
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a7fa532-a6f2-4c0b-9be6-5854588a7d24.roa
File: 4a7fa532-a6f2-4c0b-9be6-5854588a7d24.roa (raw, json)
Hash identifier: a8qasNyU4PjTcbd71+Z4UGbOOxcFpztA1wwC0/2MtR4=
Subject key identifier: C3:06:6A:3A:8F:41:F6:2F:E3:C3:F8:78:0B:A4:CF:8C:B3:74:A8:83
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 10ED2B215FE8E23395401491F61B98145052505C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a7fa532-a6f2-4c0b-9be6-5854588a7d24.roa
Signing time: Fri 13 Feb 2026 06:31:51 +0000
ROA not before: Fri 13 Feb 2026 06:31:51 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2880::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ed:2b:21:5f:e8:e2:33:95:40:14:91:f6:1b:98:14:50:52:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 06:31:51 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=8ccd94fd336e618d79e7ad97fa886a4836cb356077d3c4b97f7a229bee4eccde, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:a9:a3:84:4a:bf:bb:00:f9:48:9a:c8:9c:
53:91:30:1b:e2:eb:7f:2b:e7:18:ac:65:be:f2:f0:
b4:b9:e7:a0:b1:ce:d4:66:ff:7d:d1:52:8b:81:6e:
56:58:41:5c:49:15:f4:97:d8:68:46:60:7c:7b:3a:
78:ae:fb:64:2c:cb:31:40:fa:5d:d8:4e:a1:e5:eb:
5e:b0:f3:de:34:05:c0:1e:c5:dc:9a:7b:11:48:01:
82:95:dd:07:5e:05:58:e0:1d:2f:51:d1:07:bb:6c:
f4:60:e6:fc:7d:f7:a8:dd:49:0e:79:74:fa:35:9c:
e2:38:9d:af:9a:b5:80:d3:7c:22:82:b3:8a:8e:99:
3d:87:00:ec:e6:a1:a6:4d:2e:e2:b8:8c:28:e0:3a:
f4:82:20:f0:34:48:0f:56:76:dd:79:ac:46:fe:60:
67:5a:75:4c:fb:a8:87:cf:11:53:73:6f:7b:d0:00:
c7:16:12:2e:64:ea:c9:ab:f2:4e:8e:af:0f:d2:94:
77:f7:ed:8f:21:2f:c2:1d:a7:7d:ad:c9:7d:3e:8d:
3f:25:63:62:f8:0b:6b:60:86:75:f0:8d:dc:a6:bb:
c4:bb:93:65:51:f7:07:47:8d:1c:15:01:e3:f1:04:
2b:7b:7f:28:b9:11:f0:1d:c8:80:5c:6e:f5:af:4b:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:06:6A:3A:8F:41:F6:2F:E3:C3:F8:78:0B:A4:CF:8C:B3:74:A8:83
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a7fa532-a6f2-4c0b-9be6-5854588a7d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2880::/44
Signature Algorithm: sha256WithRSAEncryption
3b:fc:d6:3d:bf:f6:eb:b1:90:2e:6c:17:c5:0b:da:f9:8e:13:
d4:08:a9:4d:75:71:20:aa:ae:17:e7:99:91:b2:a8:0b:8e:d0:
73:61:35:cf:7d:8b:23:fe:2e:1b:79:2b:75:19:5e:f9:e4:43:
05:73:1e:6f:f9:7e:2b:b2:3c:df:48:42:81:12:0b:50:dc:39:
93:70:a6:9d:c6:6c:9d:b1:c0:40:d1:9b:73:96:cf:8d:09:1a:
14:e7:f7:f2:ea:65:85:be:e9:0e:b2:a7:ae:a9:bc:d8:2f:db:
b4:b7:6f:06:df:c4:f2:09:d8:27:89:ed:23:89:8d:55:b6:2b:
43:00:17:e4:33:f6:15:99:80:d2:12:55:30:9f:7e:f1:3f:3b:
f8:cc:c6:7b:08:57:35:bc:4c:82:d9:aa:11:2b:e0:04:c8:c9:
d8:9f:c4:e8:38:cb:05:bd:66:7f:fa:fd:e2:6a:6e:0b:23:dd:
66:19:56:de:89:a5:ee:44:31:8c:0e:27:28:6a:44:9c:b1:b9:
a3:f4:50:e2:07:01:d9:11:eb:da:0b:d5:66:19:64:e7:3c:e8:
e3:df:e3:b0:f7:21:55:b1:42:f5:48:a6:a7:5f:08:44:5f:0f:
e5:f0:f2:37:b6:9d:86:96:62:f6:ae:7c:83:b7:da:cb:73:78:
47:c7:91:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:09:44 2026 by rpki-client