
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8ee577f-2bef-433d-b30e-6c73ab658664.roa
File: a8ee577f-2bef-433d-b30e-6c73ab658664.roa (raw, json)
Hash identifier: 0HjtAO3n2/gxwle/S4ZwzLXlmZjowryDGQJ141kJeQU=
Subject key identifier: 5D:BF:03:00:CD:FC:0E:89:12:D9:F3:62:E8:33:C0:0A:6E:4D:2B:8E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6A8C948789DE9A9BBFA20287E70D9D077FC87B0D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8ee577f-2bef-433d-b30e-6c73ab658664.roa
Signing time: Fri 13 Feb 2026 03:30:40 +0000
ROA not before: Fri 13 Feb 2026 03:30:40 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:33a8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8c:94:87:89:de:9a:9b:bf:a2:02:87:e7:0d:9d:07:7f:c8:7b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 03:30:40 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=491fb17a85c7c5ce311133645b631eb7f42a97988f97679cb4dd5399f0e323d3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:1a:ed:3e:6e:b0:f1:3a:5f:3d:66:5b:6e:
46:19:74:6c:c0:a2:66:23:8a:a2:e6:59:b0:29:fc:
eb:3a:e9:cd:96:35:b5:dd:99:9e:5e:63:13:23:38:
e1:0d:a7:db:35:43:43:18:07:be:c2:d6:63:71:38:
f4:cc:2e:09:fc:9b:e3:a9:02:a2:ea:ac:7f:e2:d6:
48:4e:db:82:a9:48:96:68:70:88:8f:69:68:f7:85:
b2:7b:39:0f:0b:8f:55:83:a6:47:33:8f:e4:8d:52:
ee:af:21:d1:08:3d:b4:4b:1f:9d:10:b4:6d:cc:21:
d5:9f:03:e2:c7:5b:d0:9c:a5:84:99:59:25:0f:10:
3e:34:b3:15:99:6f:a3:54:54:6f:4e:dc:15:18:9f:
a5:78:d8:55:5e:8c:11:b9:c3:5c:e2:28:0e:5f:2c:
62:84:11:c2:57:86:aa:8b:35:cf:fd:67:38:8f:69:
e9:2f:87:38:47:a6:88:b3:b4:74:45:9d:61:b1:3a:
a7:e4:fd:16:9d:2c:d0:ce:00:a1:bf:0f:91:ea:52:
79:a9:6c:f5:f5:7b:6a:4a:0e:f2:95:0b:5d:44:76:
ba:07:36:41:54:c7:04:b6:f6:c5:d0:50:da:15:79:
4b:dc:5e:67:6c:ae:27:03:ea:21:53:c4:a2:c6:11:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BF:03:00:CD:FC:0E:89:12:D9:F3:62:E8:33:C0:0A:6E:4D:2B:8E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a8ee577f-2bef-433d-b30e-6c73ab658664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:33a8::/46
Signature Algorithm: sha256WithRSAEncryption
25:10:4d:e8:55:c2:e6:b7:81:56:10:9f:e1:66:c9:87:6b:d4:
60:2e:e9:55:ca:03:fc:df:f8:d2:b8:f4:12:59:4c:82:b3:fc:
d8:3d:82:d6:46:fc:87:70:00:d4:6d:ba:96:98:d7:5e:03:26:
f9:27:47:a0:7f:70:81:22:9a:50:19:15:60:94:da:98:a5:54:
b7:02:6a:30:59:1a:1a:9e:32:0e:55:92:12:db:7f:15:5f:ad:
b7:0b:4e:93:b7:de:c2:d1:88:31:eb:5c:35:cf:dc:c4:ab:80:
c9:87:b8:a8:d9:40:e4:ec:3b:24:1f:46:7a:eb:b8:10:64:68:
31:db:5f:c2:1f:52:82:1e:99:6a:9c:7a:79:a7:76:9f:3a:ba:
c2:a2:ea:ce:04:38:c9:cd:a6:3d:49:c8:3a:58:b9:54:50:3a:
19:68:ce:47:90:2c:bb:70:b9:16:a9:fe:f0:3a:1c:47:af:1c:
2f:aa:c6:d9:b7:5c:03:64:c3:9c:1e:40:fd:78:2b:f1:95:11:
11:5e:a8:31:93:ba:b0:9d:1b:12:46:8d:91:c8:f3:37:df:c3:
52:82:91:c3:4c:6e:51:17:90:63:35:8a:23:91:f3:0e:9d:b8:
5a:f0:3f:78:68:f8:c9:af:3d:fa:76:97:1c:86:ee:43:60:bb:
bd:5d:90:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:46:55 2026 by rpki-client