
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cf0dc1b1-6da3-44d3-81af-8b101b9a34a0.roa
File: cf0dc1b1-6da3-44d3-81af-8b101b9a34a0.roa (raw, json)
Hash identifier: n8Tb9eMWpnK70ZgizAHR0xLVcBTDB2eBeJyDiZH2LPU=
Subject key identifier: 98:7F:D9:D9:35:9B:D2:CB:AD:45:A3:52:68:22:6F:C7:26:97:FF:FF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0743E5C88B950A6B4B821EF1060817FAF7FD4ECD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cf0dc1b1-6da3-44d3-81af-8b101b9a34a0.roa
Signing time: Thu 12 Feb 2026 02:42:16 +0000
ROA not before: Thu 12 Feb 2026 02:42:16 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2840::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:43:e5:c8:8b:95:0a:6b:4b:82:1e:f1:06:08:17:fa:f7:fd:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 02:42:16 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=a7445fabfda3d7460b1a857964ece13678ec7b2af89b87dfa9cd5cc8b573b779, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:5e:5d:80:17:a3:e1:ad:0c:c9:51:2a:06:
6d:e3:cd:d5:93:92:42:03:1b:12:7d:52:88:c4:b2:
bf:35:9e:fb:57:8f:88:f1:6c:d0:ba:c8:8a:31:7b:
33:8a:dc:16:a2:53:3f:19:a6:67:ca:61:cb:96:7f:
52:87:63:1f:9c:d1:c9:85:05:d2:43:2f:2d:b5:58:
d1:ff:e8:f0:27:97:52:b9:87:b4:33:65:43:02:b3:
dd:41:ce:2a:a8:36:4a:5b:f9:94:d0:7b:00:2a:8f:
0f:1a:e0:05:87:c8:d3:d3:ef:3c:18:d8:df:93:7f:
0b:0a:c4:40:ae:15:b1:74:59:f6:65:03:e3:de:5d:
fa:ea:f9:e0:4a:b9:84:7f:e9:27:b7:12:6c:00:4e:
19:61:05:4e:8e:80:d9:ab:53:27:5c:75:81:ce:ac:
ad:e5:b3:c9:6f:2d:1a:61:3b:b5:fd:9e:0c:bb:cc:
a6:66:e6:53:79:27:3f:55:aa:7d:2f:b5:ca:5c:14:
3e:79:cd:a3:4a:fb:b9:b9:86:9a:01:fb:49:5a:17:
c1:b8:9b:03:09:c6:e0:b9:d6:a0:69:66:19:90:bb:
0e:32:ee:98:12:60:2d:4c:6f:f4:aa:3f:b0:a6:c8:
4e:4f:ae:8b:10:a1:9e:44:5e:a8:34:7e:ec:40:36:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:D9:D9:35:9B:D2:CB:AD:45:A3:52:68:22:6F:C7:26:97:FF:FF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cf0dc1b1-6da3-44d3-81af-8b101b9a34a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2840::/44
Signature Algorithm: sha256WithRSAEncryption
66:71:5e:ef:90:34:cc:a2:0a:68:49:d3:64:e8:c5:68:ff:fd:
df:9b:01:de:3f:6f:89:6a:16:22:0e:77:f2:7c:70:80:ff:73:
70:10:ca:c6:42:3c:bd:a5:96:71:20:0c:09:22:f8:33:8f:0b:
2d:63:69:6a:b9:86:98:e0:d4:30:da:62:d1:e3:db:06:10:78:
72:84:71:34:05:8e:0b:0a:a9:3b:c7:f6:6d:10:d3:ce:e9:49:
c4:27:49:ee:e8:93:39:6a:f2:43:96:6a:75:2e:0c:a3:18:0b:
f0:33:7f:e5:69:41:ad:37:3e:94:47:7c:d0:98:e5:8a:a6:d3:
b9:d5:b0:ac:8a:49:ce:e4:73:59:a8:98:18:14:56:8a:d8:e1:
78:b1:5d:42:f9:3c:e2:f4:dd:47:1a:2c:fd:8c:46:84:98:fc:
d4:67:85:69:a6:5c:3f:42:16:8b:68:ac:c7:42:e9:42:6e:b3:
9f:36:9d:7d:e2:95:e9:1b:1b:c2:37:69:fd:80:1e:99:68:44:
11:cb:40:53:b9:8b:fc:df:f2:92:80:f0:bd:95:aa:c2:d4:9e:
98:40:e9:a6:bb:ba:4d:24:8b:f7:44:07:82:a4:b8:aa:5f:fd:
50:74:ea:2c:04:6b:8c:2e:d2:33:99:e2:4f:bb:88:3d:91:01:
71:53:f5:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:47 2026 by rpki-client