
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/498905a7-2429-4130-b350-f62e5aef5556.roa
File: 498905a7-2429-4130-b350-f62e5aef5556.roa (raw, json)
Hash identifier: 2b8VBiiBY2/L44wBG+kGQXeDxiEca0mj5KJNCBJs9G0=
Subject key identifier: E4:A9:87:5B:C6:9A:8C:45:B2:2F:FB:C1:33:7A:5B:65:78:B5:67:27
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 585AC0F09AD11F0D80E39ACDD9127EE8488AB2FD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/498905a7-2429-4130-b350-f62e5aef5556.roa
Signing time: Thu 12 Feb 2026 01:11:56 +0000
ROA not before: Thu 12 Feb 2026 01:11:56 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2724::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:5a:c0:f0:9a:d1:1f:0d:80:e3:9a:cd:d9:12:7e:e8:48:8a:b2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 01:11:56 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=d55ee3095e23a2b6e8d902fa8f920ab1713c1717e2aa07ce93681297fea824b3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:30:f2:8d:d2:4b:51:ba:84:7f:56:f1:3f:
df:07:73:00:fd:d3:38:df:e2:20:d5:43:61:8c:97:
8c:1d:97:3c:c4:44:6f:03:e9:d4:a4:75:41:01:3c:
02:f1:a7:3a:54:40:60:fa:04:36:70:aa:98:51:0b:
f8:a9:ea:ea:b5:22:bd:8c:03:bb:bd:78:a1:f7:37:
bd:c0:b1:df:7f:90:00:c7:db:a6:c1:b4:46:2a:31:
62:e3:f2:87:8d:fa:d5:14:d7:bb:9f:33:d2:32:fa:
63:6c:dc:18:52:87:e3:91:ce:a2:a1:f0:2b:aa:77:
51:29:3f:f8:ec:e8:3d:df:d5:ca:6f:0b:46:1d:05:
a6:a4:1a:42:03:c9:fb:31:47:09:c6:b2:3c:7e:e5:
98:50:d7:a4:12:a1:39:9f:c6:bd:31:fc:ac:7f:9a:
33:a0:eb:7a:6a:47:e2:98:92:6f:c8:02:b8:d7:90:
7d:05:e8:20:0e:35:80:95:98:42:48:e7:5c:ed:85:
6d:3a:30:1b:a2:94:e9:7d:ce:a1:dc:9b:eb:a7:4d:
67:a1:a1:fa:8c:bb:57:7e:ad:0b:7c:1e:81:fd:7b:
7c:5f:04:f6:d3:26:1e:1c:24:cb:a6:08:71:41:c7:
d2:1d:75:2c:b0:33:9d:02:79:97:33:8c:1c:cd:5b:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A9:87:5B:C6:9A:8C:45:B2:2F:FB:C1:33:7A:5B:65:78:B5:67:27
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/498905a7-2429-4130-b350-f62e5aef5556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2724::/47
Signature Algorithm: sha256WithRSAEncryption
85:70:b5:36:5b:9c:76:ab:8c:6b:80:7f:26:2c:b4:3c:74:42:
f9:89:2d:c2:c4:37:e4:26:83:4a:9e:c7:7b:3f:9b:b0:ff:9d:
47:22:f9:c0:1d:d5:9c:98:1b:62:f1:a0:68:ae:53:da:10:53:
68:74:3f:a6:d6:a7:bb:20:67:67:5f:37:a7:b2:96:8a:11:7b:
d0:2e:0e:16:e6:34:9e:08:f8:b6:c9:2b:56:13:35:f7:d4:02:
44:0e:35:63:cd:1f:e0:39:cb:fd:b7:00:89:be:e2:8c:76:e6:
16:4d:e2:37:65:d7:68:d3:d8:05:80:43:a4:8a:59:e0:bf:d5:
ad:6b:7e:c9:18:5f:6b:ed:b8:77:f9:a6:bf:a6:af:aa:98:91:
48:59:6c:54:ac:7f:f0:1e:ef:9e:ff:42:53:17:ff:3f:49:50:
1e:ed:53:09:11:3b:68:bd:ef:2d:c4:22:4e:fd:da:78:de:cd:
37:9e:32:18:ca:bf:a0:4d:00:89:0b:f5:57:a8:12:00:e7:55:
8a:41:69:ec:db:40:62:56:dd:aa:89:30:a6:49:28:30:9f:a7:
44:61:fa:a6:ef:88:a0:bb:14:94:9a:d5:fe:ce:58:7f:ab:6f:
8e:95:ee:a1:7f:38:86:ac:f4:09:87:95:d3:d0:7c:3d:42:c6:
5c:05:71:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:06 2026 by rpki-client