
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa
File: 7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa (raw, json)
Hash identifier: IhvKOeWm9maVuISDsiDMVKEGb3Og4xzV3gn8lo65qqs=
Subject key identifier: 98:95:64:59:11:7D:49:A7:30:99:25:03:43:5D:01:25:8F:A8:38:E5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3A33ABED71B49645D47079833C3E99DF9F91B01F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa
Signing time: Fri 13 Feb 2026 03:31:05 +0000
ROA not before: Fri 13 Feb 2026 03:31:05 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3376::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:33:ab:ed:71:b4:96:45:d4:70:79:83:3c:3e:99:df:9f:91:b0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 03:31:05 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=30bae200c1e33bfbed448f4aa00f4f042e296f2710dcb9ed95988b8a24866a4c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:8a:ff:20:45:59:af:64:b0:5c:86:b7:64:
89:d8:0c:fb:ee:c0:5f:a2:6b:09:fd:7b:19:db:20:
d8:b5:1c:a4:0e:2e:ae:b4:92:27:a9:63:bc:a9:2a:
27:51:b2:0b:c7:98:5b:8a:e5:13:c8:6f:58:2d:48:
de:9c:48:7e:51:5f:1d:74:af:a3:7c:e4:0c:30:63:
37:8c:eb:5c:6f:b4:f8:73:d9:15:58:a6:2f:42:27:
d1:e8:f9:c1:f7:15:c8:54:85:f6:64:0f:cb:a4:bb:
9b:f0:28:d2:ae:cb:82:ae:3a:b7:57:35:d9:84:8b:
8a:52:23:0f:08:df:4b:c4:40:32:21:d9:d6:91:62:
88:0c:ed:a5:da:35:85:75:b0:4b:d3:df:96:dd:6b:
33:a2:89:7e:84:d6:18:62:30:47:c1:b2:59:4c:0e:
0e:87:65:fa:32:c1:a8:54:af:69:e7:b6:41:5e:21:
1c:c7:61:30:fd:cd:c8:eb:e7:38:6d:ab:9f:6e:2a:
13:80:34:c6:b4:f4:8b:79:4c:08:ff:b5:ce:bf:c0:
2d:e2:71:49:1f:e7:d2:cf:8a:a0:fa:a6:90:e6:e5:
42:81:d5:63:ea:e1:c2:f5:03:0b:7a:44:cd:ab:96:
e8:df:95:86:3f:12:86:b5:88:6a:74:8d:23:78:9f:
d5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:95:64:59:11:7D:49:A7:30:99:25:03:43:5D:01:25:8F:A8:38:E5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c7f70bb-dd5b-405a-9bed-25e7e9bd3fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3376::/47
Signature Algorithm: sha256WithRSAEncryption
56:69:64:41:1b:cc:8c:c9:bc:42:be:c1:35:33:0e:a8:41:7a:
78:1b:fd:dc:00:29:71:04:bb:2a:f9:c2:f3:ee:d3:fa:71:d3:
6f:0d:34:47:39:e8:7b:ef:ea:00:e1:10:a9:af:a9:13:23:d4:
1e:42:53:90:2a:12:6d:ec:0a:59:62:88:62:a6:15:43:86:ff:
aa:0a:2b:d7:81:a7:7d:a3:cb:dd:6b:4e:26:5d:80:b4:ec:80:
b8:5f:f3:03:60:b4:8e:7e:2c:19:b4:c6:4b:92:42:b9:55:e0:
e1:d1:ca:68:b2:5e:92:16:50:86:bb:74:18:d7:62:f4:18:c0:
7b:1f:22:b1:d4:bb:c9:2a:24:d8:2d:6d:33:42:1b:b1:3d:01:
fa:83:e7:7b:4f:9d:8e:b7:05:0d:b0:27:a9:bc:0a:12:0c:50:
b8:77:32:47:b0:6a:6a:84:a7:7e:12:3f:2b:03:4e:41:21:1e:
3e:43:5c:04:7c:43:fe:79:3b:e3:fb:81:c4:49:8a:20:95:27:
49:4f:1d:85:c6:71:d5:64:3a:db:93:90:e6:30:4d:f1:58:7a:
aa:85:3d:8b:1e:87:39:2f:2f:53:47:d7:4a:2f:89:fe:a8:84:
87:4a:c2:5a:83:51:9b:1f:04:1c:45:fd:60:42:32:7f:28:fb:
a1:a4:8a:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:13 2026 by rpki-client