
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dfb6a6c9-74ad-40fe-a6f0-4d49baa65565.roa
File: dfb6a6c9-74ad-40fe-a6f0-4d49baa65565.roa (raw, json)
Hash identifier: Fd0pCD1ISXzP4jNYANJRmBD1seP9StSDt5vPwdcTFTc=
Subject key identifier: F0:EF:2B:FB:9A:EF:2E:2B:36:30:A6:D2:90:DE:A5:56:39:C4:8E:C1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2213FCFCBC31D30480AD3BC245F6E6E0BDC3F12C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dfb6a6c9-74ad-40fe-a6f0-4d49baa65565.roa
Signing time: Thu 12 Feb 2026 02:42:13 +0000
ROA not before: Thu 12 Feb 2026 02:42:13 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a36::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:13:fc:fc:bc:31:d3:04:80:ad:3b:c2:45:f6:e6:e0:bd:c3:f1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 02:42:13 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=2f9b32c88eafc9f3c75d2d0e9d9534dea0bc7108c9dbead30840a158cc9c4162, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:f5:8b:49:f2:9a:1e:c3:79:29:f8:c9:49:
02:d4:7e:83:2f:05:76:cf:52:1b:bd:44:06:61:32:
eb:38:b6:1f:f2:81:44:0c:62:70:b5:e1:1d:3d:ed:
a0:19:59:f5:c7:ef:55:c1:44:fb:d3:66:a7:d8:2e:
5b:83:70:cd:2d:9c:1b:0f:eb:b1:7c:bc:43:ef:d3:
a1:79:a8:b4:48:f4:4e:3c:cf:5a:79:98:06:4d:1a:
3a:57:de:9a:40:c7:d8:c8:c3:87:7f:ff:15:bc:bf:
4d:00:41:fe:57:93:6a:89:79:99:80:0a:fa:71:8f:
0d:c0:36:ff:be:63:e2:9f:73:cb:0b:70:ab:85:6f:
a8:99:73:1e:eb:1c:08:37:3a:0d:78:c4:c3:fc:4e:
51:d1:be:6d:b5:a2:b5:b5:5f:9b:f8:b8:47:c1:0f:
8c:c0:1e:02:7b:c5:4f:fc:e9:75:b4:88:c0:59:07:
63:98:ee:27:0c:36:5c:38:96:4f:37:ad:fa:7c:88:
db:ea:87:f7:b7:8d:09:8e:40:a7:e0:a7:62:72:a2:
5c:80:a5:f8:61:2a:38:1e:6f:74:21:b5:30:3d:da:
22:dd:5e:08:73:27:1f:87:92:96:e9:96:48:5e:97:
b4:96:0b:02:11:92:56:e1:6a:67:1d:e9:12:6d:d0:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:2B:FB:9A:EF:2E:2B:36:30:A6:D2:90:DE:A5:56:39:C4:8E:C1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dfb6a6c9-74ad-40fe-a6f0-4d49baa65565.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a36::/47
Signature Algorithm: sha256WithRSAEncryption
80:c1:d3:8e:00:65:a9:25:d7:92:c6:13:f1:9e:27:6e:f1:63:
46:02:0a:91:b8:0d:66:c2:a1:e7:e2:88:92:45:40:a4:23:04:
94:16:16:cc:d2:59:4c:08:e1:6e:1e:98:7c:fe:c6:5f:0a:a2:
56:9b:56:48:9a:21:88:de:9b:46:93:0a:58:e8:7c:2b:6c:1e:
37:a2:4f:39:18:52:88:db:b9:30:25:e0:42:3f:13:a8:c8:00:
ef:74:eb:56:e9:93:7b:98:65:32:41:e1:23:f5:7a:33:7d:28:
3f:19:0d:d0:98:90:a5:a0:f3:62:cb:52:6b:f8:b2:0a:d9:92:
90:67:bc:4b:d1:50:49:53:09:63:d1:8a:e8:6d:2b:e2:0c:8f:
0b:76:8d:19:ff:55:ba:0d:50:c8:63:fb:ff:df:7c:86:c2:9b:
7f:01:b7:0c:75:c6:aa:2b:e5:11:8f:5d:5e:4d:91:cc:d6:57:
59:4d:ba:26:65:31:1f:d9:80:a3:8e:b0:f8:e5:4a:57:91:ad:
2d:fc:73:c2:4e:b2:d3:be:5d:40:91:7a:2f:b3:90:43:8d:4d:
0a:34:ba:e8:89:5b:aa:46:3a:04:9b:e1:88:79:ab:79:a5:af:
c1:7d:a0:d7:b2:6a:10:cf:8a:53:4d:9c:fa:57:dc:8d:3a:36:
ff:40:0d:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:53 2026 by rpki-client