
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3c0e843-8076-44b2-baf3-210d111e8b24.roa
File: e3c0e843-8076-44b2-baf3-210d111e8b24.roa (raw, json)
Hash identifier: FGKic9hW+tpfE3HO15pCEt6ShPKWQASavwy54nGj4WE=
Subject key identifier: 4F:D1:3C:E3:40:C3:AA:8F:E9:09:3C:1E:37:EC:3E:C5:B9:22:87:D3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1BD5E4919DEA74DD6D9914D2BD6D527645055A70
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3c0e843-8076-44b2-baf3-210d111e8b24.roa
Signing time: Thu 12 Feb 2026 00:11:20 +0000
ROA not before: Thu 12 Feb 2026 00:11:20 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:244b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d5:e4:91:9d:ea:74:dd:6d:99:14:d2:bd:6d:52:76:45:05:5a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 00:11:20 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=68952a9b1681c631334f77f8203effc790fbaea69363dcc77e04c39515502025, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:8c:f8:cc:53:25:ef:5f:f2:2e:ba:8b:0e:
01:bb:05:9e:8d:b4:c5:95:2f:d6:f6:24:93:48:a4:
c8:d4:8a:c3:72:ee:8c:d1:f1:17:b7:f3:67:f9:7b:
42:ca:00:87:bc:93:e6:17:94:6f:2b:20:60:c7:47:
e3:4a:5d:eb:2c:6c:10:92:d5:b1:13:cc:06:2b:c0:
73:98:db:17:68:35:70:d8:23:b5:53:2b:4e:27:2e:
7c:7f:1c:26:86:91:35:8d:f0:53:9d:3d:c5:a5:b7:
4c:29:6c:a5:c2:4b:36:7c:b3:a5:d7:6f:fe:d3:d7:
e8:fd:a6:47:50:8a:19:6d:e5:a9:c1:d5:af:90:44:
bc:6d:aa:87:ab:c8:41:1d:1a:99:f6:2b:0f:bc:e8:
ac:a5:fb:75:5c:02:34:f2:0f:d4:ad:a8:33:ca:38:
c7:78:f7:6e:ca:e0:5f:4a:06:4d:3d:8e:1d:3f:98:
c1:a1:ec:eb:03:03:8b:a1:66:e8:1d:ec:36:a9:70:
7a:bb:ad:39:3a:9b:9d:08:f4:ed:1c:55:e8:02:67:
ca:e5:78:27:65:94:a0:9b:12:11:b1:8d:74:3f:bf:
76:28:83:d0:89:ad:15:3a:da:ce:64:46:95:53:ef:
fa:48:c9:59:5c:16:7a:94:2f:cb:e8:4c:a5:3a:7f:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:3C:E3:40:C3:AA:8F:E9:09:3C:1E:37:EC:3E:C5:B9:22:87:D3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3c0e843-8076-44b2-baf3-210d111e8b24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:244b::/48
Signature Algorithm: sha256WithRSAEncryption
59:8e:d9:f5:84:48:38:59:ad:42:bf:31:1f:5b:4f:3c:aa:c7:
aa:0b:b6:d8:52:6e:aa:b8:cf:15:e1:70:2d:7c:49:e0:80:24:
5e:6e:99:25:19:1c:57:e5:99:e9:1c:57:75:93:4b:9f:7d:61:
bf:36:8e:7e:6c:0b:d2:9b:ac:7a:c1:7f:f7:ff:2f:9f:cf:96:
00:73:5d:9b:29:3f:8c:0d:ce:53:4b:b5:0f:1f:0e:23:60:be:
f4:4c:b8:9e:17:32:06:88:d0:04:f4:99:4e:b4:9c:50:ef:0e:
9b:ba:63:3c:81:81:ce:b9:14:b6:3e:7a:92:79:3e:e8:33:e0:
9b:f7:dd:d9:6a:44:ba:40:fe:f6:7d:72:35:40:6f:c8:b0:a0:
c5:c8:be:56:bb:9c:b8:5e:40:25:4f:50:5d:a8:66:5b:1a:5b:
be:db:60:7a:10:a5:7e:61:38:63:bf:00:50:e2:fc:3e:3e:fb:
62:3a:d4:dc:fa:09:83:ea:09:44:33:88:cd:f7:57:87:70:30:
04:f7:9d:a2:64:74:17:74:8c:1e:31:fc:3c:f9:b5:14:25:5d:
0a:88:e3:50:00:5c:47:88:91:61:cf:de:03:8a:0e:a6:7e:10:
9b:53:28:30:04:e6:aa:05:88:9f:65:9e:e0:58:1c:7a:fc:85:
cf:77:6b:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:18 2026 by rpki-client