
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4798d749-de51-47c6-8995-f10b14ae76f0.roa
File: 4798d749-de51-47c6-8995-f10b14ae76f0.roa (raw, json)
Hash identifier: M67bKiqur3TzNTBS0J64RKOUvblDnwKitu0ztnCCwoE=
Subject key identifier: 45:4D:F2:99:C1:40:11:FC:45:75:C7:E4:7D:02:E9:AA:D2:42:57:79
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2E670696927586A77222BA819A6309B6BA52EDA7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4798d749-de51-47c6-8995-f10b14ae76f0.roa
Signing time: Fri 13 Feb 2026 13:10:44 +0000
ROA not before: Fri 13 Feb 2026 13:10:44 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3af0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:67:06:96:92:75:86:a7:72:22:ba:81:9a:63:09:b6:ba:52:ed:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 13:10:44 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=49aebc0ece3c7946b790efe7b4be4832ff4bb97135000ef190efb574c1a432ad, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6c:b3:0f:48:a8:a5:50:c9:3a:df:62:e3:d1:
9b:35:28:9a:21:6e:a0:83:c8:39:46:0d:de:cb:25:
07:eb:09:df:24:28:94:1e:d3:c5:ef:cd:3e:9b:11:
10:22:c8:61:6d:ef:26:35:81:50:ea:f5:ba:e7:e2:
3f:6c:70:21:d3:90:b4:45:1a:89:bf:26:11:94:cf:
be:98:8b:e4:bf:fe:85:e2:3a:0f:70:ed:e4:9b:4f:
f4:2e:6c:ed:0c:ad:61:d7:6b:ab:68:df:67:a8:eb:
0d:6a:b1:e1:d8:e0:eb:93:d6:c4:28:88:30:4b:3a:
dc:c2:17:a2:a9:04:fa:fc:ae:ee:57:f8:4f:3f:b7:
12:7b:09:58:4e:72:9d:90:e4:24:74:de:72:e1:aa:
a3:be:e3:7a:ba:78:21:9a:0a:1e:f9:ad:cb:47:5c:
e4:ee:ee:34:5e:14:ae:09:82:f6:30:40:74:e6:04:
e0:d6:e5:f2:35:ba:0a:a8:44:8b:15:4d:9d:1f:52:
44:f5:d0:2e:da:d9:f3:43:6b:e3:41:b7:d5:89:db:
9f:0c:fd:aa:d5:c1:aa:a9:27:99:8f:11:43:b0:4b:
a7:6e:cb:62:0b:ba:6c:9d:0a:43:b3:c2:ed:ed:a3:
d0:56:2e:13:f2:01:39:84:39:9c:a4:6c:f3:40:7a:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:F2:99:C1:40:11:FC:45:75:C7:E4:7D:02:E9:AA:D2:42:57:79
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4798d749-de51-47c6-8995-f10b14ae76f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3af0::/44
Signature Algorithm: sha256WithRSAEncryption
9c:0d:c5:48:f2:86:99:7d:58:63:f0:59:26:84:5f:31:c7:aa:
49:c5:b7:aa:97:48:2c:16:8f:a4:20:58:a8:e1:d1:7b:78:4c:
45:da:2d:16:15:c3:a6:5e:23:b3:b0:cb:ed:e6:c2:38:c7:43:
a9:6f:94:d9:ae:61:9d:d9:b5:df:33:72:34:57:fd:4b:4d:1d:
91:6f:db:29:f0:7b:b0:4f:bd:d6:67:e3:a0:f3:92:23:ea:33:
ec:fd:b4:fe:5e:8b:4c:74:0b:9f:b1:2f:58:55:c5:6d:21:2b:
ab:24:9e:13:92:bd:f8:bb:4f:8a:fd:0a:cc:c7:24:63:cf:bb:
5a:07:02:1e:19:3a:65:71:de:73:15:e5:1e:a9:14:5d:cc:4a:
0f:9f:24:67:e2:ba:36:ec:e2:52:72:f4:cb:92:14:1e:48:70:
84:61:cd:80:34:45:6d:27:bb:e4:34:9a:dc:0d:c8:5b:fd:e9:
be:69:07:69:f3:bb:b2:67:a6:36:5b:e8:27:64:16:51:67:77:
74:f7:df:c2:4f:6a:46:77:52:54:18:1c:6c:cd:84:c3:e9:e1:
4e:33:1c:22:5d:62:00:3d:28:54:11:b9:94:9f:3c:3a:6a:ca:
dd:5c:76:7e:2e:a1:53:71:ef:55:25:0a:86:2f:50:4e:77:a4:
ec:25:51:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:14 2026 by rpki-client