
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8097a2b1-f34d-420e-81a2-b6a60c59e472.roa
File: 8097a2b1-f34d-420e-81a2-b6a60c59e472.roa (raw, json)
Hash identifier: OAAUkdUtdN7LQhlwMCLXYVSY/7X4eMTMRfqLHhiToeE=
Subject key identifier: 7D:6D:55:32:06:D3:19:99:3C:BA:1F:B9:A2:85:A4:46:EA:94:24:0C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4D77DFD54EFFA5EBA0A4E80DD4A74F5BA9C2AD1C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8097a2b1-f34d-420e-81a2-b6a60c59e472.roa
Signing time: Fri 13 Feb 2026 10:51:23 +0000
ROA not before: Fri 13 Feb 2026 10:51:23 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3780::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:77:df:d5:4e:ff:a5:eb:a0:a4:e8:0d:d4:a7:4f:5b:a9:c2:ad:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 10:51:23 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=ddbe824accb5e564c635ecdd297733d1ab09b8198b5f1c541d32fc98e1e1346b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:b3:c2:37:c2:53:7a:be:54:93:1a:7b:ba:
60:91:e2:a3:50:52:f4:5d:c5:76:61:12:16:bc:94:
68:67:49:e4:aa:d5:80:ff:a9:d7:d7:d5:54:60:ca:
07:0a:3b:16:04:d6:cd:fb:76:e4:7d:93:f8:68:dd:
b4:09:cc:eb:0f:66:3e:83:43:a4:0c:6d:35:8c:fd:
e8:5f:66:f1:84:56:01:2a:65:fd:49:01:48:0c:dd:
ab:ff:68:06:4d:ac:9f:5e:8c:4f:38:5c:34:9d:91:
71:1d:de:bd:65:47:ef:c5:f8:3f:bb:9c:69:82:a4:
ce:32:02:1f:fc:b8:bf:0e:8e:d9:b4:60:2c:08:b1:
23:7a:30:e0:d3:36:b0:6b:61:05:b6:f7:07:b2:74:
0f:29:e2:1e:89:81:f9:44:8d:ad:c0:b7:45:f5:1e:
e2:ec:21:0a:bd:fb:19:24:dd:dd:03:dc:7e:ff:bb:
e4:3c:7b:d2:88:b5:8a:0e:23:b8:f6:96:41:10:9c:
ff:2e:63:92:73:41:3f:6e:cd:52:d7:b2:a9:d6:d7:
62:11:8f:a5:66:a2:56:4c:48:df:d6:f4:14:41:b8:
6b:b8:76:03:86:99:48:7f:71:84:9b:43:92:22:97:
02:88:d2:d3:c5:05:db:00:e3:ee:fe:dc:5e:97:d4:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6D:55:32:06:D3:19:99:3C:BA:1F:B9:A2:85:A4:46:EA:94:24:0C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8097a2b1-f34d-420e-81a2-b6a60c59e472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3780::/43
Signature Algorithm: sha256WithRSAEncryption
8b:93:1b:f4:20:a9:c5:2e:61:52:cd:be:fa:92:42:fc:55:34:
25:96:46:e7:c6:12:a1:e7:b6:cf:e5:a7:4d:f8:2e:ce:c2:74:
c0:74:5f:41:60:02:52:fb:b3:9d:d5:b9:bb:ae:bd:ee:b2:49:
ab:63:7e:2d:c2:c8:d6:f0:ce:03:a1:f9:eb:4a:70:2c:48:05:
ac:e4:64:bd:76:9e:d9:ad:45:b9:2f:0f:4e:e2:bf:e8:4b:d4:
86:b3:93:9d:3a:25:b5:1b:88:d7:2b:08:9d:11:18:47:cc:ac:
61:ff:a5:69:62:f6:12:22:8b:a9:2c:8e:c6:28:82:8c:45:0d:
b2:60:bd:cc:61:45:ff:6e:b9:35:64:87:08:88:89:51:00:6f:
81:cb:7d:55:2d:6c:e8:ce:32:90:6b:ef:92:60:e9:e6:e5:09:
ca:79:5b:a0:e2:31:8a:86:9e:d6:23:7d:93:8c:f7:2d:c9:d8:
f1:80:ce:44:69:bf:3e:0d:af:82:a5:11:89:85:8b:89:9f:fd:
cb:e0:ce:bf:1f:83:2d:89:fd:84:81:a0:fa:54:03:3a:db:d1:
fc:12:b9:89:14:11:dc:ce:9c:87:68:8f:0f:80:5e:de:b1:7c:
12:8f:5d:49:50:27:1b:10:90:65:c9:6a:a0:c7:01:e1:57:40:
d2:f6:b7:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:51 2026 by rpki-client