
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aefe314b-8541-4183-baec-71e502411983.roa
File: aefe314b-8541-4183-baec-71e502411983.roa (raw, json)
Hash identifier: acThCtbwLzUf5Iq5e/1MFcNUmh7EWjFwJJP7UzpPJUU=
Subject key identifier: D1:E6:FB:3A:78:A2:D6:D8:B9:56:27:79:74:18:28:80:F1:02:BB:00
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4431256D3D50000D78964A564674FCB3927DACF5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aefe314b-8541-4183-baec-71e502411983.roa
Signing time: Fri 13 Feb 2026 03:50:49 +0000
ROA not before: Fri 13 Feb 2026 03:50:49 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3468::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:31:25:6d:3d:50:00:0d:78:96:4a:56:46:74:fc:b3:92:7d:ac:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 03:50:49 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=ab66718aaf1781592c5ab75e8d2c03490fa898e42f2bb91d78e8ab35eb1799d1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:e4:94:7c:da:bc:e9:d1:80:ee:7b:dc:a7:
1b:0d:ec:aa:dc:e7:0f:11:c9:40:d0:e6:2c:cc:52:
c6:0d:f5:79:b4:cc:03:4c:3c:01:58:e6:5d:d0:06:
e0:6b:cb:eb:0e:ce:71:12:02:a1:34:a7:28:b8:c5:
d1:d2:4b:cc:5f:7d:98:ab:0e:b2:f8:e8:4a:37:49:
06:79:e0:41:e2:44:1a:22:69:8d:77:ab:ff:b0:29:
89:f4:e4:27:5f:f9:8a:a8:37:dc:34:74:cc:c3:b6:
c1:b9:ea:62:06:e6:f8:de:08:54:4a:58:d1:d8:f5:
dd:56:6c:0d:fc:56:ea:df:d8:d1:e4:61:4c:b4:74:
64:4e:84:29:90:db:e4:83:43:81:6e:df:de:32:56:
65:02:9d:91:16:dc:a0:a2:d8:84:b4:53:e0:42:44:
0b:48:ba:a4:27:20:59:a6:58:f4:72:29:12:c3:a9:
de:07:1f:1d:ca:3f:a3:e9:ce:4c:fc:0b:60:d7:cd:
fa:b5:5e:3d:e4:0e:39:33:fe:32:33:4d:4c:a7:97:
e4:d4:da:33:0a:0c:4a:a5:66:20:fe:0c:96:d0:a9:
f9:14:33:29:78:db:7e:83:53:63:fa:a0:b1:8c:70:
91:c9:2e:27:6e:ab:c3:5d:1a:66:1c:38:12:b5:1e:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:FB:3A:78:A2:D6:D8:B9:56:27:79:74:18:28:80:F1:02:BB:00
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aefe314b-8541-4183-baec-71e502411983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3468::/47
Signature Algorithm: sha256WithRSAEncryption
9d:f6:6a:66:ff:1d:17:ff:bb:7f:b4:bc:2a:4d:da:42:00:ea:
e4:60:c8:62:3f:23:d3:84:9c:5f:9b:b2:f8:a6:ce:9e:4d:97:
69:d2:3e:88:76:68:a3:0d:57:3e:6b:b1:4d:83:2d:11:b3:74:
85:4d:a8:55:89:62:6d:1a:57:40:39:71:86:d9:ba:10:5d:1c:
15:f1:1e:00:45:ac:2f:a1:09:c8:a7:f4:95:2c:e1:9b:d0:bf:
04:30:41:80:d2:f9:32:d1:77:6e:17:c1:76:14:b8:33:79:9e:
51:46:0d:0a:62:de:de:b9:e7:3f:d2:b0:0c:d6:0e:f6:c4:8d:
65:6f:ce:1f:7b:43:32:8d:0c:2f:d1:48:c7:d5:e1:fe:4f:14:
2a:b3:3b:ef:e5:7f:bd:f9:27:05:b0:df:95:59:c4:57:32:dc:
1d:6b:37:0d:e4:47:a1:90:a5:9d:ea:cb:05:47:1a:bf:c8:d8:
66:42:c1:44:74:b8:f6:57:fc:84:bf:cd:7a:90:f1:d7:97:fe:
76:5e:be:3e:08:49:90:43:c9:14:64:8b:ac:81:2b:d7:41:21:
17:2e:bd:0c:87:55:44:94:29:82:05:fa:2f:94:78:8c:a0:1b:
77:eb:42:dd:2b:f1:30:d1:14:09:e1:bb:37:3d:91:5d:04:5f:
31:a7:83:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:30 2026 by rpki-client