
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2a6321b-2c70-411e-90e6-7d82034f7f60.roa
File: f2a6321b-2c70-411e-90e6-7d82034f7f60.roa (raw, json)
Hash identifier: wco9U+tAhuMtqNnK2dmD7icABA75RhvxPpd+pkzlvYw=
Subject key identifier: 2B:AA:ED:9D:7B:4B:3B:E3:10:0A:EA:F3:24:69:11:FB:E7:70:1F:40
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5D2BA603F7C7D2CDF087B2D339B17A5C119648AC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2a6321b-2c70-411e-90e6-7d82034f7f60.roa
Signing time: Fri 13 Feb 2026 01:50:09 +0000
ROA not before: Fri 13 Feb 2026 01:50:09 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:37f0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2b:a6:03:f7:c7:d2:cd:f0:87:b2:d3:39:b1:7a:5c:11:96:48:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 01:50:09 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=726a9a8001558aeea02a84d2b1bf9db7ede448d2bda6d17f09c9ae72d2e4d955, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:10:67:c9:01:00:14:df:05:1b:d0:7b:49:
04:4f:28:fe:07:a4:8f:4b:18:45:ff:b2:b6:c2:da:
0e:21:dc:58:eb:55:03:33:49:c7:99:ac:4d:3c:81:
e0:64:c2:67:fb:2d:03:d8:6f:48:6a:8c:a0:aa:cf:
e5:1e:7d:a4:40:82:84:6c:61:79:ec:ef:34:8b:85:
10:26:d1:bf:e8:b1:b4:44:fc:c8:83:3c:ab:55:41:
24:1c:0c:3c:ac:c6:27:72:d4:b4:a9:df:21:5e:9c:
48:e9:f0:80:99:a8:b9:64:ce:78:a2:cc:20:6c:df:
51:d6:71:87:39:da:dd:a5:f7:f6:7f:70:72:53:24:
9a:5f:d7:46:37:5e:2d:bd:86:3e:d1:4d:98:17:6a:
4b:97:86:79:72:a1:1f:2e:90:ed:b4:d6:61:42:78:
df:c8:8a:08:37:60:83:25:6a:dd:80:3a:5a:27:67:
a0:5d:ad:52:00:bf:f3:a6:88:dd:f1:d8:25:4b:aa:
28:ff:ac:50:34:db:d4:5d:e7:d9:d8:a6:ae:c8:3b:
45:66:f3:e0:1e:e7:35:b6:53:12:be:39:e2:2e:62:
12:d0:fe:3c:06:ce:54:4b:c7:e0:b3:75:59:d5:98:
ba:fa:e4:d0:25:16:09:47:e2:57:15:ff:a6:c7:53:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:ED:9D:7B:4B:3B:E3:10:0A:EA:F3:24:69:11:FB:E7:70:1F:40
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2a6321b-2c70-411e-90e6-7d82034f7f60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:37f0::/44
Signature Algorithm: sha256WithRSAEncryption
31:4b:1b:41:b8:e5:b7:cd:be:0a:e0:b4:aa:0a:b6:6e:91:4f:
1c:93:8d:4b:64:3f:d4:47:2b:79:ef:d8:4b:9e:98:73:15:b5:
a7:d7:7d:3f:8e:e5:7d:21:7d:ea:c1:0a:c1:57:c1:a2:36:68:
79:15:13:ac:f9:be:2f:73:e7:e4:aa:e7:97:0d:0a:79:93:bc:
c4:2c:28:98:97:e4:74:9a:35:8e:f4:33:85:9e:aa:88:2e:17:
6b:26:e9:13:23:3e:ab:c4:60:21:3c:ca:3c:6e:74:ea:56:68:
85:db:57:88:e5:a8:de:73:76:30:80:cb:18:84:c1:fd:00:18:
08:5d:89:91:31:41:0c:95:39:4d:e9:cc:c0:93:1e:ea:42:61:
03:34:33:b8:62:36:e8:10:29:73:31:01:1d:69:00:ab:be:68:
2c:52:9e:90:bd:8f:38:b8:6c:91:3f:00:08:a4:ab:db:85:85:
6a:80:31:c2:46:23:0c:a7:8f:e9:72:13:0d:a3:39:6a:b3:0a:
27:f7:c9:f4:1e:3d:c5:79:63:a8:f8:a5:94:61:55:25:c3:8a:
ce:2f:9a:a0:96:51:08:61:0c:d0:27:ea:ec:a3:79:3c:71:84:
e4:1a:5f:dc:e9:20:5d:67:63:42:77:27:56:91:f0:51:c0:57:
f3:2b:51:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:06 2026 by rpki-client