
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1ddcd23-13e8-433c-8d50-059e4214f6a0.roa
File: c1ddcd23-13e8-433c-8d50-059e4214f6a0.roa (raw, json)
Hash identifier: eJD/Qv+F/o37ljfTbEko6XFE5m2qPhmctyO9wruCbIo=
Subject key identifier: 83:A0:86:FF:B3:2D:3F:99:CC:51:30:AF:B1:C3:9C:8C:C1:3A:BC:38
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5A7B54DE52DFB8D8815867D717AD428D4378D6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1ddcd23-13e8-433c-8d50-059e4214f6a0.roa
Signing time: Fri 13 Feb 2026 13:52:02 +0000
ROA not before: Fri 13 Feb 2026 13:52:02 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:365c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:7b:54:de:52:df:b8:d8:81:58:67:d7:17:ad:42:8d:43:78:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 13:52:02 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=4bf5dafac46f04f23e530136f38701cc138dbf4d5bcbb3c7d6d8448e1a0500b8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:40:71:e0:95:9c:bb:63:c4:83:ed:1e:59:
c3:f8:e0:55:4f:1c:ab:42:6d:2b:85:e7:9d:8f:07:
55:ab:94:9c:26:58:b7:c7:f5:7d:cb:8f:6b:2f:04:
22:fc:f2:f6:c0:65:79:63:37:01:4e:96:6e:e0:82:
32:fd:18:b7:9e:f4:0d:05:95:60:01:90:f4:ba:b4:
89:81:83:27:80:4a:6d:55:26:f6:ed:72:81:2a:3e:
9c:a7:e7:14:f1:87:56:22:df:e4:c7:dd:14:f5:1b:
b5:ec:5d:ac:cc:c4:b8:59:95:ba:aa:a7:38:e4:e8:
85:a1:74:59:d0:5e:18:22:37:1b:6f:9a:77:ee:a2:
cb:90:4e:9a:43:66:96:55:5c:81:25:dd:5b:f8:15:
9f:a4:bd:7c:01:94:39:a6:8d:c7:9c:d5:4f:c3:e7:
b8:e0:30:76:1c:1e:cb:0d:7b:1f:6b:cc:1b:d7:98:
10:eb:b6:8b:32:a5:81:2c:85:76:d8:9c:0c:e7:d6:
d9:22:77:4b:bd:bf:79:63:d3:1e:58:77:22:7f:76:
31:3e:a7:17:d9:6e:ec:eb:06:c0:fd:78:ad:67:d8:
c6:19:43:ce:0a:ef:fa:c2:23:77:57:b2:ed:94:5e:
18:f4:ef:10:ba:6b:02:ef:eb:30:7d:99:1b:84:54:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A0:86:FF:B3:2D:3F:99:CC:51:30:AF:B1:C3:9C:8C:C1:3A:BC:38
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c1ddcd23-13e8-433c-8d50-059e4214f6a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:365c::/46
Signature Algorithm: sha256WithRSAEncryption
10:87:21:37:fa:ab:68:ab:fa:13:18:a9:2f:14:5a:0b:78:82:
a4:52:33:74:87:66:d4:69:47:84:b2:c3:2c:fa:96:e5:1c:d8:
26:a6:98:ec:db:a9:1b:0f:4f:87:fe:40:31:a6:c2:69:c4:c2:
4e:bf:3a:92:54:09:93:9b:f7:00:95:71:7e:7f:f7:a3:24:9a:
c3:8d:c2:c4:c0:db:4e:3e:ec:09:de:e5:51:58:4a:ee:61:ef:
f4:00:25:1b:e8:73:7d:c2:02:93:00:38:a2:a5:e9:64:be:78:
76:34:b2:b1:a1:8b:40:c4:8d:0d:2d:a4:b9:a9:6b:f2:1e:8f:
4b:19:81:a5:2d:20:bd:1f:32:6e:23:9b:67:2c:6a:04:ee:70:
3d:83:90:cc:a4:7b:ff:ae:41:df:2a:e3:21:57:06:98:a4:fe:
47:ad:1d:a3:80:b3:1b:e8:11:34:e7:c9:62:d0:fd:95:4b:ff:
45:46:e5:a9:b9:f2:ea:2b:13:e6:74:1b:82:0c:7c:c6:53:4b:
6c:c1:a2:e8:b6:4c:fb:2c:96:59:55:21:59:2a:4e:c0:68:38:
ca:94:19:60:72:bb:e7:cc:e1:49:04:7c:2f:43:f7:1e:76:07:
cd:1c:d1:04:d1:a2:1e:96:79:aa:a0:e3:b4:ca:8f:fb:b3:24:
93:16:7b:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:11 2026 by rpki-client