
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8359a261-6574-4a80-8e0b-923525d185db.roa
File: 8359a261-6574-4a80-8e0b-923525d185db.roa (raw, json)
Hash identifier: IdnzyipVQRFUEvTV73e6nfLWA/BgZBO7IUn+8kfMZGw=
Subject key identifier: 2D:47:44:C3:C5:65:DA:8F:FF:DE:0F:BA:88:94:50:F2:82:0A:16:B5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1585A0D3DE5276ED51521C08FB4F906B37B7EFBF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8359a261-6574-4a80-8e0b-923525d185db.roa
Signing time: Fri 03 Apr 2026 01:00:43 +0000
ROA not before: Fri 03 Apr 2026 01:00:43 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:11c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:85:a0:d3:de:52:76:ed:51:52:1c:08:fb:4f:90:6b:37:b7:ef:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 3 01:00:43 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=6289b9c8439ba5382b1b7686a739e7937f4ce2fd7b1caf5a60608dc6e8c849f3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:77:6d:cc:ca:74:87:ef:97:d3:20:2a:d9:
68:21:ed:1d:68:cf:cd:68:5b:ce:4b:8a:93:fd:fa:
83:8d:c9:d8:5b:82:00:38:43:ed:6a:78:90:6d:b1:
35:53:ed:ff:04:f0:b9:ad:4f:c5:71:cb:2c:cb:35:
80:85:9a:f4:cd:3b:6f:ad:c9:27:94:71:24:4f:24:
7a:d6:39:94:9c:33:23:f2:15:bb:e9:c4:f5:44:41:
2a:df:c4:8d:8a:30:85:dc:6a:96:4d:e2:0e:7e:31:
ef:6d:5b:47:ea:19:33:f1:67:fa:af:7f:ca:c5:76:
9b:e5:58:fd:de:9a:54:9c:3e:fb:0c:3a:31:dd:05:
df:c2:ef:5f:67:75:a5:1e:ad:61:d1:f9:8f:55:7b:
f5:00:2d:cf:93:d8:da:e6:f4:32:62:20:c9:39:56:
12:68:11:1a:e8:1d:37:db:0f:79:16:ca:78:d9:b9:
6f:13:08:5b:77:34:8a:71:69:dd:e7:07:94:11:9d:
af:0b:76:fb:6b:35:18:25:0f:c9:8f:c0:b8:a3:b3:
64:98:84:ea:be:91:e3:f7:0f:f5:03:e7:00:c2:18:
e3:17:90:0f:bb:d3:69:e2:da:63:7f:98:aa:74:e6:
2b:84:76:31:a9:48:9b:41:68:0d:9f:67:81:d7:21:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:47:44:C3:C5:65:DA:8F:FF:DE:0F:BA:88:94:50:F2:82:0A:16:B5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8359a261-6574-4a80-8e0b-923525d185db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:11c6::/48
Signature Algorithm: sha256WithRSAEncryption
36:c0:e5:3b:5b:6b:b0:04:f5:ac:24:16:e6:73:ee:83:db:f2:
74:f4:f1:45:a2:d8:37:c7:95:b4:12:b8:60:5f:d8:f4:2f:d7:
5c:2d:49:92:13:1c:14:41:6d:05:00:ec:da:f0:d1:78:82:5a:
86:58:e6:22:fa:a9:1f:b7:14:49:0f:53:c5:4f:40:81:0b:fa:
44:78:a3:df:04:42:f7:82:6c:84:af:7c:73:41:d9:1d:96:b3:
aa:0d:19:bf:83:00:6f:41:e4:29:93:a1:52:6f:5e:ab:61:58:
ef:17:a8:d1:ca:26:38:fd:fd:ac:8c:5c:f6:2b:bc:bd:11:27:
18:56:1d:66:22:42:73:43:2f:3a:cd:32:03:6b:b4:cf:0c:9a:
70:c9:d2:c9:0f:ff:82:46:cf:eb:9d:83:d7:ca:15:0c:5c:78:
44:f2:f7:85:58:47:53:9c:ed:d4:70:8c:47:fe:3e:fe:e4:40:
0e:96:5c:96:d6:01:4b:2e:af:23:bf:82:c3:e0:df:46:c0:a5:
aa:5c:93:29:ac:3d:66:06:88:3c:47:c5:e2:0e:16:53:c3:11:
f6:1b:c2:e8:0d:b6:ef:29:a2:99:af:97:b8:a2:4b:04:22:ff:
4e:e4:9f:e8:4c:96:e2:47:a2:fe:8c:58:6b:7a:fd:db:40:bd:
ae:c5:ee:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:37 2026 by rpki-client