
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ef4c37c-cc01-4015-9799-9821616bebec.roa
File: 6ef4c37c-cc01-4015-9799-9821616bebec.roa (raw, json)
Hash identifier: xVZ9bSwqUAaeptXUMyH4Hx7YU9qkm5yWtgKonjBTTGc=
Subject key identifier: 20:76:B5:C3:C9:2F:5F:05:AE:D3:E1:41:AE:37:79:DC:35:61:F3:11
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 55AD2FA62BA1BABA647830A3893B335553432543
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ef4c37c-cc01-4015-9799-9821616bebec.roa
Signing time: Fri 03 Apr 2026 02:00:53 +0000
ROA not before: Fri 03 Apr 2026 02:00:53 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:10f7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ad:2f:a6:2b:a1:ba:ba:64:78:30:a3:89:3b:33:55:53:43:25:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 3 02:00:53 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=5df473b809b7e05162118fc34dc7b2990db2817e06859e99e1a3e15903047cdb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:b0:32:d3:76:59:76:bb:23:c2:06:93:c2:
32:86:fd:b2:de:65:aa:c3:2e:1c:fd:71:3b:b4:5a:
ee:05:83:db:00:4c:4e:dc:5c:73:76:6a:9f:3c:ff:
f7:42:7c:fd:aa:cd:d4:9c:d6:18:37:57:0b:28:0c:
12:3b:50:f1:ac:9c:12:64:2c:97:ab:1f:c5:fd:46:
14:a4:2d:f5:7c:5e:56:b0:a1:bf:1a:8c:ac:02:cc:
9a:7b:a5:14:c6:48:cd:96:30:8b:e9:c7:3a:e7:9a:
2e:c3:44:80:46:1e:63:4e:d7:ae:64:92:ac:56:83:
eb:bb:38:a9:0e:dc:e4:d5:b8:fc:9d:cd:1a:74:cc:
ae:f7:ad:ab:b4:51:f6:b3:ed:ef:93:74:27:5b:06:
52:7c:4f:1c:49:ad:ac:b7:90:3d:88:b1:b6:82:6d:
1d:f4:7a:15:fe:aa:8b:94:4a:f5:a1:57:7d:38:de:
6a:3f:a8:a0:fb:e6:e5:6b:1e:ee:84:01:bc:be:76:
24:ec:76:5a:99:10:41:1d:fd:e9:1c:78:88:61:37:
7a:01:1a:0c:7b:aa:1f:b4:b5:0d:68:4a:2c:d9:4f:
93:ab:e3:6d:f9:d2:23:68:4c:ec:fb:08:c0:bf:68:
0a:0d:ea:6e:97:f0:01:98:98:4d:9e:fc:a6:4a:60:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:76:B5:C3:C9:2F:5F:05:AE:D3:E1:41:AE:37:79:DC:35:61:F3:11
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6ef4c37c-cc01-4015-9799-9821616bebec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:10f7::/48
Signature Algorithm: sha256WithRSAEncryption
30:79:de:25:00:55:49:08:1e:84:de:e1:76:d8:38:c0:7b:4c:
ef:df:de:f6:b4:24:c3:07:21:81:7b:86:6d:2b:fb:40:ba:42:
01:1b:eb:b5:38:d1:b9:40:ad:aa:0a:5a:31:3b:5e:6d:98:10:
8e:38:46:d1:d4:93:c7:e6:a8:41:0c:3f:10:13:30:7f:5d:43:
e8:ee:78:db:88:85:1a:cc:ff:20:78:2d:d4:f1:a7:a6:d5:83:
ca:24:17:bf:1a:10:34:62:d2:3a:c2:41:d5:e9:e0:6a:4b:b9:
b8:d7:26:ae:4d:0a:ef:88:03:06:c7:1c:2f:f6:bf:bf:29:59:
74:2f:68:a7:c7:95:76:d0:5f:7a:a2:4d:d3:d5:51:44:c3:96:
d0:56:e5:1a:30:fc:87:3f:b2:85:a7:97:b1:fd:c9:8c:45:2a:
49:dd:a0:59:b2:54:dd:e3:64:be:88:64:8b:01:c6:69:0a:8e:
6c:e1:63:0f:30:95:4d:18:64:4c:54:53:91:7c:7e:b0:2b:06:
bd:95:a5:0f:be:b5:3d:d1:c5:18:cf:5e:de:fe:c7:13:98:44:
ce:28:12:b3:4d:15:18:fb:4c:69:34:c7:68:7b:4a:d5:e4:f6:
ea:8b:c9:bd:49:56:ba:f3:64:55:21:d0:8f:51:17:e6:5a:a4:
9a:b5:e7:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:33 2026 by rpki-client