
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a026bd95-13ec-435c-9176-0c384da322fa.roa
File: a026bd95-13ec-435c-9176-0c384da322fa.roa (raw, json)
Hash identifier: USMIYZN4MTpozToJzPz4yA+C2u4VDKKVkATzP7PfoqM=
Subject key identifier: 48:43:07:ED:A7:02:09:80:03:37:D1:D1:CF:4C:A2:32:C7:5E:A8:A1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7117BC1857405B38B1BCB0EBEF23B09DB6552949
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a026bd95-13ec-435c-9176-0c384da322fa.roa
Signing time: Thu 12 Feb 2026 03:20:08 +0000
ROA not before: Thu 12 Feb 2026 03:20:08 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2900::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:17:bc:18:57:40:5b:38:b1:bc:b0:eb:ef:23:b0:9d:b6:55:29:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 03:20:08 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=5d0475b725b1a4eed809ffc35924a36b59363694b4135adb211eba0a35bbad4e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:7d:9e:c4:0d:18:e2:7c:8d:dc:04:39:d8:
45:f5:2f:3d:ca:95:57:ef:ed:8c:f2:88:8d:d1:2b:
c2:aa:9e:72:01:ba:5a:de:96:04:9a:78:a9:48:bc:
ec:71:31:9c:e0:63:73:88:98:ea:5a:8a:f6:1d:17:
33:0e:74:2f:33:a3:fc:76:dd:c4:b8:88:a2:97:fe:
b0:98:ae:4e:43:bc:dc:6b:af:0c:d2:75:52:fa:f4:
81:c2:f0:cb:2f:e2:60:13:59:ce:06:aa:b9:44:22:
48:a1:d6:d3:53:e4:67:aa:c1:03:b2:0f:18:ca:c7:
73:70:3d:e8:80:24:93:f5:da:29:09:36:95:c6:0b:
4d:0a:02:b2:fb:38:6d:6f:87:71:e4:8d:9d:1d:0b:
c0:5f:d5:c5:b1:8a:3c:e1:45:92:f8:b8:99:5b:89:
c0:d1:bd:16:6b:0f:6e:39:b0:85:92:c4:67:6e:d9:
0c:89:8f:b8:57:ee:6c:88:41:4c:56:45:ed:97:36:
44:b5:fe:34:43:f2:82:9b:48:89:08:c8:d1:a4:62:
5d:a8:44:cb:ce:aa:05:5e:26:6c:62:a1:76:b6:d9:
74:cc:dc:5e:f6:5f:3f:41:e4:5d:82:7d:31:70:6a:
80:07:95:a7:50:d6:56:37:b2:76:78:12:d8:aa:0a:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:07:ED:A7:02:09:80:03:37:D1:D1:CF:4C:A2:32:C7:5E:A8:A1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a026bd95-13ec-435c-9176-0c384da322fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2900::/47
Signature Algorithm: sha256WithRSAEncryption
b2:8b:6b:eb:68:91:db:16:45:79:8a:f7:cf:80:45:0c:0b:69:
02:3b:d0:11:34:1e:23:6a:9e:17:1a:72:c7:94:28:4f:bd:fa:
6d:80:57:0e:e6:a7:4c:de:95:15:4a:9a:81:23:bd:7f:c9:aa:
78:05:64:68:16:03:02:cc:ea:2a:e6:4a:a5:99:bc:9b:97:f4:
62:a2:bd:83:e3:fd:d1:b1:c7:ac:48:5a:68:37:9a:88:66:b4:
6c:1c:f4:a1:7f:fb:ed:7e:b4:6d:e5:76:08:cd:f0:d0:03:43:
92:fd:c4:91:cb:0e:b5:12:fc:d5:f5:40:73:83:0f:48:15:d0:
12:a3:6c:cf:97:e4:89:89:15:8d:74:58:b5:f6:90:44:60:2c:
fc:01:11:db:fd:41:5f:57:71:26:f4:27:d0:8e:03:82:bd:ff:
c4:4c:6f:0d:dc:6e:43:13:14:6c:fd:cd:14:05:ba:f4:6b:0e:
42:27:fb:68:73:5d:b2:b6:fb:64:bc:95:4b:e5:5a:88:b7:ea:
7a:3d:68:61:06:e8:e9:e5:04:29:89:86:f6:76:88:38:f0:47:
fc:5c:cd:67:d3:e0:1d:2b:26:8e:9b:9d:72:dc:5b:ed:b8:c6:
47:4a:2d:a1:9b:d9:27:b7:00:ef:93:73:3e:22:5d:84:df:63:
df:06:90:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:53 2026 by rpki-client