
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a9eae4a2-41c3-4176-a422-63d2512f1ad8.roa
File: a9eae4a2-41c3-4176-a422-63d2512f1ad8.roa (raw, json)
Hash identifier: GFpe2fGi4J13phEr76WTOnLzqVru7wcpsdBDbBintZM=
Subject key identifier: 53:D0:37:CA:66:21:AA:D7:5A:C7:A9:A6:C4:55:EE:3C:E4:CA:8C:DB
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 261B76662E66AB2F049979D154F6E3E3A0B63E60
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a9eae4a2-41c3-4176-a422-63d2512f1ad8.roa
Signing time: Thu 12 Feb 2026 00:51:26 +0000
ROA not before: Thu 12 Feb 2026 00:51:26 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2df8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:1b:76:66:2e:66:ab:2f:04:99:79:d1:54:f6:e3:e3:a0:b6:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 00:51:26 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=645d1dd651d530448c2c7d905104a837671c602c8bcf90d7fff3f9eb020ec9df, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:86:6f:06:80:45:a4:ed:8f:e6:4e:46:5f:
fe:84:27:c3:ec:09:f0:f9:fe:8e:bb:8f:a5:95:27:
52:67:e4:56:71:51:1b:2a:06:70:ae:12:13:e1:46:
ae:68:18:58:dd:51:35:1a:0f:17:88:52:48:f1:f8:
bd:44:1b:1e:bb:63:32:5e:02:8f:45:fd:5a:74:b4:
30:70:7f:2c:b0:6f:88:68:18:43:59:d4:66:fa:d7:
c8:8f:68:3a:70:f7:8e:4d:c3:96:99:38:b3:08:41:
13:f3:14:68:72:e3:f1:3d:24:81:b9:aa:1b:14:9b:
fc:78:89:d9:d7:8e:cc:14:ce:ae:ea:56:72:d4:7c:
25:2c:d4:c3:a0:08:66:b3:26:88:80:f1:3b:e0:63:
4d:4f:c8:60:df:76:51:be:3c:bf:34:f6:c4:53:bf:
53:cd:53:71:27:74:08:4c:0c:56:d3:35:06:0a:bb:
5e:b2:c2:fa:3d:e1:34:0e:b6:8a:f2:6c:01:69:3f:
d8:22:30:3c:23:82:2d:ea:c5:d5:5d:cf:67:cd:88:
c7:54:83:b1:a0:96:5e:fd:c8:1f:13:a8:28:95:bc:
1e:db:16:ca:4c:94:86:8a:1a:70:c6:a6:60:64:87:
d6:a5:19:cd:cf:e2:21:a2:fe:3b:87:5e:03:cf:7d:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D0:37:CA:66:21:AA:D7:5A:C7:A9:A6:C4:55:EE:3C:E4:CA:8C:DB
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a9eae4a2-41c3-4176-a422-63d2512f1ad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2df8::/47
Signature Algorithm: sha256WithRSAEncryption
7b:f3:ac:97:34:6b:07:42:c3:2f:c1:35:ef:09:80:02:bf:0a:
e1:0b:56:52:98:90:30:98:0f:19:0e:c7:9e:d8:18:c0:ab:84:
b1:79:17:c6:65:a2:81:4a:b0:04:32:fb:a0:08:c4:15:f1:7f:
0b:38:5a:22:44:fd:96:20:eb:be:22:1f:2b:1f:0d:5f:f3:01:
7a:b8:8d:54:46:08:80:a6:50:ba:7a:f2:2e:d9:a1:9b:94:3c:
43:67:db:a8:89:e4:dc:de:f8:fe:fc:35:dc:2f:f6:9f:09:50:
86:ab:4b:37:9e:58:0a:f0:2e:5d:14:e5:72:db:ba:5a:ab:51:
cc:79:22:35:46:9a:79:7d:9b:a8:43:42:95:55:77:e9:ab:60:
22:28:f5:9c:47:70:cc:41:3f:ff:ab:1c:dd:ae:27:22:35:58:
30:ef:25:13:fe:ab:52:7c:90:95:fb:ba:f2:f2:6c:4e:f0:68:
a7:b4:e3:17:69:82:81:71:bc:b2:bb:6a:13:54:7d:0b:b9:46:
cd:0b:1f:f3:7b:ae:1d:f8:42:7f:bb:ec:a7:39:0d:d7:a2:b6:
72:2f:81:ff:88:99:3d:92:e0:b0:3a:01:cb:b3:41:3a:c3:4f:
cb:08:e1:da:a4:bb:fe:b2:1f:6f:70:39:91:dd:d1:93:f2:23:
fb:ae:de:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:50 2026 by rpki-client