
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ddaffa5-7742-4904-9a3a-b2e93d4b02db.roa
File: 7ddaffa5-7742-4904-9a3a-b2e93d4b02db.roa (raw, json)
Hash identifier: NArmVJ6q/M1oLZt1yTZbT4zeG7CL/68UYXtrhCYzzc8=
Subject key identifier: 02:18:14:50:26:C2:2A:D4:A6:13:06:65:79:B2:19:E3:EF:E4:99:45
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 46039C067B68EFAD25269AC9FBC68ACD05D4D9A8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ddaffa5-7742-4904-9a3a-b2e93d4b02db.roa
Signing time: Thu 12 Feb 2026 01:41:16 +0000
ROA not before: Thu 12 Feb 2026 01:41:16 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a74::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:03:9c:06:7b:68:ef:ad:25:26:9a:c9:fb:c6:8a:cd:05:d4:d9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 01:41:16 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=f011c347d3ae91ed104ade40d194846999abb52745bc90eeb6b4197c5fdb376c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:14:ab:a3:cd:10:b1:5a:20:7d:8d:d6:1b:
95:b2:d8:0b:85:d5:e3:99:fe:fa:72:f7:84:ef:ec:
79:b3:9c:c8:22:36:e2:9f:68:b4:58:e8:db:fb:53:
b9:80:a6:28:86:8d:11:c4:55:52:c4:8c:44:01:dc:
f5:f5:79:11:65:34:6d:ce:45:1a:76:c3:56:c1:7a:
c5:3b:e2:5e:ea:ba:45:39:55:cd:81:a3:78:a8:85:
fb:d2:25:9d:63:00:82:8d:17:67:53:e9:55:cc:f5:
f4:94:7e:66:73:1e:2a:8d:d3:e1:4d:b9:38:be:04:
b0:15:3c:83:88:97:ca:6e:27:8a:cb:05:43:bf:df:
22:96:0e:f4:e6:59:03:d0:40:17:c7:f3:5a:92:6d:
91:57:01:a7:51:96:f3:ed:24:be:a6:86:9b:8c:77:
22:19:de:4b:a5:cc:ae:9a:21:04:e8:73:08:52:54:
a9:bf:08:df:0b:f3:59:aa:cb:de:58:8b:c9:74:22:
bd:e6:ac:ad:2a:a0:eb:f3:85:b6:fe:28:d0:11:9d:
9b:8d:19:59:5a:8f:b7:c5:c6:21:64:d8:0b:76:01:
5b:f6:27:75:2a:ed:36:2f:29:16:4e:a7:94:b0:26:
1f:d2:bf:59:37:5e:36:71:bb:ea:2e:e7:a4:4e:52:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:18:14:50:26:C2:2A:D4:A6:13:06:65:79:B2:19:E3:EF:E4:99:45
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ddaffa5-7742-4904-9a3a-b2e93d4b02db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a74::/47
Signature Algorithm: sha256WithRSAEncryption
32:d6:9d:67:45:31:d1:98:92:b2:ea:de:30:c6:cf:d6:6c:ab:
fb:d8:1e:01:a4:89:ed:1f:60:13:e3:7a:ac:38:48:e4:73:a0:
77:f8:50:af:7a:16:66:93:ee:30:89:7b:69:b6:db:ac:a3:79:
e9:fb:34:4c:fc:71:f9:31:91:38:40:98:1a:89:ef:45:af:8f:
d3:5e:ff:23:4f:7c:f4:bb:b1:3e:5c:0d:c4:03:3a:ef:6c:c7:
d8:52:64:31:19:ac:59:5a:db:c0:a6:ef:c9:df:3e:18:d2:0b:
73:de:23:b2:f3:37:9f:ba:e4:60:f7:50:e3:b5:be:0b:8f:1c:
f3:95:cc:3d:9f:63:2c:9d:4f:3b:bb:58:f8:b6:06:b0:77:68:
19:81:7d:46:30:78:fe:cc:4b:79:a2:2e:01:3e:25:da:4e:a2:
e1:39:4b:f9:06:a5:47:b4:bf:44:97:36:6d:35:3e:38:b0:3f:
9e:00:0c:f1:ff:92:30:a1:bf:99:90:68:cb:c5:cc:4e:d9:36:
57:c4:29:58:d2:6f:4e:f6:9d:d9:79:d1:15:a7:d6:73:cd:97:
77:0e:fe:35:21:51:96:99:bc:b8:0d:e3:86:a3:8c:ae:58:08:
37:17:7f:ae:a6:4f:84:1c:ec:6f:3e:6f:5c:7d:c0:72:55:67:
78:eb:77:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:24:53 2026 by rpki-client