
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c7bbd297-f372-40d0-bbce-ece5d126fe56.roa
File: c7bbd297-f372-40d0-bbce-ece5d126fe56.roa (raw, json)
Hash identifier: gSgFjR6OhUQoEPgCJidanpVcj6UlZwZLwivGApERUQo=
Subject key identifier: 37:07:56:CA:0B:D2:3B:97:C6:71:0E:AD:85:D1:56:34:7E:3B:45:66
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 555922CBD8467510E370F35BF79FC2792DD9A116
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c7bbd297-f372-40d0-bbce-ece5d126fe56.roa
Signing time: Fri 13 Feb 2026 10:02:06 +0000
ROA not before: Fri 13 Feb 2026 10:02:06 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3550::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:59:22:cb:d8:46:75:10:e3:70:f3:5b:f7:9f:c2:79:2d:d9:a1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 10:02:06 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=b4989bf6dfa74992a01de1c0788119e0909b0fe8d544a9ba489e25fd6292caad, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:ac:1e:7f:4e:16:2b:32:ad:7d:2a:8e:11:
8b:97:0c:3f:34:c3:2b:c1:29:69:01:0e:c9:36:4f:
42:d3:c0:20:c9:0b:59:05:ab:8a:ac:6f:d0:91:a2:
c0:ef:e0:a0:d6:e0:be:b5:46:70:6e:9d:50:3d:2b:
6b:e4:97:41:d5:7b:a4:9c:cc:81:72:8a:dd:d9:81:
a9:96:03:11:c5:56:89:f6:16:cc:97:22:57:80:a4:
74:d3:18:24:7f:18:b9:d2:b6:e5:f2:09:23:d5:74:
b7:21:8a:fc:d9:7e:9b:77:9f:0c:ed:49:7e:00:30:
95:55:e3:70:70:b5:1a:39:43:a8:78:32:17:03:2b:
e9:0b:32:a7:13:fd:6d:9e:70:c3:70:49:c5:75:b7:
14:61:6f:49:1b:85:16:00:85:da:9b:29:62:da:65:
6b:85:61:08:cf:8d:34:05:5b:2e:f6:11:be:e3:ab:
b9:38:1a:6e:20:d8:20:cf:41:f5:49:d6:a0:4c:27:
85:21:7a:25:3a:88:65:b9:82:0d:16:80:e4:6b:e6:
51:84:0b:89:56:00:b8:f9:77:0b:3e:13:12:2b:7f:
35:9e:b7:19:87:f4:eb:06:44:5c:39:86:a7:66:79:
f3:67:39:52:97:a8:23:55:a6:0d:97:90:58:af:39:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:56:CA:0B:D2:3B:97:C6:71:0E:AD:85:D1:56:34:7E:3B:45:66
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c7bbd297-f372-40d0-bbce-ece5d126fe56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3550::/45
Signature Algorithm: sha256WithRSAEncryption
82:02:cc:2d:0e:44:9b:34:5a:30:f4:74:21:20:9a:dc:90:54:
f9:bf:29:90:c9:d5:13:53:9a:1f:09:c1:6c:16:f7:54:a9:d0:
d9:d0:53:96:8d:4c:e9:3d:a0:9e:ad:e7:ad:46:4c:b7:af:39:
e9:ac:53:07:e8:64:7f:08:c3:a1:c0:41:65:bb:2f:86:79:bf:
88:92:e2:6f:04:05:84:fd:70:eb:9a:81:aa:36:88:7a:ae:f0:
46:dc:99:27:fc:fe:3f:eb:81:7f:25:08:ad:03:27:8e:22:4a:
2c:d5:70:21:2a:1c:8c:ef:71:54:da:73:0c:5a:f5:37:87:12:
c2:7a:1d:42:fc:22:fd:ce:a6:93:59:a2:64:f8:94:d3:90:86:
c0:cf:5e:2c:97:89:71:c3:b4:db:04:d2:72:66:2d:65:f4:a4:
d0:e1:45:a1:79:bb:e8:59:e8:62:9e:cb:75:68:fe:df:8f:4d:
0b:a3:b2:06:fb:e4:38:1c:68:70:8e:b5:c4:63:f8:56:85:16:
4c:e8:3b:82:9b:da:d3:97:11:67:cb:69:c9:31:93:61:c7:31:
46:41:11:d6:85:23:57:83:5d:c3:f8:52:50:2d:7f:22:b2:82:
77:5b:fa:fe:8d:0b:f2:1b:5f:52:17:1a:3c:60:e8:64:04:fb:
0f:04:3c:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:05 2026 by rpki-client