
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a883e39-16d8-4cb9-b7a7-fa3d85e986c2.roa
File: 8a883e39-16d8-4cb9-b7a7-fa3d85e986c2.roa (raw, json)
Hash identifier: S611BGXZYxx8b02Le45mKWFGZtr1DBxWQm8RRb5NtZ4=
Subject key identifier: 52:FD:F5:9C:B6:04:45:61:B9:1C:76:E7:23:4A:01:EA:F5:E0:84:25
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0AADE41A48912E9EFB755A3AE3D99E55D209FF5F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a883e39-16d8-4cb9-b7a7-fa3d85e986c2.roa
Signing time: Thu 12 Feb 2026 02:50:07 +0000
ROA not before: Thu 12 Feb 2026 02:50:07 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a40::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ad:e4:1a:48:91:2e:9e:fb:75:5a:3a:e3:d9:9e:55:d2:09:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 02:50:07 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=f68d52ca525d6460cbe794bf1ef9da5d5677f015ef279784f68f793066ea177e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:39:83:05:7d:9c:cf:0e:3f:60:e1:f7:7c:
c5:33:61:db:39:3c:b4:c2:2e:41:2a:01:66:5e:2c:
5a:38:06:a3:2f:cd:30:a0:24:6b:88:46:ea:65:83:
91:9b:b3:94:51:ed:c3:9d:ca:c5:00:1b:76:ac:05:
43:02:95:af:ee:4e:36:b2:85:12:e9:83:2e:d2:c8:
b2:11:09:51:27:99:b4:8d:07:94:83:c0:cc:c2:5d:
50:25:e3:80:fc:9d:6f:95:ae:14:58:37:30:9b:20:
17:ec:f7:aa:f3:49:59:0a:dc:cf:c0:b6:78:06:3d:
52:cf:99:6b:4b:95:6e:06:f7:c0:81:bc:21:25:ea:
5c:8f:69:86:a7:dc:f5:ec:fb:14:9b:74:57:7e:db:
26:2f:ff:97:76:44:da:e9:e1:aa:6f:b5:b0:74:59:
18:8e:04:a4:6b:67:13:d3:7b:06:ce:01:61:ef:3f:
a8:d7:a5:5e:93:90:44:06:83:0b:c0:d4:eb:70:b4:
a3:b6:7f:3a:42:c1:01:b8:d8:0d:c9:2a:e5:53:0d:
d5:76:d5:6f:6c:25:3e:fd:07:21:e8:ef:9e:7c:67:
cf:57:a3:f5:c0:28:19:0c:88:e7:70:71:22:d5:7b:
0b:cd:a3:6e:bf:b8:73:9e:61:63:9b:da:2a:6f:58:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:F5:9C:B6:04:45:61:B9:1C:76:E7:23:4A:01:EA:F5:E0:84:25
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a883e39-16d8-4cb9-b7a7-fa3d85e986c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a40::/47
Signature Algorithm: sha256WithRSAEncryption
6f:f4:00:78:66:9f:8e:93:e4:7b:44:bb:95:f2:7b:e2:ad:7f:
49:eb:d1:b2:30:c1:10:98:2a:99:ce:8c:bd:8c:81:8c:3d:85:
2e:9b:4f:5e:4b:26:d7:01:e2:08:0f:09:ef:6f:f2:80:99:8b:
be:92:78:8c:bd:cd:d1:c1:2a:3d:81:5d:80:e5:5a:e8:da:ed:
59:f6:98:ce:69:a6:91:08:b1:e7:8f:af:53:b4:d6:bc:ea:dc:
0f:89:48:1f:c9:a2:77:93:55:4c:08:30:35:f2:b9:6a:f3:d8:
5d:ad:3d:a3:66:4c:97:02:53:66:ba:2c:1c:49:b0:2c:65:33:
d6:c1:46:8b:08:91:bd:9e:e1:5f:d9:7a:43:38:5d:14:06:d6:
ba:21:9a:6e:3d:5f:c2:80:61:53:20:ff:bc:8b:d7:76:4e:8b:
7a:01:af:e4:84:9b:14:59:58:f0:8e:a5:09:34:35:b6:95:b1:
eb:cc:5c:d2:ef:6e:d1:03:96:d3:ef:77:2f:63:90:74:b5:bb:
ec:74:2f:e3:b8:1b:27:3d:17:8b:51:a6:59:d0:1c:4b:3d:ed:
17:91:e1:7f:b0:a7:15:4e:d4:f0:83:d8:10:b5:05:69:2b:d9:
88:9d:26:86:d3:26:17:92:61:1a:4b:df:78:3e:44:df:1a:d6:
05:51:ce:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:23 2026 by rpki-client