
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/588c43e1-2da2-4339-9514-ef79ccbe3987.roa
File: 588c43e1-2da2-4339-9514-ef79ccbe3987.roa (raw, json)
Hash identifier: vCZJe/c12vdRvGU49mDFgC3lwEKo2i850GSj0ueyM+M=
Subject key identifier: 18:BD:5E:05:9E:B4:58:FA:9E:C0:B5:4C:F1:EC:BA:47:68:AF:EF:CA
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3F1D57B7A43ACC8A319228BB19C2DCE8DFEBE20D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/588c43e1-2da2-4339-9514-ef79ccbe3987.roa
Signing time: Thu 12 Feb 2026 01:31:53 +0000
ROA not before: Thu 12 Feb 2026 01:31:53 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2690::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:1d:57:b7:a4:3a:cc:8a:31:92:28:bb:19:c2:dc:e8:df:eb:e2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 01:31:53 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=b05477d41602c0201194db60ae5d2e17dbad93f6b487840d2a3c15d4faff38f9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:c0:c4:cb:64:fb:0c:e6:2b:79:d5:ba:c4:
96:2b:6d:a5:8f:e6:18:a9:18:fa:20:c8:b8:50:6b:
c8:7c:e1:ee:0f:49:13:da:4e:d4:f4:13:bf:3e:ae:
a8:5d:b2:1c:1e:d9:97:f1:3f:75:6d:b5:da:ce:ca:
2e:7d:33:80:51:2a:98:81:6e:36:4a:8a:62:78:fc:
d3:9a:74:43:22:16:f2:c0:4a:5f:54:83:97:bd:50:
60:4a:dc:b2:2b:b1:29:5d:c6:1b:7f:8a:5a:19:35:
ba:bd:b9:56:59:b1:8c:76:c0:14:59:b9:80:5a:b1:
02:56:45:37:fc:ad:d5:92:9f:78:4b:d0:f2:51:89:
81:c0:93:f4:e9:c8:b5:49:12:fe:78:02:a1:72:fe:
b2:da:3e:d0:f9:64:33:f5:89:91:2e:22:30:75:fb:
11:ac:bf:8e:9a:25:10:c1:9c:cf:e4:d2:e9:56:63:
65:80:a6:19:32:b0:24:b8:ea:92:85:5a:f4:a9:a6:
0f:8e:69:cd:1e:a7:68:07:ad:92:94:d6:5e:7c:e3:
65:ed:e5:22:a1:29:27:1f:20:41:dd:2f:da:96:10:
f7:b1:37:66:8c:54:9e:7b:6c:e0:39:3d:00:34:19:
65:5f:36:01:66:36:a4:62:3b:55:5c:bf:7f:f8:d6:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BD:5E:05:9E:B4:58:FA:9E:C0:B5:4C:F1:EC:BA:47:68:AF:EF:CA
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/588c43e1-2da2-4339-9514-ef79ccbe3987.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2690::/47
Signature Algorithm: sha256WithRSAEncryption
48:ed:ae:aa:2d:ce:b4:80:13:d7:1f:0d:3d:fd:9c:24:09:42:
94:65:f0:98:51:14:be:0f:79:6c:5d:3c:10:23:98:ea:40:6f:
c1:4e:1f:b0:90:f9:32:9f:7f:ff:15:19:51:fe:2a:b9:6e:dc:
d9:a6:44:4b:8b:a7:13:03:7a:63:0c:d5:1e:b6:ff:3f:66:69:
4d:b6:dc:97:40:5e:a0:e9:a7:e2:8c:e8:ee:65:6c:99:29:71:
db:ff:45:4b:cd:62:a6:90:35:bf:ca:aa:4a:a9:c7:39:59:1e:
88:3c:32:d3:6a:cd:60:b2:97:13:e1:ae:42:49:02:ca:c1:7a:
95:91:34:85:bb:4c:93:40:4c:2b:7d:4a:9d:a9:54:ec:4d:96:
b0:21:85:0e:01:25:7b:8a:8c:d2:47:b1:40:ba:4e:cc:c8:53:
a1:d1:83:04:2a:00:48:6f:de:0e:e8:6e:a7:33:fb:4e:d5:c6:
3a:42:67:4d:47:5f:17:e9:6f:09:06:6a:81:4f:b2:13:f3:7e:
4b:ee:c6:ee:a0:ab:23:b1:39:32:ab:de:a2:76:a8:9e:7d:a9:
70:d2:39:5b:4b:74:6d:ae:8f:84:8a:6a:a6:dd:ea:80:0d:f3:
a5:17:17:8e:2b:9e:2c:7c:27:1b:3c:62:dc:c2:75:59:9a:70:
da:0c:86:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:41 2026 by rpki-client