
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f61cbf83-4ddc-4808-ad77-86cb759bde2e.roa
File: f61cbf83-4ddc-4808-ad77-86cb759bde2e.roa (raw, json)
Hash identifier: ApulatefEgvV6pmSxl/dNM9QnaFqMtn7nsWvD/z0hZY=
Subject key identifier: 4B:E4:37:E7:D2:69:94:3A:CE:ED:3E:6E:29:ED:B7:32:DA:11:46:75
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 35C2CC1C32A68BC12F4350D1CA3BC6FC68547AB1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f61cbf83-4ddc-4808-ad77-86cb759bde2e.roa
Signing time: Thu 12 Feb 2026 00:11:46 +0000
ROA not before: Thu 12 Feb 2026 00:11:46 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:298c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c2:cc:1c:32:a6:8b:c1:2f:43:50:d1:ca:3b:c6:fc:68:54:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 00:11:46 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=e07dc3fd689e90272b774ce938f5ea2df543a27b5c4b3fd6b77488164785528a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:94:cf:48:f9:a1:70:13:04:f7:6e:83:c1:
b0:5d:6c:69:f0:b3:8f:96:ce:e7:6b:d2:c4:cd:53:
17:f1:e0:00:3a:8f:ba:26:ca:42:ec:e1:be:e1:1e:
af:62:b9:79:ff:29:06:a1:42:63:31:e3:6f:5e:34:
b8:92:14:c0:14:ef:97:81:69:8a:8a:0a:d9:b5:fa:
95:68:f0:cd:e7:51:f7:6e:18:fc:6d:1c:32:59:de:
d6:26:80:64:e0:44:23:a8:85:44:db:af:93:c6:50:
68:c8:ee:f8:09:4d:c1:50:19:6e:75:4c:f5:23:f1:
c7:9b:15:57:42:ac:a7:f1:c7:d7:6c:cc:f8:52:f8:
4e:a5:20:3a:e2:49:a8:10:05:fc:e6:21:36:9c:c0:
62:fd:4d:23:0d:c0:6c:44:20:da:0f:7a:7f:51:0d:
a2:b1:9c:e3:03:53:bf:73:cd:5a:06:d8:c6:32:ac:
9d:05:58:9f:a0:6b:57:50:c4:7a:f6:45:22:87:c3:
c8:b0:35:9e:a8:fe:28:bd:e5:0d:f6:b8:61:04:a2:
8e:6f:6b:3d:0d:ad:37:cb:fc:6e:fb:15:c2:ac:5b:
4e:ee:5f:e2:c0:25:4c:45:50:94:a0:03:2c:39:5c:
ae:ba:b0:73:ff:ca:f5:7d:4b:55:ff:88:99:08:51:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E4:37:E7:D2:69:94:3A:CE:ED:3E:6E:29:ED:B7:32:DA:11:46:75
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f61cbf83-4ddc-4808-ad77-86cb759bde2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:298c::/47
Signature Algorithm: sha256WithRSAEncryption
79:55:dd:bb:7f:8f:2c:44:ce:d0:58:e7:7d:b3:dc:0e:ed:a7:
56:14:34:f6:d2:f6:bd:14:58:65:a2:f6:de:a6:8d:b7:03:75:
ea:bb:e3:4c:8e:8a:b5:15:06:a5:e7:99:69:51:a8:e9:db:c8:
58:bf:2f:f0:de:32:54:cc:2c:a4:8f:ba:88:78:cc:b5:ab:01:
91:82:67:97:a0:83:7a:5c:a5:9a:27:c7:2a:8d:b6:11:b3:75:
18:6e:e8:17:28:af:82:60:3a:fa:35:a8:1d:26:17:ad:a5:ab:
b9:d3:be:b6:73:e2:9e:ce:06:7c:63:e3:96:21:8e:82:92:3f:
79:5f:a0:a0:96:83:2c:da:3c:33:ae:db:ab:20:d0:d2:53:52:
e2:0d:8b:73:73:4f:35:8a:ab:a3:ef:90:b7:82:2c:ec:c9:78:
57:e9:72:9a:90:a2:0d:d0:b3:f8:65:06:90:a6:2f:f9:5e:44:
d6:48:1c:62:f1:09:27:24:c9:af:fc:60:2b:9a:24:ad:0d:77:
ad:05:d5:d0:a7:bb:97:44:ac:fb:15:40:93:d5:8c:fc:a6:fb:
6f:52:31:3b:da:f5:cc:06:2c:0a:76:75:ff:05:1f:6a:bf:a6:
1a:81:82:ef:f9:ec:57:8d:d6:f6:5e:92:8c:66:0d:fe:27:41:
08:ac:15:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:39 2026 by rpki-client