
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/646ffc73-3ad1-48a0-9e51-bc01bb1ceecf.roa
File: 646ffc73-3ad1-48a0-9e51-bc01bb1ceecf.roa (raw, json)
Hash identifier: /i+LjFHityEs6JFHzPxWLOkgFhRWbmvC3LX6Ny4C9cg=
Subject key identifier: 64:0E:A4:76:7C:21:EB:D1:F9:4A:37:45:EF:FE:53:59:2F:FD:77:F6
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0EFCDC1228C32FC666CD2EDDDA0AC133C4B29470
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/646ffc73-3ad1-48a0-9e51-bc01bb1ceecf.roa
Signing time: Fri 13 Feb 2026 07:31:04 +0000
ROA not before: Fri 13 Feb 2026 07:31:04 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2d1c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:fc:dc:12:28:c3:2f:c6:66:cd:2e:dd:da:0a:c1:33:c4:b2:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 07:31:04 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=5ded41a5d9359df92dc6ccbff6ee5f79c1b1440788d7726bf63bb38586adf44e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:d5:41:75:30:ff:dc:83:54:e8:2f:e8:5c:
59:02:17:61:cc:ab:e8:99:53:5a:8c:35:5c:c6:50:
69:00:b3:36:76:7f:10:ff:54:9b:88:a7:c9:d5:eb:
9e:6e:9a:0c:8c:bd:8d:9c:5d:6f:6c:76:ad:ca:57:
ea:50:b5:52:c5:c3:ee:db:ce:a5:48:6b:67:71:55:
c2:4b:65:ae:95:88:e9:1f:11:fe:2a:71:75:10:45:
61:a2:cc:f5:29:89:70:db:63:45:6f:2a:ff:f8:8f:
6b:fd:b6:56:4f:a6:c3:23:78:43:ed:3b:97:d4:f1:
e6:e0:79:ba:c8:6d:8c:d3:a1:32:0a:38:3d:da:37:
2c:0a:65:c1:29:b5:b1:87:f1:77:f8:17:3c:d8:0b:
4c:bf:8f:4c:e1:37:23:e5:5a:61:c2:39:16:86:2f:
57:0d:50:0e:81:e9:95:16:ae:1b:4a:e7:26:0e:b4:
56:f2:41:1f:45:59:31:de:67:03:20:72:f5:65:be:
54:e7:bf:ff:68:3f:ff:81:94:d3:71:8d:52:20:65:
16:66:f5:2f:94:b5:69:1f:4b:f2:05:05:ad:0c:b4:
3d:8e:3c:d3:0a:ef:b4:5a:63:49:f8:5d:9e:88:e2:
8a:a2:1a:b0:09:ce:60:bd:9a:c9:51:e4:69:46:cb:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0E:A4:76:7C:21:EB:D1:F9:4A:37:45:EF:FE:53:59:2F:FD:77:F6
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/646ffc73-3ad1-48a0-9e51-bc01bb1ceecf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2d1c::/46
Signature Algorithm: sha256WithRSAEncryption
67:da:2e:fe:8a:c1:44:da:c5:54:7c:e4:fd:cb:90:d9:2c:97:
5a:62:96:f0:6b:c3:e6:b5:a4:9a:68:6d:f0:b3:2e:31:31:70:
3d:f2:84:1a:4e:9e:66:f9:bf:c5:cd:30:13:de:80:12:e3:da:
fd:02:f1:d3:3b:d2:87:05:cf:84:ac:48:c8:88:3f:ac:b7:04:
bf:0d:55:69:5b:6b:69:d7:ee:6b:64:db:4f:90:b5:8a:18:66:
f7:4f:72:55:6e:61:5f:cf:7b:1b:45:0b:c6:2c:f2:f1:53:85:
4c:32:fb:d7:c0:8a:5a:3b:e7:b5:06:5c:ae:7c:28:24:5e:74:
36:25:aa:34:c2:cc:28:3c:c1:39:13:6f:4e:dd:ca:5d:96:e7:
7b:67:f6:27:e4:23:13:59:99:ce:23:63:12:c4:d1:3c:89:95:
73:77:9a:76:52:6d:55:e3:3b:67:32:69:e2:37:e7:1a:20:59:
19:1c:92:5c:d6:94:53:ad:59:17:6e:31:53:3c:60:bf:4c:02:
71:dc:82:8d:2f:41:9e:87:2d:c4:74:2d:18:68:9a:bc:f8:b1:
6b:d2:0c:0c:88:ac:fb:c7:93:71:6b:1b:7a:92:92:8e:b4:81:
73:7e:28:4d:45:40:68:dc:c3:0d:53:d9:74:b9:d1:b5:6b:94:
57:ed:01:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:52 2026 by rpki-client