
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de18936c-456d-4d39-9b23-5b1c7a60b2b7.roa
File: de18936c-456d-4d39-9b23-5b1c7a60b2b7.roa (raw, json)
Hash identifier: V3DZB9W5dfCkRTlZVgaOYfm5Vl1cXjVK8ep+vpYeuqM=
Subject key identifier: 7C:7F:D7:D4:45:EB:1A:54:4A:6D:0F:AA:C1:E1:D8:44:36:24:C2:9F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 494E79162FB8240FFE4408DDF3BE0314572F5AD3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de18936c-456d-4d39-9b23-5b1c7a60b2b7.roa
Signing time: Thu 12 Feb 2026 00:40:11 +0000
ROA not before: Thu 12 Feb 2026 00:40:11 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:244c::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4e:79:16:2f:b8:24:0f:fe:44:08:dd:f3:be:03:14:57:2f:5a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 00:40:11 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=c50bc849ca20ca7789d5d0621b7d9178581fef90358527f2c317ec91ca4eabd1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:79:9f:d3:33:1a:ed:f2:80:97:00:16:0a:
b8:75:13:4b:01:32:05:43:5b:fd:df:91:fb:3c:b2:
04:fc:07:12:a2:10:46:a0:9f:5e:12:0e:75:84:d7:
c2:07:a7:60:b6:6a:94:a1:71:f6:6a:90:f2:77:f8:
a7:15:dc:30:57:ad:37:b4:75:f6:c0:77:e5:b1:a5:
b9:b4:bd:8c:61:71:64:5a:dc:f8:0a:c8:71:a3:79:
be:65:c9:1e:87:25:c7:af:23:b9:66:50:b7:f3:93:
11:60:21:08:b8:e9:7a:ea:1c:80:7f:c3:0f:e1:93:
76:b6:60:65:8d:58:bb:f4:ca:49:a4:0e:10:aa:fb:
1e:2e:7f:ae:df:27:6c:3d:ab:22:6b:32:2a:25:9a:
69:f4:a0:7a:93:03:37:5c:31:38:25:72:3e:b1:ed:
43:5b:b9:7c:39:a5:43:72:95:ee:c1:32:8d:96:4b:
76:94:61:d3:06:69:2a:8f:7d:ae:59:d2:96:ef:03:
94:b3:dd:72:cf:75:d4:84:67:a1:bc:f5:8c:cd:25:
81:27:dd:5d:88:df:de:33:50:ad:31:86:a6:ff:8b:
8a:1e:f5:db:af:24:bf:b3:56:cd:87:cd:93:48:e5:
bb:bf:a7:41:0e:2e:d4:3b:06:a0:32:c1:34:64:de:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:D7:D4:45:EB:1A:54:4A:6D:0F:AA:C1:E1:D8:44:36:24:C2:9F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de18936c-456d-4d39-9b23-5b1c7a60b2b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:244c::/47
Signature Algorithm: sha256WithRSAEncryption
7b:86:02:5b:09:aa:bc:ea:cb:c9:d7:2a:28:4f:a0:b9:3e:c1:
14:8e:7f:80:89:ed:c7:77:3a:ca:f8:9c:61:cf:9d:8c:8b:f0:
70:ee:bd:bb:26:4b:0b:43:50:c8:c4:70:c4:cb:e5:80:7e:65:
a6:b4:71:be:7f:ed:06:62:1d:58:f7:45:9b:fe:97:d1:b9:22:
01:25:f6:49:82:d6:a7:76:06:bc:b8:67:cd:fa:f5:35:f7:3a:
fa:23:09:e5:39:c1:e7:37:9a:9a:c6:ee:92:42:ba:0c:c6:ac:
bb:92:d2:44:96:e6:1e:d4:09:9c:30:21:b0:55:58:4c:91:7e:
97:1c:df:25:04:b8:14:88:b2:62:b2:72:a7:20:35:88:68:3b:
fc:1b:52:71:fc:17:1d:eb:85:88:c3:b8:c0:f7:5c:9b:05:fb:
57:bd:8e:28:20:0b:af:6d:05:25:08:8e:9d:4e:74:99:54:8d:
ac:b4:1d:d3:70:58:cc:af:9d:6c:5e:f2:7c:76:bd:a2:b5:44:
0c:4a:60:bd:29:9f:ab:65:2d:42:d3:a7:c3:e4:42:a8:65:f9:
6c:21:cd:e9:75:12:1b:4e:cd:f3:1a:c2:c7:76:00:2e:2d:e6:
86:2a:a1:f3:ba:a9:3d:da:e9:76:ed:44:e2:cc:ec:82:65:f7:
6d:96:be:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:52 2026 by rpki-client