
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c398d245-103b-4f48-b698-3fc18eb33bd8.roa
File: c398d245-103b-4f48-b698-3fc18eb33bd8.roa (raw, json)
Hash identifier: Cdf2r3TJy34mb0i8oI1vHu5CPAAwRTz1rQmBzYA59NU=
Subject key identifier: C8:8D:47:C3:76:EA:7B:11:97:A8:72:7A:FA:3C:B5:17:A9:3C:09:7B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1899FC85ED411621FA8192C4B7E9FC72E397EB0D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c398d245-103b-4f48-b698-3fc18eb33bd8.roa
Signing time: Fri 13 Feb 2026 07:21:28 +0000
ROA not before: Fri 13 Feb 2026 07:21:28 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3c18::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:99:fc:85:ed:41:16:21:fa:81:92:c4:b7:e9:fc:72:e3:97:eb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 07:21:28 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=f1382495940f533c5335515aa2f01e7a598445fa1704e35526880422b0fd381a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:1c:c8:62:d2:53:04:6b:66:19:59:2d:1c:
87:47:03:a8:da:d0:76:36:d1:8f:02:2e:d0:49:64:
0c:84:80:f0:fd:09:9a:59:b8:1c:a9:aa:91:be:d0:
16:95:e3:7c:76:73:05:ec:4b:a6:ef:3f:ef:8f:1d:
d1:22:2d:f8:db:7b:6e:51:51:62:f3:d6:d9:9f:a5:
60:60:16:24:bd:ee:1d:09:7b:c0:36:fc:8d:b2:ce:
ba:16:04:10:aa:01:4e:27:76:2f:17:03:cc:dd:bf:
11:6a:e1:e0:e8:b8:2b:a8:88:5d:94:4e:88:09:d7:
81:15:64:cf:4d:0f:3b:bb:0d:9a:8c:b9:64:98:a8:
ae:a8:45:9c:96:c1:67:cd:b1:12:1d:28:68:25:9b:
8c:c3:ca:8a:01:6f:7f:a5:ed:6d:db:7c:4e:c2:3f:
85:c2:a6:dc:68:45:e0:5e:6a:9c:0b:17:32:cd:ee:
b4:ef:b0:8f:51:15:8f:fe:1a:a9:18:04:b4:d9:e5:
36:59:10:02:d1:e0:3b:69:2e:18:39:b3:9a:88:c0:
cb:56:95:00:3f:59:9f:cb:f9:95:6e:0a:23:7f:bb:
7e:54:d7:80:6b:9c:dc:45:4a:ea:78:9e:8d:3b:c3:
65:ec:e3:c6:06:11:cc:ff:98:a4:67:d7:d6:45:42:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8D:47:C3:76:EA:7B:11:97:A8:72:7A:FA:3C:B5:17:A9:3C:09:7B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c398d245-103b-4f48-b698-3fc18eb33bd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3c18::/47
Signature Algorithm: sha256WithRSAEncryption
08:2d:13:e2:9b:0d:f2:4e:6d:9c:85:6c:d7:66:9c:28:ee:b0:
7f:44:7e:8d:f3:29:01:70:4e:13:f3:92:56:34:f9:35:9d:0e:
ab:a1:91:1c:f2:6c:e4:c1:bc:23:81:ea:d2:c4:c8:70:01:37:
1a:ec:64:44:e3:1b:82:45:94:00:8c:48:f8:0d:dd:c6:40:c6:
a7:35:0b:e7:50:e3:69:9e:65:53:33:64:79:85:84:17:3c:fd:
e9:91:21:99:77:e9:1e:79:f6:d1:41:3c:0a:f8:e4:49:50:61:
77:47:0c:91:c4:75:ba:13:16:c9:17:e4:26:f8:f4:2f:bf:b4:
d8:e4:4c:91:e9:8b:3c:21:ec:e2:01:95:90:7f:25:3b:62:e5:
8e:e7:ef:4b:1e:bb:e0:57:28:c2:5a:2e:ab:31:f9:63:41:7e:
9b:4d:29:5e:36:00:56:7d:43:9f:13:9f:d3:7a:fe:2a:33:7c:
37:db:4b:30:ed:80:ff:c2:fc:3c:81:f5:1f:ac:8d:c9:a2:46:
75:01:11:2a:eb:bb:2b:ec:1f:e8:f2:4b:95:ce:80:62:d3:6e:
a9:d6:49:36:ce:9b:ed:aa:10:13:19:e3:cd:13:82:be:58:6b:
fe:1e:ae:27:6b:3d:e6:d3:6f:70:37:7f:82:7d:7c:a6:72:72:
b9:63:59:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:52 2026 by rpki-client