
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4b090b0-2463-43cd-ad80-eef1cf88c6b3.roa
File: a4b090b0-2463-43cd-ad80-eef1cf88c6b3.roa (raw, json)
Hash identifier: nM49YOoc219uju6SA45Qt6ftPh4N/46W8rJSiUkJjxw=
Subject key identifier: 74:9F:50:FB:4D:B6:2F:06:75:16:71:A7:5D:68:6F:98:65:AA:09:75
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1BF0BAC5AAF5A422F51F3DCD776F1DEB4335DF34
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4b090b0-2463-43cd-ad80-eef1cf88c6b3.roa
Signing time: Fri 13 Feb 2026 06:40:09 +0000
ROA not before: Fri 13 Feb 2026 06:40:09 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3280::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f0:ba:c5:aa:f5:a4:22:f5:1f:3d:cd:77:6f:1d:eb:43:35:df:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 06:40:09 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=082a252c3693030d239f91c259cda6538677ef3068716c541b8daf42e5d275cf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:77:40:e9:b4:1a:05:85:53:db:e2:56:66:
af:f1:d9:8a:4e:5f:f2:ec:78:bc:9a:f0:95:90:5e:
28:a1:0b:ee:d7:ee:2e:0c:b7:cb:8d:3f:51:0c:b9:
06:1b:99:c4:bf:69:7a:50:11:19:9c:ec:c3:af:46:
8b:5e:81:42:f8:95:73:3c:f7:8d:5d:2d:37:8e:fb:
61:1d:32:8e:65:8c:44:9b:f5:e9:c0:dd:58:b4:c5:
4c:47:07:7c:5f:dc:fb:a5:e9:5e:48:c4:b7:28:9c:
21:62:1d:67:79:cb:43:85:4b:72:92:8e:44:dc:49:
aa:6d:ea:e1:49:8c:c4:17:53:f7:e8:4b:f9:86:38:
4a:58:ad:d9:6f:c2:e9:4b:39:43:06:b2:ff:48:04:
5e:a7:15:0b:a5:34:6a:3e:5e:b6:c6:c3:b0:ea:33:
11:a8:6c:cb:ba:52:d2:4c:02:15:fa:41:77:90:91:
87:ae:59:d2:ee:21:2d:63:55:37:e6:03:8c:7e:b3:
f5:2f:61:73:b7:7d:9c:62:57:f2:96:16:75:98:56:
d4:11:02:63:66:ac:78:73:2f:7f:5f:f8:d4:b8:8d:
ac:92:3b:70:ab:5e:69:4c:cd:92:72:7f:f1:a6:e2:
7c:c2:4d:8b:33:0c:4d:ee:73:34:fb:2b:72:a4:1d:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:50:FB:4D:B6:2F:06:75:16:71:A7:5D:68:6F:98:65:AA:09:75
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4b090b0-2463-43cd-ad80-eef1cf88c6b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3280::/41
Signature Algorithm: sha256WithRSAEncryption
0e:2e:de:8b:62:f8:20:0e:e8:6f:64:ce:2e:a1:00:f2:7f:5d:
ce:fc:c3:9b:fb:9f:2f:eb:d2:fa:16:ec:bf:b3:4a:ad:e7:06:
f7:aa:4d:be:88:4a:18:14:e7:47:81:55:f5:17:71:ed:aa:46:
9d:5f:1e:35:13:ec:2f:cc:9f:16:03:f6:c5:13:e4:8f:a4:e9:
fa:7b:8b:ee:8a:dd:29:9c:17:87:01:1d:d7:87:28:af:09:85:
1f:38:f2:53:b7:d5:7b:f4:4e:fc:7d:44:0e:26:c5:90:af:bb:
e4:be:43:38:2b:8d:b3:57:3f:03:dd:5d:03:40:4d:60:ba:77:
09:90:c6:31:86:37:0a:b8:63:15:44:d1:44:2d:8c:41:4b:8c:
f4:71:b0:c5:ee:32:66:4f:1e:54:45:26:43:a7:f2:ee:e1:16:
45:bb:67:b7:c8:7e:bf:a6:22:5f:cc:93:e4:96:2f:50:56:4e:
bd:81:20:4c:1a:d3:89:85:e8:0a:4d:f1:84:4a:9a:0b:bf:77:
ae:af:7b:58:31:c6:52:d2:0e:dd:8e:0f:47:d9:92:50:cc:dd:
30:9d:c7:93:49:02:14:cb:38:7a:d4:ab:2f:60:0f:8e:cb:56:
bd:69:c9:df:45:cd:95:2f:d9:0f:a3:0c:47:50:40:52:a4:1c:
cb:39:b0:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:47:26 2026 by rpki-client