
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa327db4-4757-4ee5-bc7a-a8322ec75a39.roa
File: fa327db4-4757-4ee5-bc7a-a8322ec75a39.roa (raw, json)
Hash identifier: ye/OmJmuzag5uUF5t+0OyAnDDJrGQXc0tlkI/2O9ybQ=
Subject key identifier: F5:89:9E:05:85:84:6E:DE:D0:88:FF:17:19:AD:90:83:BA:FF:F0:9F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0C3996687D5A5498E18A194DEF8A057567DCF535
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa327db4-4757-4ee5-bc7a-a8322ec75a39.roa
Signing time: Fri 13 Feb 2026 05:50:49 +0000
ROA not before: Fri 13 Feb 2026 05:50:49 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:33f0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:39:96:68:7d:5a:54:98:e1:8a:19:4d:ef:8a:05:75:67:dc:f5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 05:50:49 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=20a4e355cd528508e8789b070199bd70f92fd3eb7b2ac629bf713f7f1d673101, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:a5:aa:a0:ff:d5:af:6c:2a:93:fb:12:5a:
17:b3:67:10:df:92:3c:12:95:f3:6a:01:ce:93:8e:
aa:2d:c6:e2:8b:ea:00:6c:f8:17:68:47:b1:96:4b:
10:95:31:09:64:12:91:48:58:dd:9f:f3:ec:43:48:
d3:77:0f:51:be:5c:76:95:05:dc:15:4a:22:bf:99:
59:19:82:55:92:8b:49:39:e4:c9:56:5b:1a:93:6f:
fd:4a:b9:64:0a:0c:2e:af:1a:11:5b:1e:4d:ab:55:
77:7c:81:f1:16:2d:61:33:8a:03:8c:e5:8c:22:e3:
af:f7:03:2a:93:c9:20:ce:b6:fe:d3:b7:95:15:ec:
01:91:fa:ea:0b:79:04:8e:85:e4:d9:ba:c3:48:7c:
ca:87:3f:ef:71:a7:24:67:9f:26:36:1b:2b:9f:2d:
83:c7:ca:e8:93:b9:e1:34:59:e0:40:27:36:30:73:
11:18:03:82:99:5f:30:0a:28:84:a2:96:39:7f:df:
3f:d9:fa:84:57:0e:e7:b4:46:78:9f:3e:8e:c7:0a:
a0:65:21:f1:3e:13:a8:39:2e:f5:47:1a:93:35:2f:
cb:be:1c:8b:c8:5c:b6:ca:6d:f4:21:3c:d6:49:cf:
f4:26:88:8c:26:12:ea:37:30:46:d4:30:a3:06:b4:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:89:9E:05:85:84:6E:DE:D0:88:FF:17:19:AD:90:83:BA:FF:F0:9F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa327db4-4757-4ee5-bc7a-a8322ec75a39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:33f0::/45
Signature Algorithm: sha256WithRSAEncryption
21:dc:4d:d4:13:c4:6c:01:06:2e:a6:c6:22:fb:d7:fd:c3:22:
cc:75:67:f2:df:9c:67:1f:c2:dc:c3:18:57:5b:45:1a:82:61:
f8:6b:56:87:6f:1d:82:ce:7c:1e:8a:77:ff:d2:b3:27:8c:e3:
d9:33:a7:1b:12:12:ae:36:46:94:cd:ab:4d:ef:be:9a:4f:2c:
c3:30:87:75:91:f0:8b:f5:33:8e:7a:bc:fc:b1:22:f9:8b:9c:
54:7e:d3:82:d5:82:30:91:c9:37:b6:4e:00:60:c6:71:cb:c1:
57:b0:57:ec:92:3a:66:15:8a:35:10:e1:d8:2d:fd:73:4b:74:
bc:70:b6:37:91:28:ee:d1:22:df:cd:4a:43:16:b6:f3:2d:f1:
93:f6:0e:e9:85:e8:54:55:e0:40:2d:4b:7b:6b:fd:9f:33:d1:
03:c1:2c:47:44:a9:d2:03:8c:dc:a1:e3:7a:2b:7e:11:d9:0f:
5c:e1:d8:d0:93:a6:ca:1b:b2:e8:72:60:fc:9f:f5:21:b2:90:
02:27:82:0d:f0:af:00:f3:98:db:87:a3:52:c5:49:80:cc:f2:
f8:3b:a2:6a:fc:7e:93:1b:33:e1:e4:a5:bd:cb:10:f4:27:8f:
16:d4:21:f0:b1:8a:f4:6c:23:4a:41:a5:ed:f3:f8:ce:a5:82:
8f:ee:ad:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:27 2026 by rpki-client