
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b77b0480-a1f8-43f4-9bb7-0c2321e38071.roa
File: b77b0480-a1f8-43f4-9bb7-0c2321e38071.roa (raw, json)
Hash identifier: gSJwdMCz2n6GEaRmCanT8GdV0yuqDnLP7542yZnPD9U=
Subject key identifier: C9:7B:40:95:D3:E7:12:B6:A2:07:A9:6C:66:AB:34:FB:C5:95:89:CF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 47AAFB5FF16455F3F1A8AAD1A108E2EC791BFAB9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b77b0480-a1f8-43f4-9bb7-0c2321e38071.roa
Signing time: Fri 13 Feb 2026 08:01:28 +0000
ROA not before: Fri 13 Feb 2026 08:01:28 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:38a4::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:aa:fb:5f:f1:64:55:f3:f1:a8:aa:d1:a1:08:e2:ec:79:1b:fa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 08:01:28 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=21bb9de8bf26ddfd9a16ae2da30fb52af109b3fea8ee998e3e0b88e15cdf22f1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:b7:ab:d3:c1:5c:44:91:7f:65:fa:86:a5:
f6:19:88:4d:87:4c:19:9f:a9:a7:65:71:ff:a0:6a:
17:dd:08:92:76:f6:94:17:b7:e6:5c:00:aa:d9:47:
73:b7:cf:04:dc:d7:81:02:57:b3:a8:da:9c:ea:16:
f1:d8:ca:c0:74:87:33:21:b3:6f:3c:e9:fc:47:90:
95:34:59:8b:c3:6c:ed:11:51:9e:c2:bc:43:cb:3d:
c6:81:a5:d1:d8:2d:4b:0e:88:d6:99:57:28:e3:56:
3b:65:b2:d6:76:e9:bd:e2:5f:1d:64:31:a5:9d:56:
e9:a2:b8:9e:42:27:8c:79:1e:47:79:4d:d0:e4:54:
fe:94:eb:f3:a0:b5:7b:10:fc:20:2c:89:ab:c4:95:
2d:a4:ea:82:ff:00:d6:dc:cc:0b:49:77:a4:f3:7f:
c2:ac:d6:aa:a8:72:e8:4f:ea:37:95:cf:2c:23:3d:
aa:43:c7:94:e2:ea:a0:24:bc:f0:1c:d8:13:da:50:
c2:03:64:ee:83:6e:cb:7e:88:af:c9:da:b6:84:aa:
97:13:10:88:d3:30:18:67:3d:e1:1e:01:b8:32:67:
8e:99:bf:04:d4:a1:a4:0e:a8:4b:1f:51:74:35:99:
26:0c:8a:8d:4f:79:93:a8:57:d3:1f:43:72:99:3c:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:40:95:D3:E7:12:B6:A2:07:A9:6C:66:AB:34:FB:C5:95:89:CF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b77b0480-a1f8-43f4-9bb7-0c2321e38071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:38a4::/46
Signature Algorithm: sha256WithRSAEncryption
36:c8:a6:cc:66:51:1e:7a:83:12:c4:96:1c:fb:64:01:44:c0:
97:b1:8e:e4:7d:b4:2e:87:30:6f:87:75:22:22:2f:8b:1c:4d:
96:be:57:f8:1d:5f:db:17:79:68:76:da:fa:eb:40:b8:91:cd:
61:55:8b:87:95:1e:d9:f2:e7:1c:47:0e:dc:a1:3f:39:d0:93:
ef:04:a2:7e:f0:ac:73:a1:97:00:66:e6:d8:6e:96:7b:df:01:
bf:70:bf:b3:57:5b:b5:0e:20:b9:fd:05:c5:13:88:8f:01:c3:
11:5c:ba:85:fe:cf:84:ce:90:0f:36:b4:50:16:68:22:3d:92:
1d:6c:2b:1e:af:44:2c:f9:7d:dd:9a:fe:b5:87:80:2a:95:9e:
a6:75:29:b0:d4:19:34:0b:dd:6f:b3:8e:cb:3d:bf:fe:b1:57:
04:77:ea:db:37:50:0b:02:4f:c5:79:4c:5e:f2:22:bf:7a:6a:
76:2e:54:e5:e9:73:f4:8d:7e:8a:2d:5f:df:b1:3c:fa:ca:e8:
6b:2a:00:c0:19:77:78:3a:32:34:44:4f:d9:e4:fc:57:42:e2:
f0:c1:f8:01:03:f3:90:fd:90:b6:b1:af:5e:94:da:a8:0f:52:
db:81:79:e1:37:c0:c0:d4:18:e9:53:de:35:2e:05:5e:4d:74:
6e:31:5f:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:18 2026 by rpki-client