
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a79aff5f-f14d-4a88-b528-82526bc69a86.roa
File: a79aff5f-f14d-4a88-b528-82526bc69a86.roa (raw, json)
Hash identifier: 0pW4mr7+H08LYLOcXL+zatkjqfeC3/pIvGLqYRHNfFo=
Subject key identifier: B5:A3:45:33:1A:0D:FE:7F:DE:6E:DC:8F:FE:C2:F6:30:6B:32:7A:4B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 371E626BAC79A859C622531372BAD12E850B2521
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a79aff5f-f14d-4a88-b528-82526bc69a86.roa
Signing time: Fri 13 Feb 2026 02:42:04 +0000
ROA not before: Fri 13 Feb 2026 02:42:04 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3400::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1e:62:6b:ac:79:a8:59:c6:22:53:13:72:ba:d1:2e:85:0b:25:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 02:42:04 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=90e8ff54b492586891bdb2a6f3dc7deeeca3eb03b59f1f6c9098270ca0739e49, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:3e:aa:46:2e:8a:db:7b:39:09:da:fb:fc:
6e:80:75:23:82:10:5c:e6:ce:17:7c:34:98:b9:ad:
32:78:0b:3f:b1:ae:30:72:c1:13:b0:d1:06:a5:d7:
76:e6:a1:0e:36:9f:71:14:82:70:46:be:e6:7b:6c:
f9:70:ff:36:fc:41:fd:fb:f0:04:c8:70:30:02:c9:
48:18:0d:69:2e:41:b1:58:74:9f:4e:83:2f:0e:05:
d4:2c:e6:d2:b1:6b:73:85:48:3e:20:58:58:e2:9a:
0e:f0:b0:86:4b:a0:90:9d:a3:dd:d6:9b:ac:27:6e:
9c:83:13:f3:bc:7c:d0:eb:99:12:8e:8b:e0:78:23:
45:e6:69:d2:5b:e0:73:be:06:d2:dd:5e:08:21:bf:
80:36:6e:62:6c:18:cc:2b:5f:79:f5:31:60:d6:bb:
55:19:0c:20:d0:d9:66:03:4d:85:69:fa:f7:49:f3:
8d:6f:50:70:bd:ea:aa:0f:67:4b:96:46:c8:9e:8d:
f0:a8:ee:c5:98:37:a3:72:b3:23:56:c6:9c:5a:56:
09:ec:63:f1:1a:32:1f:b8:65:6c:90:23:e9:c2:28:
b9:74:64:31:a5:51:14:c2:9b:43:2d:47:59:da:8a:
da:09:0c:07:f8:67:e2:9b:53:82:80:e4:e9:f5:c6:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A3:45:33:1A:0D:FE:7F:DE:6E:DC:8F:FE:C2:F6:30:6B:32:7A:4B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a79aff5f-f14d-4a88-b528-82526bc69a86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3400::/47
Signature Algorithm: sha256WithRSAEncryption
72:25:f8:3a:10:c4:72:99:12:26:27:d1:ba:78:c5:22:30:2c:
36:95:60:f5:c3:2b:67:c6:d8:96:4f:aa:a5:c3:ed:c6:dc:2d:
32:1a:11:12:81:08:d4:b6:7c:87:f4:1d:da:eb:c7:60:3c:c7:
65:81:d4:c9:1f:6c:8a:a0:f8:6a:4a:a6:ff:46:cf:01:bc:80:
19:74:e6:1c:2b:a9:21:52:6e:8d:ae:4b:3f:28:f8:1d:8e:57:
92:7a:1a:ef:2e:52:bc:de:e6:53:4d:f2:f5:3c:bb:fa:e9:91:
cb:ed:54:d2:27:b3:28:c1:be:d6:18:4d:a2:ed:1c:01:b9:8a:
59:88:23:d0:55:46:c9:59:73:e5:2e:5f:bc:d3:d1:05:dc:52:
44:12:26:e4:cb:c0:47:6f:9c:7d:1c:c6:a1:55:34:5f:86:3a:
9b:2f:79:56:1d:0d:a8:5e:b1:0f:a0:26:b5:49:87:3d:ed:99:
fa:08:1a:9f:e1:81:af:ba:d3:4e:1c:eb:9e:5b:d5:ee:a6:ee:
37:02:5b:2f:9b:e2:8c:b4:da:93:c9:a9:5c:cd:77:d2:2e:92:
6e:0c:d5:38:a3:aa:62:e2:94:e6:0b:95:02:e5:69:85:28:c9:
69:0e:ac:42:24:9b:20:10:d9:1e:d9:fc:20:07:dd:c8:1d:da:
e7:b1:2b:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:39 2026 by rpki-client