
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6ebcccd-53e2-4013-9554-fc6d8a153551.roa
File: a6ebcccd-53e2-4013-9554-fc6d8a153551.roa (raw, json)
Hash identifier: lpAenP9e3DexEfUX+hIr8jSmvL8G5qrwEK7mcUUZTN0=
Subject key identifier: A3:DA:8C:0F:27:BC:60:71:C8:C5:41:AF:59:AD:40:0E:4C:88:86:EF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 69495591B3B25A786F806FCEB0430C203FC1E034
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6ebcccd-53e2-4013-9554-fc6d8a153551.roa
Signing time: Thu 10 Sep 2026 01:41:07 +0000
ROA not before: Thu 10 Sep 2026 01:41:07 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1166::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:49:55:91:b3:b2:5a:78:6f:80:6f:ce:b0:43:0c:20:3f:c1:e0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 01:41:07 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=7cb285bec4c8179459ed15feacae8bed22a48184d73ed0c816ab295a1025d353, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:ac:d8:86:80:65:77:e3:d2:8d:3b:70:07:
80:aa:ea:f6:b4:1f:4a:08:a4:a2:49:69:57:d8:ec:
78:13:18:ce:15:60:8a:b8:51:4e:28:8f:9f:43:2c:
80:2e:2a:0b:71:bc:44:b4:ef:a6:a8:fe:24:2c:5c:
6b:5e:5c:e3:39:4a:7d:9b:f9:d2:84:5d:77:56:2d:
d3:7a:7a:1f:1e:a8:b3:d5:75:47:4c:77:76:cc:c5:
99:a0:99:43:31:10:9c:d4:1e:10:e5:69:ab:00:9c:
ac:3c:0b:eb:4d:2c:70:76:7a:44:2e:58:68:b1:e9:
53:b3:86:72:c7:af:aa:1e:30:1d:f0:cf:d0:6f:ea:
d5:22:27:05:4b:2a:d9:33:82:4c:6d:bb:7b:8d:a8:
64:18:36:9c:93:10:53:22:14:fd:c0:6d:45:09:d6:
91:4b:88:ab:75:f0:6a:75:b8:3d:bd:72:94:9c:e5:
78:9c:4d:41:9d:97:55:1e:3f:18:4a:8e:d7:ed:a7:
80:97:d2:15:7b:a3:0a:37:fd:d2:84:a9:25:62:5f:
0a:b4:c0:c6:46:f7:5b:ef:2a:66:00:eb:55:00:c9:
25:b0:af:1e:e0:6a:b5:46:2e:3c:48:ca:f6:84:fd:
7e:f7:0a:94:db:bb:d0:8a:61:24:a9:46:72:60:39:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DA:8C:0F:27:BC:60:71:C8:C5:41:AF:59:AD:40:0E:4C:88:86:EF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a6ebcccd-53e2-4013-9554-fc6d8a153551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1166::/48
Signature Algorithm: sha256WithRSAEncryption
31:29:e3:05:47:15:4f:51:d4:ab:78:29:24:f8:c4:fb:2c:24:
fd:ff:e8:9c:bd:18:61:97:84:93:77:a0:77:db:e7:8f:ea:c5:
3d:84:b7:ba:8e:33:05:fc:d1:c8:ed:27:bf:62:18:e4:f6:44:
10:a9:f4:9a:73:48:57:f5:6f:48:55:0f:ed:09:4a:58:9b:4f:
16:55:be:6d:c3:91:52:b4:a7:6d:4a:64:03:1c:cf:5c:f5:c3:
ed:44:89:dc:71:06:b1:5a:16:d7:61:c6:c6:01:a7:23:b2:c2:
d4:17:15:59:c8:86:68:51:44:ac:26:90:83:ce:08:72:f3:5d:
09:1e:92:cf:22:ee:80:00:fd:18:f5:10:31:78:a0:e4:32:1c:
a2:e3:e8:64:79:f0:74:e0:63:51:e6:bc:9a:40:ae:9b:2d:48:
fb:58:37:fd:03:3b:c3:b4:05:65:9e:e4:d4:72:71:0a:24:97:
65:6a:88:f8:df:6b:5c:15:4a:5d:5f:30:6c:7b:fc:2b:69:b8:
76:3b:0a:53:e6:7b:55:e2:c9:ed:a5:5a:2d:67:ef:dc:fa:b2:
79:63:d8:0b:d3:81:1c:d5:24:e3:bb:7c:b9:dd:20:cf:e1:ac:
17:57:25:dd:36:dc:4e:73:48:a9:cf:d3:48:bf:df:89:3f:a8:
e6:0d:d8:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:08 2026 by rpki-client