
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/699a1d4a-1664-4d80-9b03-5ec4d63eb7ec.roa
File: 699a1d4a-1664-4d80-9b03-5ec4d63eb7ec.roa (raw, json)
Hash identifier: d+ClkfJt8Pf/GYwDUKvLnGb+d+KtluK2R5uax9QTq5E=
Subject key identifier: EA:87:96:96:41:63:27:D8:07:6F:3A:C2:B6:0E:A4:BD:D3:0F:39:91
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4CED692661306F3B575D82F76C9325DBC8922D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/699a1d4a-1664-4d80-9b03-5ec4d63eb7ec.roa
Signing time: Sat 04 Apr 2026 00:00:03 +0000
ROA not before: Sat 04 Apr 2026 00:00:03 +0000
ROA not after: Fri 03 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1239::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ed:69:26:61:30:6f:3b:57:5d:82:f7:6c:93:25:db:c8:92:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 4 00:00:03 2026 GMT
Not After : Jul 3 23:59:59 2026 GMT
Subject: serialNumber=318ecb4ee390224a52483bc989bcbfd106bd90e3b6ca57b7bebc632652002ec0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:fe:ae:36:db:ff:34:21:1c:aa:87:c4:dc:
b7:a9:60:bf:75:ca:40:62:22:8c:24:46:12:fa:03:
cc:25:b2:7c:66:8f:20:07:2a:c3:76:44:0a:0c:4f:
03:4e:fe:9c:7f:3b:52:8f:71:37:71:78:b6:56:92:
60:9d:76:04:63:65:15:4c:93:11:87:22:a5:57:af:
3e:b4:2d:53:fb:42:f6:fa:9d:36:c2:da:35:8a:e8:
1d:8d:d3:19:cc:cb:29:23:61:d0:cd:14:91:c5:0b:
cb:ac:71:d1:c5:c7:6a:5f:37:76:c8:d1:86:92:36:
31:d8:b6:a9:2a:3b:fe:f7:be:3b:ed:27:e9:c3:1a:
c1:03:97:34:c2:1a:a2:75:3b:6d:6f:50:ac:b9:0b:
a7:7f:42:4e:97:83:1b:37:c4:e2:05:01:61:fb:0c:
1d:ca:42:61:ad:8e:6b:e5:1c:4a:55:b9:22:37:ef:
3d:e2:c8:b9:e7:9b:2b:39:36:9e:89:79:1c:17:f9:
82:0f:ab:8a:a7:46:ae:4e:26:03:da:23:47:54:7d:
e5:be:e3:1e:bf:9d:e1:d3:ff:f9:36:d5:db:92:24:
ce:66:f4:7b:64:df:81:a9:fa:be:58:26:71:eb:d0:
1a:4f:c2:58:d7:5b:29:c6:fe:e1:f4:7a:b5:db:47:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:87:96:96:41:63:27:D8:07:6F:3A:C2:B6:0E:A4:BD:D3:0F:39:91
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/699a1d4a-1664-4d80-9b03-5ec4d63eb7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1239::/48
Signature Algorithm: sha256WithRSAEncryption
af:91:94:cb:b4:d9:ad:eb:c7:91:c9:48:6f:84:38:14:85:3f:
69:b0:56:f2:53:7d:9f:82:0d:86:d1:42:c2:ab:8b:2b:96:00:
ca:f1:94:28:a7:e0:5c:02:1d:ab:65:a8:e4:e7:a4:b3:55:dc:
f3:2c:d3:bc:96:2a:e8:a1:82:ad:65:89:bb:ff:f0:17:ae:b6:
d5:90:27:6a:43:d3:ed:cd:5e:f7:12:c9:bd:81:6f:97:cf:9e:
82:16:06:f1:ea:cb:03:af:98:1f:54:3d:39:42:22:82:e3:4b:
02:ad:14:18:f9:58:3a:db:0b:5b:bf:f0:0f:b3:99:0d:0e:da:
95:f9:ae:b1:b1:6f:a9:0e:25:86:9d:cc:96:b1:e7:19:f9:7f:
c1:99:aa:67:12:11:54:9b:7f:67:09:ca:ec:4f:2a:79:12:61:
cf:68:20:21:16:85:92:8e:dc:a9:a8:1c:b7:2a:93:e3:00:d7:
d2:08:f9:da:80:6f:35:e2:a5:bb:66:2f:c5:13:40:51:39:f5:
20:76:0e:1d:e0:5b:39:68:f1:11:de:e7:41:0d:38:7b:dc:f7:
cf:8f:26:08:19:41:0c:d6:ef:97:19:e3:7a:88:4d:bd:ce:7e:
c9:b9:75:cb:7e:6f:63:74:59:b4:8d:bc:1a:c3:c9:65:a5:59:
ae:45:08:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:45:10 2026 by rpki-client