
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dbd35532-01c5-46ef-b4d8-71231f6b2916.roa
File: dbd35532-01c5-46ef-b4d8-71231f6b2916.roa (raw, json)
Hash identifier: ArCNAHz3wZgPSM7dl30e9lceZL0De0zYn6uxNrlvEGM=
Subject key identifier: D3:2E:AA:28:94:35:55:53:E3:9F:82:4B:73:65:C6:26:38:B8:9F:1B
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2419DA89B9B4343A39A6105F887FE114C34715BF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dbd35532-01c5-46ef-b4d8-71231f6b2916.roa
Signing time: Fri 13 Feb 2026 05:00:50 +0000
ROA not before: Fri 13 Feb 2026 05:00:50 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f60::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:19:da:89:b9:b4:34:3a:39:a6:10:5f:88:7f:e1:14:c3:47:15:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 05:00:50 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=8c31c008ec3285f22512c6ba3ce42c5fd63e635d917b966166afe56e92e4d69d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:31:ba:5d:94:38:d3:c6:c8:0e:7b:b8:50:5f:
8c:63:07:66:6f:d4:72:14:a1:65:94:ea:d1:ee:fb:
ef:b0:99:8f:86:15:a5:a4:d1:1c:01:02:2c:de:db:
55:6d:43:62:80:e6:5f:b8:b1:79:bd:9e:45:30:1a:
07:5e:52:1c:50:87:16:be:47:9e:38:b1:6c:a7:93:
17:53:97:29:d6:83:18:92:07:37:26:17:b3:e8:7d:
74:4a:1d:86:a5:ca:0d:d2:a4:31:f8:6d:eb:c2:ec:
37:24:65:16:dd:f4:7d:45:2c:e5:f8:48:06:09:19:
88:41:78:7e:fd:68:98:48:45:63:a7:79:a9:da:89:
0a:5c:8f:d3:18:99:e7:98:00:07:b7:34:7c:90:8b:
2e:c5:18:46:5e:f6:1d:89:eb:22:6c:77:b9:ba:7c:
3d:52:4c:06:1d:f4:09:4f:94:de:6f:f3:d8:1a:75:
fc:07:9b:b1:59:60:6a:c1:ab:d7:f0:f1:f5:29:00:
82:b6:b8:81:d4:17:46:41:eb:69:3d:4b:ee:9a:c1:
eb:68:93:db:ae:fd:77:3b:74:0d:4e:69:0f:18:ca:
c5:b5:28:41:d9:75:a2:d8:55:5b:8a:15:ec:05:42:
0e:b2:5d:82:ed:aa:9c:d6:fe:05:4a:32:ab:96:2c:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2E:AA:28:94:35:55:53:E3:9F:82:4B:73:65:C6:26:38:B8:9F:1B
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dbd35532-01c5-46ef-b4d8-71231f6b2916.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f60::/45
Signature Algorithm: sha256WithRSAEncryption
0a:38:2b:39:b3:9a:34:92:56:bf:12:70:cc:12:7c:91:59:58:
13:57:58:7e:b5:73:1e:11:58:8d:6a:c2:49:ad:e9:5b:da:79:
a8:a4:dc:0f:f6:c7:38:3c:bd:36:25:38:a7:be:51:03:2e:98:
3a:70:f7:b1:f0:5d:be:d8:a7:fc:cb:81:e9:07:72:a4:b5:ce:
6c:74:06:dc:b3:54:b8:ca:38:de:8d:cf:68:73:4e:ad:4a:87:
07:fa:21:08:f8:d1:1f:b0:3c:7f:bc:97:8f:0d:56:f9:e2:99:
bf:72:b7:7f:47:f4:6b:7d:a7:d4:9e:05:31:0e:27:08:15:5c:
94:56:15:f7:12:ac:a0:fd:43:25:aa:8d:de:1d:9b:fd:a7:7e:
27:af:38:8c:e8:6f:48:3c:de:7a:94:95:ef:d4:7f:c8:78:c6:
9f:c2:04:a4:f5:67:40:84:16:b9:41:1a:df:18:12:ef:a3:3f:
b1:7f:16:4d:98:87:81:1a:0c:1b:db:72:44:aa:83:17:4b:0c:
b7:ac:d1:6c:d0:b0:1f:8e:f6:8d:b4:8a:22:7e:25:05:30:e6:
4f:24:de:1c:2f:37:7f:26:f4:a0:24:a4:dd:b6:ff:ae:1d:7a:
82:55:60:36:d9:f6:fb:95:82:53:ca:be:db:09:c6:75:32:85:
f7:4c:ea:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:19 2026 by rpki-client