
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2bb31ac-01a0-4e71-907b-7505af3898df.roa
File: a2bb31ac-01a0-4e71-907b-7505af3898df.roa (raw, json)
Hash identifier: FQJtebgOz0gHZqpMX1bsHJOWMF6OEjwD2g9JKQXFPnE=
Subject key identifier: DF:97:D1:36:27:7E:E6:24:C6:BB:66:DA:D1:7F:48:91:51:C2:B1:F9
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6F2C36F6DB788C2E38582E0D9E364F2A4910684A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2bb31ac-01a0-4e71-907b-7505af3898df.roa
Signing time: Fri 20 Feb 2026 00:50:11 +0000
ROA not before: Fri 20 Feb 2026 00:50:11 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 216.137.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2c:36:f6:db:78:8c:2e:38:58:2e:0d:9e:36:4f:2a:49:10:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 20 00:50:11 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=89a73a945d213b3648159a2976b71b1de6c857bb17632badba3de648e8a6d1ce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:a9:04:ff:e6:19:83:5f:3c:70:82:39:c3:
13:a5:c8:95:9e:21:23:98:25:b1:52:55:f5:9f:ce:
cc:ba:1d:1f:f1:3e:ff:74:66:f0:d9:61:ed:d6:e8:
62:00:93:8a:24:cb:3d:12:11:51:e2:b1:b6:1d:9b:
35:b9:21:18:81:a9:6b:59:37:a7:22:dc:2d:7c:6d:
b5:71:13:51:3e:a9:a9:66:e1:ee:dd:ad:ae:40:ff:
5f:b9:67:58:e3:ba:b9:49:34:49:e9:04:3c:62:6a:
65:2b:57:08:2a:97:c4:26:70:f0:6f:cc:25:b9:53:
fc:fa:93:11:4d:a4:88:5a:a8:36:7e:ab:b9:1e:e5:
c4:6e:88:3c:52:42:dd:5b:79:5d:4a:36:c1:ae:63:
d6:51:d3:95:88:22:61:05:51:a3:f0:ed:c0:a2:98:
a1:50:14:d9:19:92:5c:40:bf:6a:24:30:5a:96:66:
42:a1:a2:19:7d:3d:29:08:b6:cc:aa:b2:d8:5a:71:
35:2f:b1:23:52:4a:98:2a:7e:df:91:24:41:3e:66:
6f:d4:a8:4f:f5:6f:1a:26:73:f9:54:bb:09:24:47:
af:b5:3f:be:ac:b3:d7:e3:d3:11:99:d0:1d:c5:25:
43:1e:a6:f9:ba:4a:ca:20:6d:bf:26:04:9f:0b:5b:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:D1:36:27:7E:E6:24:C6:BB:66:DA:D1:7F:48:91:51:C2:B1:F9
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2bb31ac-01a0-4e71-907b-7505af3898df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.137.48.0/21
Signature Algorithm: sha256WithRSAEncryption
91:ba:a9:80:39:35:e2:bc:51:af:57:83:d6:cf:7e:5a:a4:ca:
0f:4b:48:e3:5c:15:f5:72:60:52:95:ab:c9:cc:ca:ee:1e:60:
ed:be:3b:d3:90:3b:d6:5b:b6:b9:e0:38:96:a6:6a:a8:08:bf:
27:28:9b:1f:69:96:bb:fb:06:fe:64:3b:36:d9:6e:d8:0b:86:
2a:a8:2f:71:37:36:13:40:f3:07:56:bf:ab:30:b8:1a:63:5a:
dc:d1:81:20:e1:91:24:74:99:af:b0:71:91:69:6e:95:c6:f0:
3f:32:07:23:ee:83:4f:56:c9:34:10:94:7f:c1:8a:75:e3:9e:
a2:bc:39:0d:79:c7:d8:02:d1:bb:4f:48:10:2c:51:ee:0d:60:
f2:a9:f8:b6:f9:42:e9:c0:5b:58:a7:f8:30:9c:85:d5:67:65:
9e:37:14:f9:ce:d4:4c:f2:6c:27:d6:37:71:0e:b3:24:eb:cd:
9b:ac:1c:c1:b8:b4:e6:44:30:38:43:76:06:45:d6:44:9c:df:
e5:5c:c3:65:84:3a:cd:c3:09:04:0d:65:37:5e:00:85:a4:5e:
24:5b:fd:a9:4d:cb:77:d4:e7:34:1e:4d:69:e1:2a:2e:9b:95:
f3:78:c1:4b:bd:e6:45:d5:4f:c7:50:65:8f:f6:b1:10:95:f2:
9f:01:36:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:49:27 2026 by rpki-client