:34:bf:
55:61:ee:2a:4e:d2:0f:d8:7c:b5:a3:eb:8e:c9:bf:
09:d7:14:d0:e1:50:18:55:3e:26:9d:97:a3:4a:91:
56:6a:44:58:fa:94:2d:03:c4:7f:6d:32:f1:f3:73:
a2:a9:82:18:9f:f6:4b:e1:e2:05:e4:45:49:47:6e:
c2:59:b9:4e:58:cd:2c:a3:cc:b5:47:63:d9:52:ac:
52:5f:b5:53:67:f8:d9:6c:a3:a0:b4:33:6c:07:83:
8d:35:90:e4:52:30:62:f7:42:35:63:25:c3:d3:ac:
42:30:b2:82:7a:8d:45:14:bd:c5:60:da:a4:3f:57:
bf:23:94:e9:c1:0f:3d:04:d4:09:aa:fd:64:49:f2:
9e:97:12:ee:1d:a1:54:26:63:2d:4e:24:e4:d9:87:
a7:f6:d5:e9:f2:99:07:18:ff:7f:66:2a:c7:73:4c:
27:93:8b:b0:db:93:82:3b:0d:e3:a0:bf:d0:ed:83:
e5:34:2a:db:fc:0b:ea:ee:1b:2e:ec:b9:f8:43:7c:
15:5f:e5:d4:6e:42:92:bf:ef:d8:1d:dd:17:91:f1:
5d:16:62:ab:82:f1:be:55:0f:a4:63:6f:7b:a1:49:
1e:79:cf:3d:e0:a5:45:18:db:6f:87:a0:70:70:e0:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F5:12:CB:A8:54:52:54:29:60:16:21:52:89:16:48:5D:E0:D6:70
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43941138-e647-4972-b072-4554ca138928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:338a::/47
Signature Algorithm: sha256WithRSAEncryption
1d:84:c4:59:6d:85:fd:77:ac:59:ca:de:ff:b9:2f:a6:85:b2:
a6:30:e2:f4:30:16:63:1a:d3:a2:0f:c3:0f:e5:95:1c:5e:9d:
5c:69:ec:d2:d5:c6:d8:bd:00:d0:a3:8e:5e:64:5f:c6:bc:65:
ba:16:04:bb:ab:43:de:6c:b3:26:06:95:61:d5:15:f6:a5:35:
65:42:0d:b9:cc:88:27:9d:c2:38:39:9d:5e:d4:74:80:31:f9:
5d:85:1d:6e:60:ca:16:d6:f2:9e:c4:d3:06:a5:16:39:48:19:
3c:f4:68:af:48:c7:40:5c:47:f4:4f:bd:45:c0:44:5d:4c:6f:
98:de:51:5d:46:bc:bf:02:29:59:b6:9f:37:f9:fc:32:f3:ad:
76:ab:5b:6a:fb:c7:2b:b4:7f:02:6f:74:f7:5c:6c:57:fb:12:
da:57:fd:a3:1a:6a:95:dd:24:d9:c8:11:1c:c9:9b:a1:a0:5b:
1c:51:43:22:ce:68:77:b9:1b:01:ad:1b:a7:30:3e:10:5c:68:
72:5b:5e:fc:4d:c2:1b:66:e7:fd:0a:17:1e:85:45:36:23:6f:
ad:bf:df:bd:4a:5d:d7:65:a1:a4:24:14:aa:07:fb:40:d5:70:
44:77:9c:a6:92:16:25:11:2f:4e:11:5d:48:b9:fd:c8:11:63:
7d:7f:a3:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:13 2026 by rpki-client