
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fc5f0fe-c255-497b-a8be-5563f4e346de.roa
File: 8fc5f0fe-c255-497b-a8be-5563f4e346de.roa (raw, json)
Hash identifier: OU2NOdd2dxELVK6j328R/gjpJcKkt6hXrwsFonzng+U=
Subject key identifier: 0B:70:E4:C0:49:CE:EB:B6:6E:04:31:FE:E3:8A:88:0D:3D:C8:37:3A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 713FD3FF2616EFE3CD1E040E683A3B02AE68A672
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fc5f0fe-c255-497b-a8be-5563f4e346de.roa
Signing time: Fri 03 Apr 2026 01:50:53 +0000
ROA not before: Fri 03 Apr 2026 01:50:53 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:10ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3f:d3:ff:26:16:ef:e3:cd:1e:04:0e:68:3a:3b:02:ae:68:a6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 3 01:50:53 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=9bb6bf3199a4df505143fb32ffe9e0ecb4841b284c4cda157a9b8223421b8e6f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:04:eb:39:20:d9:45:74:58:1e:81:33:12:
68:c1:22:3a:76:1f:35:0f:31:48:d1:d3:82:1e:c2:
08:74:4e:d3:75:f2:11:52:fd:e3:5a:f7:49:01:43:
86:c2:23:d0:bf:7c:57:a0:f2:75:72:e4:ff:10:f5:
69:5e:bb:7e:f0:e4:47:9c:6f:96:c0:c6:4a:4c:e5:
b6:c2:51:b4:e4:83:4d:3a:d7:6e:5a:96:e1:35:1e:
f2:5e:8c:44:eb:b0:60:33:5c:0e:58:23:46:38:8a:
57:8f:da:4f:9c:f7:dc:cb:5f:2d:6f:2e:bd:9c:64:
39:20:5f:0f:4b:8f:79:4b:ee:be:a9:27:ff:6f:c3:
99:99:cb:18:62:51:c1:38:3d:a2:b1:51:0b:c6:07:
e9:31:ba:a0:7b:ad:e6:7d:8d:e0:c9:08:f6:7e:a3:
71:98:51:1a:c7:89:6a:90:96:c2:76:ad:5d:d3:95:
70:9a:ee:0c:c4:e3:cf:76:ce:d2:03:a7:41:0f:6f:
08:73:b5:a7:6c:75:22:07:e9:bc:18:6d:d7:4d:f4:
77:b5:6b:33:b1:69:b7:62:57:50:7b:e2:68:78:f7:
67:42:5d:ef:58:e9:38:fe:eb:e9:6f:83:f2:37:11:
86:20:8c:e0:03:72:63:11:ec:72:f4:0a:1a:b3:93:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:70:E4:C0:49:CE:EB:B6:6E:04:31:FE:E3:8A:88:0D:3D:C8:37:3A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fc5f0fe-c255-497b-a8be-5563f4e346de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:10ce::/48
Signature Algorithm: sha256WithRSAEncryption
47:9b:69:9b:1c:35:4c:99:cd:61:48:2d:c6:ce:74:42:02:f2:
f9:3e:05:7e:f5:8b:8e:03:d8:8d:05:8d:2a:e2:5a:1d:a7:0c:
bd:71:e3:c2:95:78:f2:cb:06:9a:6e:47:d6:ea:4d:e7:11:d0:
9a:91:7f:3a:f2:77:6b:e2:84:d4:27:a2:28:22:c5:8a:47:e6:
34:f2:5d:0d:71:1f:38:cf:91:29:1c:38:94:ac:e7:8e:ae:e7:
e4:e5:c0:00:a8:ea:0e:e4:70:46:4d:59:35:56:5a:f6:2e:fa:
f0:bd:25:dd:47:7b:f8:04:d3:f7:15:ff:bf:18:c3:a1:60:be:
9b:80:6b:19:a4:08:23:a6:eb:ac:a5:cf:9d:ef:2e:62:be:69:
d8:b5:41:98:7c:03:cc:d3:fe:44:93:37:20:9a:04:88:ad:20:
80:e6:bb:72:9c:e6:ac:52:a6:57:84:88:27:5d:04:00:d1:52:
e7:8c:1e:76:17:f4:36:b7:28:aa:94:9b:a7:ba:85:41:9c:84:
61:dd:7f:fb:f4:fd:60:d8:af:4e:e6:76:b0:a5:8e:e1:10:d7:
77:8a:6d:20:91:d7:5a:db:ee:00:98:d7:e2:49:84:7c:65:76:
36:9c:56:1b:3c:f9:d5:cd:34:eb:91:37:41:ae:f4:45:d6:e4:
a9:c1:80:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:01:15 2026 by rpki-client