
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c17e2c9-c3e4-475d-aedb-b548e7a405b6.roa
File: 8c17e2c9-c3e4-475d-aedb-b548e7a405b6.roa (raw, json)
Hash identifier: wTsUdTO7FEFsTkXGMuZjfKdjf8yO6FBCSkKp+jElx2k=
Subject key identifier: DB:F4:AA:67:73:0A:D1:8C:52:61:96:AB:D0:AF:59:6A:9E:5D:CA:6A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0F4F959C087719CF09665B4750E0EAC4F33896A2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c17e2c9-c3e4-475d-aedb-b548e7a405b6.roa
Signing time: Thu 12 Feb 2026 01:30:13 +0000
ROA not before: Thu 12 Feb 2026 01:30:13 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3296::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4f:95:9c:08:77:19:cf:09:66:5b:47:50:e0:ea:c4:f3:38:96:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 01:30:13 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=9be775c5f4c8aa968c3d48cdaf95a75cf87235cb90bdec4877b1d167c6f6ce9e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:89:dd:c3:b7:c1:58:67:58:b0:9f:d0:7e:
29:03:ff:23:79:ef:f7:ab:c4:19:45:a6:3b:20:2d:
fb:a7:ec:66:e2:1a:7a:0f:0d:a2:ff:23:21:84:a1:
81:7d:67:9b:db:6e:1d:14:ee:05:cc:37:17:18:31:
4e:e1:2c:55:de:96:8f:40:1d:6c:9f:50:64:b0:d3:
c2:54:e1:ea:47:73:91:87:3f:36:3a:53:fe:03:d0:
0a:5f:57:f9:fc:29:4b:15:76:d9:a1:2d:86:67:37:
96:5b:a7:a6:ff:88:82:a7:cf:8c:b0:4f:b7:0d:6c:
4a:3f:f4:49:83:6f:a8:e4:9e:6a:11:44:ec:d8:af:
75:e0:9e:6d:59:ee:c6:bb:80:79:97:a0:66:2b:42:
c6:39:71:c7:ca:30:0e:80:1a:74:16:23:b8:30:2f:
c1:30:3d:0a:2d:5b:c2:a3:b8:9a:44:41:46:75:56:
56:0d:ee:43:ec:02:84:2f:9d:39:80:5f:34:09:9d:
24:96:89:87:8b:80:5e:1e:35:8f:73:76:08:c6:98:
1d:78:30:2a:a9:b4:96:a0:79:a9:78:29:5f:bd:4b:
06:9a:53:81:ed:ff:81:7b:c0:46:fa:35:45:8e:43:
bf:90:88:fa:ec:5e:7d:eb:5f:f4:61:ec:2a:60:91:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:AA:67:73:0A:D1:8C:52:61:96:AB:D0:AF:59:6A:9E:5D:CA:6A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c17e2c9-c3e4-475d-aedb-b548e7a405b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3296::/47
Signature Algorithm: sha256WithRSAEncryption
69:7e:c5:a9:57:42:b5:96:1e:39:4e:4b:08:d6:84:ab:ae:85:
04:48:9a:40:4c:22:6a:0a:f3:f8:dc:3b:be:9d:4a:d6:ec:fc:
82:ab:67:4e:8a:11:4a:f0:2e:53:02:d4:41:87:62:2d:5a:80:
13:97:9c:91:fa:57:d2:5c:36:fd:9b:9d:d5:a0:4c:16:fb:3e:
4d:56:4b:44:29:e3:4a:33:16:66:bf:9d:ce:7c:7b:d8:2c:c3:
1a:0c:d9:1d:e1:7a:fb:ef:fc:b1:48:99:2a:19:4a:9d:23:53:
a7:07:97:78:e2:51:a6:58:74:ca:b5:af:8f:d3:32:d4:f3:b0:
a0:20:ce:6b:aa:fd:92:40:3e:ae:2b:36:a7:02:d7:d6:3b:3c:
34:4f:12:91:d5:8e:92:76:a4:11:90:45:bb:15:5d:ff:69:9b:
b8:02:6b:48:dd:a3:00:64:3b:c5:fb:b4:7a:7b:1a:86:96:3d:
d0:e4:39:50:09:bb:99:43:d9:d7:fa:ef:7e:d3:31:2c:bb:1e:
4c:10:f2:43:9d:9f:5c:2e:a2:0d:13:a8:cb:0c:0f:d0:bf:5d:
74:17:c5:28:4c:7d:0b:ee:10:b3:7f:8a:90:e2:08:79:5a:fe:
3c:5b:eb:98:b5:e6:01:72:ef:1e:aa:02:74:8d:90:1d:d7:50:
8f:23:b7:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:40 2026 by rpki-client