
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8801a26b-66ca-4ef9-9b4e-e5395b7f886f.roa
File: 8801a26b-66ca-4ef9-9b4e-e5395b7f886f.roa (raw, json)
Hash identifier: hpQ5AnGV9p1cDmHajpnewG0oqLJ7pvvBYRoU9H3Yrr8=
Subject key identifier: 27:67:35:4D:66:B1:51:59:17:5A:AC:59:A1:C1:6D:1B:08:B1:8F:4C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 350F828D85569A0389573CE8DD359F1BC42B0305
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8801a26b-66ca-4ef9-9b4e-e5395b7f886f.roa
Signing time: Thu 12 Feb 2026 03:01:39 +0000
ROA not before: Thu 12 Feb 2026 03:01:39 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:eee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0f:82:8d:85:56:9a:03:89:57:3c:e8:dd:35:9f:1b:c4:2b:03:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 03:01:39 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=89dd6186ef037d1f50a6d0e40b43650bd7ba9d902a379117cd80fdc5df891b7c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:8e:77:2d:79:c9:5c:fd:ac:fd:f6:8f:ef:
0c:8f:ee:3f:ea:44:6b:00:8f:9b:bc:f2:6c:3e:12:
07:e9:2b:01:8f:db:32:d3:8a:04:17:b5:4b:f2:4c:
a3:ec:ad:32:5f:e7:66:a6:19:7f:2d:87:7d:a5:22:
20:63:7e:7a:17:d6:22:2d:0c:c7:0c:cf:9e:7a:3d:
db:2b:40:34:b0:23:a2:c6:45:03:9d:a8:79:15:1d:
df:1d:b0:bf:86:c0:50:ad:0b:96:b0:80:aa:df:18:
c4:ae:3e:fd:ed:8f:bc:f8:85:e6:60:01:48:42:be:
fc:d4:b9:78:88:91:5b:2b:6b:fc:1b:8f:a4:cf:3f:
f3:96:a5:b8:45:41:88:1a:ec:1f:48:89:18:f5:eb:
0c:6f:68:ce:42:38:e7:ec:b5:06:be:3d:75:66:66:
07:f6:45:4e:19:3e:da:3c:f6:e1:5c:36:9b:8b:c9:
12:12:de:54:eb:45:e7:b4:44:43:09:0d:b5:24:00:
1f:c1:df:1c:5b:e2:9b:ca:df:bb:8e:f5:a9:05:86:
5a:63:db:d2:69:59:52:3d:2d:02:8c:59:df:ba:21:
b4:ca:26:bf:69:53:2c:70:50:7a:1c:9d:7a:c6:5b:
86:68:ee:c4:83:d2:65:45:5c:e4:e1:28:47:41:e3:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:35:4D:66:B1:51:59:17:5A:AC:59:A1:C1:6D:1B:08:B1:8F:4C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8801a26b-66ca-4ef9-9b4e-e5395b7f886f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:eee::/48
Signature Algorithm: sha256WithRSAEncryption
56:e2:83:dd:fd:89:a6:16:b8:3b:ba:b8:d8:03:d2:38:b7:82:
20:7c:82:cb:94:62:4d:20:de:c0:22:1a:87:3a:bc:66:a8:ea:
36:d4:20:ad:41:87:7d:03:7a:86:9d:c9:f3:a8:62:64:54:f1:
cc:97:96:92:de:1e:7c:9a:bb:6d:a3:9e:86:9f:7b:13:0b:dc:
59:0a:9d:7d:06:38:f6:26:96:93:13:b3:42:c1:64:a2:35:76:
8d:c0:08:a0:4e:e2:e3:31:46:94:30:61:f2:8e:cf:89:95:0a:
db:bb:f1:09:17:04:ec:31:70:19:86:2d:dc:2a:9c:ff:c0:61:
fe:1c:4e:ed:8d:8f:3c:c1:e5:1d:1f:7b:ce:96:1d:b3:dc:a5:
27:e1:2f:4e:fb:69:09:b9:cc:08:72:19:82:5a:28:34:f8:a9:
b5:88:2a:f2:c8:a1:7d:a2:eb:b5:4f:de:28:4b:34:8a:5d:4f:
d3:58:55:5c:b3:3b:35:98:cd:54:ef:0c:19:f6:eb:a6:0b:b2:
b7:39:e5:ed:31:df:18:97:24:c9:d7:71:d3:8f:00:b5:97:fc:
56:99:a2:6a:a8:8e:72:1f:75:9e:6e:e0:60:55:3f:c6:a3:32:
c9:da:1d:90:8d:f9:6b:68:a4:f6:0e:41:ac:cc:b0:c0:b1:4a:
ca:3d:d1:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:34 2026 by rpki-client