
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d1502f0-cb52-4383-93fe-6943ede50357.roa
File: 4d1502f0-cb52-4383-93fe-6943ede50357.roa (raw, json)
Hash identifier: yHIgCM6P1jvSDpDkzVF0dH8djAi76Ma4wZ+3o8zI4BI=
Subject key identifier: B8:AA:68:8F:20:EE:D3:98:AA:B1:10:23:95:C3:C7:EF:7C:09:8C:E2
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 216AB39CF10D3DD10EB89EDDD6AF6DAF60F2D99C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d1502f0-cb52-4383-93fe-6943ede50357.roa
Signing time: Thu 12 Feb 2026 03:00:11 +0000
ROA not before: Thu 12 Feb 2026 03:00:11 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3210::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6a:b3:9c:f1:0d:3d:d1:0e:b8:9e:dd:d6:af:6d:af:60:f2:d9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 03:00:11 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=4d8248a60aecac766ebf8400001c495085e21d5d4920e59887b81467d9d4d112, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:48:3e:40:c8:97:a7:d5:6f:36:f6:5e:02:
3a:eb:8b:bc:ba:d2:42:f4:13:a7:5a:78:87:31:ed:
48:88:1e:da:c5:68:87:fb:58:b6:6f:05:30:a3:0e:
e9:64:aa:94:b9:fb:c8:b5:5e:1a:b8:87:81:e9:ae:
f9:d8:31:6c:ef:db:4e:58:fa:b1:e2:a5:d4:7f:49:
d8:b5:fb:04:90:f4:20:fb:b1:4e:5d:de:53:ae:ee:
39:2d:1f:d6:a8:d9:d6:06:9d:a8:dd:94:a4:ac:7e:
6b:4b:13:49:61:7d:cb:49:19:be:ab:29:37:6c:29:
b3:83:92:1e:97:03:80:0d:9c:25:21:a2:a0:e7:45:
22:1b:1d:d1:20:34:c9:c1:23:60:0c:87:c9:2b:1a:
8b:06:ee:73:9f:1e:2c:de:35:f7:6a:9d:eb:3a:20:
c1:11:0a:bf:b7:98:86:5e:dc:70:5b:74:bd:e0:0c:
c5:66:f4:9f:77:11:d3:74:2d:b9:09:cf:a9:66:a8:
5a:7c:7e:8e:ae:73:66:4e:45:7f:da:bf:34:27:19:
60:f4:89:1e:3d:dc:0e:d4:d5:d0:72:cb:e1:c4:44:
9c:0a:46:e2:a9:d6:28:1f:8f:7d:23:3c:06:06:af:
8b:4f:82:20:b7:71:b3:1b:67:e9:b6:35:bb:2e:6c:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AA:68:8F:20:EE:D3:98:AA:B1:10:23:95:C3:C7:EF:7C:09:8C:E2
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d1502f0-cb52-4383-93fe-6943ede50357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3210::/47
Signature Algorithm: sha256WithRSAEncryption
5e:3a:c6:5c:4e:1f:33:b0:08:ee:f7:bb:f2:31:c2:7d:f4:43:
a8:24:48:4f:0f:1e:2f:54:95:b6:df:9d:f0:82:1b:61:1e:18:
4f:f2:b1:c4:6c:05:f8:d1:00:d5:ba:66:73:7d:dc:07:94:fb:
ed:96:3b:6c:1c:63:ef:1c:18:51:67:92:99:2c:83:ea:ac:bf:
44:76:ff:81:0e:60:85:b8:8b:9c:b6:88:73:5c:00:2a:d2:25:
f4:6f:b9:ea:da:3a:d3:25:5c:b2:c9:15:4b:92:77:54:3f:82:
ed:bb:8b:95:6a:04:b8:13:56:c0:92:9d:e1:41:21:f2:be:8c:
1f:ca:e6:9d:78:bb:ac:16:a3:52:7f:54:a6:2c:6d:85:32:55:
dc:cc:ba:4a:76:ee:b3:3f:bd:a9:ff:bb:50:4f:f0:79:95:fb:
54:35:b7:4a:09:18:48:07:8a:7b:a4:a4:21:af:1a:f6:05:5f:
03:de:56:35:46:b8:03:b9:8f:ce:72:18:6f:b9:3f:9b:71:04:
a6:bb:7b:48:70:52:61:f7:3d:f6:e4:d7:bd:a6:50:38:69:95:
9a:7a:38:f8:48:7b:2d:5e:86:da:9a:a0:09:6b:4c:4a:5b:f8:
35:ac:89:41:d2:97:a1:30:d2:ff:3d:4d:21:51:06:76:08:0f:
d7:75:fb:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:06 2026 by rpki-client