
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/794e06ca-14bc-4a12-8f29-4c698f999dc8.roa
File: 794e06ca-14bc-4a12-8f29-4c698f999dc8.roa (raw, json)
Hash identifier: UKhQUDMANY0Wu8iJh7/468irAIRAcKsixDZFOPWeGfI=
Subject key identifier: DB:3D:82:FD:A0:0F:54:BB:8F:14:CE:4A:27:50:B2:7C:11:49:90:DE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7D8646D92BFD69337CB7AF483BC001CE8F52BD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/794e06ca-14bc-4a12-8f29-4c698f999dc8.roa
Signing time: Fri 13 Feb 2026 09:10:46 +0000
ROA not before: Fri 13 Feb 2026 09:10:46 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3528::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:86:46:d9:2b:fd:69:33:7c:b7:af:48:3b:c0:01:ce:8f:52:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 09:10:46 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=fa187915abcd39fe1f66a98ca7222a805f48666a820314bb983f75856b2b05e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:d4:1a:7b:7e:bf:80:2c:0f:3a:b2:18:0b:
d1:b0:d7:4d:e8:ab:28:ea:0c:7e:51:9c:59:d6:7e:
65:ef:c1:45:03:4b:8f:a1:6b:32:46:c8:c7:a0:df:
f4:2a:6c:06:36:d5:b3:09:10:c1:9f:ea:cc:23:27:
9a:d8:c2:54:bc:bc:16:10:cc:3b:b8:38:8c:cf:72:
ce:9a:a5:f9:a0:11:83:e8:3a:3d:9c:83:cc:8d:a2:
73:a0:13:7f:fe:9f:7c:f1:2f:b8:d0:31:94:91:a5:
88:ba:5d:fc:a4:93:5c:f1:c6:f4:09:18:27:4d:4a:
c0:58:79:9d:84:38:96:20:6b:38:91:e7:d9:f9:80:
80:08:ed:59:36:49:05:93:fc:fd:b3:e8:18:4f:fb:
de:61:88:a0:ae:58:7f:54:9d:03:cc:5f:e1:33:c9:
b1:3b:94:c8:df:90:96:03:b6:33:cb:fc:a4:c6:d8:
12:75:22:18:47:12:99:06:04:c5:f8:42:0e:ab:9c:
af:9c:86:94:be:bd:45:e9:8f:af:52:57:60:5c:4e:
79:5a:23:7e:7f:8c:30:41:ed:9f:47:b4:84:b0:99:
c3:b8:c1:21:2d:9a:7e:38:45:76:4b:0d:82:3d:be:
3f:1a:a1:e6:78:5d:75:c3:0f:7c:77:bd:f4:31:94:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3D:82:FD:A0:0F:54:BB:8F:14:CE:4A:27:50:B2:7C:11:49:90:DE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/794e06ca-14bc-4a12-8f29-4c698f999dc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3528::/47
Signature Algorithm: sha256WithRSAEncryption
44:de:c7:8b:4e:e6:e7:be:6d:99:e0:0c:5c:b0:ab:1c:f2:e1:
1a:97:62:fe:68:e9:5b:a8:95:a0:a8:5a:b3:0b:c8:81:cb:9f:
17:99:38:d7:63:d8:38:89:1e:d2:fb:6b:ff:07:d5:0f:14:17:
f7:de:73:6b:12:df:de:aa:df:08:53:46:da:b5:c3:e5:30:8e:
1a:84:fe:f4:39:1e:56:73:a7:8e:d2:9b:4b:8e:19:2c:a7:4c:
f9:d2:90:84:ba:27:2a:76:0c:a7:74:08:0f:e4:87:73:33:c2:
bc:af:9f:d3:e1:2f:14:19:92:49:97:c8:34:de:45:09:2f:6e:
2f:a5:24:aa:e1:45:75:78:53:20:89:5f:11:ff:e7:10:5d:9a:
2d:7e:66:b1:86:bc:65:38:bb:b7:4b:e6:ab:00:a3:44:51:20:
8f:9b:45:2b:64:67:47:6a:8a:76:07:71:fd:5f:85:1f:b8:db:
bd:0b:74:82:38:ae:c0:4b:03:40:15:e2:01:28:cf:6c:78:87:
9e:6f:2b:41:e5:4f:16:db:90:5f:17:66:15:19:e8:b4:d2:be:
5d:62:61:9a:c4:a7:ba:55:56:54:82:6f:69:23:ff:fb:0e:6b:
0c:99:8a:c6:86:8b:ea:72:ad:c2:ab:d3:6b:b2:00:ec:fe:06:
66:b9:95:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:21:47 2026 by rpki-client