
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/458d6d60-c9c7-4c9e-8913-6c551ffce911.roa
File: 458d6d60-c9c7-4c9e-8913-6c551ffce911.roa (raw, json)
Hash identifier: ujK54xgyNbtzaRWlYgNil8dvDfsPnW0m4KBmI2PTelE=
Subject key identifier: A1:EC:D6:5D:EC:C9:98:02:78:89:CB:8C:44:5A:64:54:5E:46:17:B9
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2EA9D5489489E14D7066DF8A938F31152BBB0176
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/458d6d60-c9c7-4c9e-8913-6c551ffce911.roa
Signing time: Fri 13 Feb 2026 02:12:01 +0000
ROA not before: Fri 13 Feb 2026 02:12:01 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b60::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a9:d5:48:94:89:e1:4d:70:66:df:8a:93:8f:31:15:2b:bb:01:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 02:12:01 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=0a63b97854f977aa437f0207e6f051beb7c65c16fec6cb4d53e9673c18205d3a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:c2:f0:a0:66:fc:5b:3f:78:84:72:29:69:
92:9e:1d:9a:50:c0:f0:30:dc:c0:cc:a9:2e:79:db:
f1:6a:fe:de:30:3c:c1:3a:5e:d9:51:81:75:c2:79:
6a:d5:54:69:d6:b2:99:22:a0:6b:5c:6e:b0:b0:e6:
28:dd:f0:4b:63:78:e8:8b:66:ce:0e:82:bb:56:19:
00:1e:8b:79:d5:64:62:6f:73:c3:f2:2d:b1:7e:69:
9c:1f:0c:16:bf:2e:17:5c:bb:53:7f:27:7f:39:19:
3b:bf:8d:b7:af:ed:55:c2:31:12:66:86:90:a1:c5:
2d:15:b6:a0:3e:36:02:07:a8:e2:bc:da:7f:55:1e:
79:9d:25:d5:f3:45:bf:64:d6:08:7d:e0:43:dd:31:
d6:1c:4b:5a:fa:ce:7d:e5:e1:b9:6b:ae:67:07:37:
ab:a4:e2:c1:1e:e6:be:f2:59:fc:5f:c3:4a:bf:71:
d2:3f:27:cd:71:85:da:0b:cd:b0:6d:ea:53:c4:61:
25:d0:13:47:ea:ad:23:88:a2:c0:43:4b:06:e6:fa:
bb:66:b0:2b:b3:12:2b:96:b5:55:16:01:c6:1f:4f:
89:ac:21:0d:ae:43:1a:7b:3f:1c:ca:b7:1f:21:5f:
88:66:d1:48:e1:3c:30:8a:9d:40:11:fb:c3:82:d0:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:D6:5D:EC:C9:98:02:78:89:CB:8C:44:5A:64:54:5E:46:17:B9
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/458d6d60-c9c7-4c9e-8913-6c551ffce911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b60::/43
Signature Algorithm: sha256WithRSAEncryption
b8:91:03:20:a2:29:6f:db:23:68:dc:1f:80:49:86:b6:63:2f:
25:72:7e:5b:7a:05:b8:dd:2f:38:fe:61:2d:3d:85:b6:33:b4:
85:75:91:a8:14:f9:20:68:93:43:fc:8b:35:2c:d9:8f:d3:cc:
5c:f4:62:fb:b6:08:bd:53:e9:b4:87:3f:a4:e5:20:cb:2e:5b:
cf:76:ce:8b:3b:61:81:ef:70:84:4f:d1:26:9d:60:70:91:16:
38:80:7a:82:e7:c6:4f:df:13:3a:36:eb:24:62:04:07:e0:4e:
f8:79:7b:47:22:eb:dd:65:a5:58:6e:36:58:2e:26:83:23:29:
45:14:cf:94:32:8b:03:ac:67:6f:96:d8:34:0f:fd:1a:d3:68:
3a:cc:d5:d4:d3:4b:a6:51:7f:b6:15:d4:be:50:08:7e:01:43:
9a:f9:2b:5c:f5:44:7f:07:7f:25:e1:8e:63:45:bc:35:6f:b0:
f0:9f:42:1a:80:d2:b5:4b:ea:59:55:f9:a2:58:81:bd:33:69:
31:f7:35:db:0b:a6:58:b5:9d:61:5e:cf:45:aa:f4:bc:de:f9:
fa:1f:ee:4c:80:12:11:22:a5:2a:60:6f:2c:55:62:35:b2:da:
dc:f8:ec:ea:6d:3d:d0:bf:7e:23:80:d5:a5:2c:ef:dc:91:91:
2f:41:87:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:27 2026 by rpki-client