
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2df99b1-78d5-4f29-8289-16a8883e96d2.roa
File: e2df99b1-78d5-4f29-8289-16a8883e96d2.roa (raw, json)
Hash identifier: JJwWBgLvEyv1M2Hn+NMIliSltXPvZ3qm/O5KXYk7Y0s=
Subject key identifier: DE:06:41:21:11:F7:33:5F:6D:C0:D4:F3:27:3E:36:3F:28:AF:02:6F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5893E070A1BF264349DE80C34E959F391B98024F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2df99b1-78d5-4f29-8289-16a8883e96d2.roa
Signing time: Fri 13 Feb 2026 13:31:55 +0000
ROA not before: Fri 13 Feb 2026 13:31:55 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3e78::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:93:e0:70:a1:bf:26:43:49:de:80:c3:4e:95:9f:39:1b:98:02:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 13:31:55 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=cad5c3b682c640a2c7deaa2592fd27cfe5f4e5ba5beb2dbc5393c8935f86234e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:62:0f:5d:86:b1:38:c5:ea:f7:e4:bf:43:
f9:c9:e1:96:aa:49:50:a4:f3:7d:af:10:3c:63:03:
8e:f0:cb:ba:4c:95:3e:89:20:b9:ee:bd:68:aa:d4:
19:15:84:0f:a7:af:fc:09:a7:0f:97:2a:27:51:c5:
5f:0b:d1:ce:8b:ff:66:66:19:de:5b:76:89:53:f6:
19:f8:18:e2:17:c8:61:47:35:8a:d2:2d:43:5c:36:
0e:4d:41:8d:ab:bb:4e:d5:5f:a4:43:ae:44:97:a7:
15:f3:c9:02:c7:14:91:78:c4:ec:bf:22:e9:32:a8:
21:d1:67:fc:95:74:a0:01:d1:f6:c8:ec:47:48:c6:
3a:73:dd:89:00:eb:83:54:cc:21:1d:a9:c3:e7:f8:
bd:96:98:1a:05:c9:fe:6d:fb:2d:65:d2:ed:d3:f0:
15:4e:5a:fa:46:a5:5c:dc:5e:e6:9c:a2:95:dc:c9:
61:f2:7b:83:ee:b5:da:6f:41:1d:85:da:cc:e2:7a:
11:cb:fa:eb:10:0e:b3:d2:16:a5:10:88:4d:77:96:
70:b6:28:79:d3:ac:e3:9c:a5:78:b1:4b:53:4d:c2:
21:ff:57:6c:96:e7:21:d6:02:2d:3e:f8:98:e6:97:
cf:99:89:6e:55:6d:ae:64:29:5c:48:3a:c2:99:ea:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:06:41:21:11:F7:33:5F:6D:C0:D4:F3:27:3E:36:3F:28:AF:02:6F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2df99b1-78d5-4f29-8289-16a8883e96d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3e78::/47
Signature Algorithm: sha256WithRSAEncryption
27:3a:70:97:d5:9d:62:8d:6e:5e:fb:8b:5a:c1:12:22:33:3e:
17:7d:7a:4c:da:24:ad:cd:de:7b:9f:7d:60:4f:6a:43:96:77:
f3:2b:46:8e:67:de:d5:60:c7:46:f2:98:f8:23:8a:8a:d0:e7:
2c:9a:0b:c9:2e:83:29:a7:15:b0:81:a7:ec:37:5a:59:b5:ce:
d6:5c:7f:db:c4:f4:47:88:c3:34:85:70:90:44:be:3f:87:66:
8a:55:70:3c:08:46:4c:d7:93:16:c5:15:26:7a:fd:31:f0:ce:
02:80:be:78:a9:a9:bc:44:ab:ee:b4:0a:4b:ad:c8:72:01:2b:
d0:82:43:65:e0:30:23:68:ce:13:2a:e0:b4:5f:5c:ca:fb:51:
3b:35:50:7c:f7:06:3e:eb:e5:15:4e:03:3c:3d:63:0d:e9:00:
6d:4d:14:b9:bb:94:69:91:e2:32:89:90:75:c8:d2:2c:44:0b:
06:af:75:5f:f8:1d:b4:59:44:bd:fc:e0:62:8e:d4:4e:75:c6:
ca:96:75:ca:75:ed:a9:ee:66:33:05:9b:3d:3a:b0:fc:0e:9f:
0d:c7:e4:37:a7:b6:e6:b6:54:95:ef:ca:b4:77:08:a7:77:fe:
8d:96:13:07:b9:89:bd:75:82:24:80:3d:19:e2:5c:6b:1c:f9:
84:68:f7:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:43 2026 by rpki-client