
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8897ce36-4222-47c3-aea1-39b6d945af11.roa
File: 8897ce36-4222-47c3-aea1-39b6d945af11.roa (raw, json)
Hash identifier: qU9bSLmXVVr3PYGXK11hRjcBkh/sruSuKMQIJ5pgO8A=
Subject key identifier: 87:51:87:09:98:59:FE:A2:EB:00:5C:9F:30:FF:22:03:B9:95:46:20
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 579B642C536E02BE746B298CA0A5193E77E27057
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8897ce36-4222-47c3-aea1-39b6d945af11.roa
Signing time: Thu 12 Feb 2026 00:10:44 +0000
ROA not before: Thu 12 Feb 2026 00:10:44 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:291e::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9b:64:2c:53:6e:02:be:74:6b:29:8c:a0:a5:19:3e:77:e2:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 00:10:44 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=a5a68b36e1e2b038db3f85874067202266539aedda43b14fa3db5ffb0386c7d4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:7b:ce:da:38:59:33:eb:10:fd:51:78:0f:
52:a7:d3:9a:6a:bd:4d:2a:52:88:2b:00:b0:97:81:
29:5e:3e:5b:fa:ac:9a:59:89:a1:2a:b0:d8:01:1c:
97:15:43:84:36:ff:66:ac:4d:08:e1:f2:cf:fc:fa:
89:55:61:fb:95:4c:ff:37:93:e2:fd:3f:6a:69:33:
01:14:90:c4:5b:80:a6:5f:90:30:a2:f8:82:59:43:
31:96:c3:e6:57:74:70:66:68:55:90:71:01:ad:72:
ff:d7:31:ed:73:3f:9f:8c:2d:71:82:5d:43:6d:3d:
73:8f:9f:18:06:ec:ae:fe:a1:85:f1:e2:90:7b:22:
3e:69:5b:d0:41:14:e4:fd:18:51:b2:08:aa:2f:4b:
62:5a:fd:92:9d:a8:63:80:ff:93:ae:5f:a0:10:32:
2d:11:eb:4e:a1:e6:27:a3:de:9f:de:1b:40:d7:a3:
37:d5:a7:0c:76:68:5f:c8:92:4d:f5:f0:cf:dc:15:
69:9f:a2:98:0d:c8:a5:c1:10:d2:46:bd:ed:91:7f:
05:77:26:c2:5e:d2:be:68:cd:20:a4:a7:68:1e:e7:
ac:a7:17:1f:5a:fb:19:83:7e:41:ac:ab:31:44:83:
ef:b6:63:44:7a:ba:98:26:49:38:9d:8e:5d:17:b1:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:51:87:09:98:59:FE:A2:EB:00:5C:9F:30:FF:22:03:B9:95:46:20
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8897ce36-4222-47c3-aea1-39b6d945af11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:291e::/47
Signature Algorithm: sha256WithRSAEncryption
67:ec:b6:9f:f1:7a:ee:be:27:3b:18:52:ef:fc:95:3f:be:e4:
bb:48:ef:8f:d7:19:91:a3:e1:3b:e9:2a:fb:86:16:44:6b:3b:
ef:e3:50:b7:bd:7d:32:ba:58:82:cc:7e:73:36:92:90:c4:10:
ef:eb:b3:72:32:08:db:14:1f:62:73:af:57:ca:13:88:49:64:
9b:31:54:1e:d1:a1:17:f4:d6:c1:13:fe:ee:e2:82:01:49:d7:
b0:c7:a9:e9:c6:10:41:d8:af:c8:56:ee:5b:79:55:fc:37:75:
42:38:ca:7b:4f:25:6c:b2:cc:a9:50:8e:c2:d8:ad:56:0a:2a:
78:11:f6:6e:f4:7c:ae:73:d8:f2:3e:71:dc:63:5b:e7:19:b0:
d7:c6:91:13:34:1f:aa:f5:1c:99:21:d0:5a:43:60:70:60:cc:
4c:0d:f0:93:66:d2:65:bd:53:73:a0:0f:2d:4e:9d:7e:73:c5:
0c:46:f2:7a:06:d3:13:b3:42:e5:c5:55:9e:bc:b3:a4:78:28:
86:d7:c1:0d:3e:f5:14:2e:c1:7c:40:12:5e:1b:c6:4a:ad:66:
08:a1:13:9d:ad:c5:d5:66:65:68:fd:0f:99:99:bd:a3:15:60:
23:7d:90:56:78:c5:80:91:ad:97:cc:34:be:8e:c5:e0:2d:61:
e8:e7:03:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:30 2026 by rpki-client