
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fd229639-cdc9-4182-b97e-c28cb34816d6.roa
File: fd229639-cdc9-4182-b97e-c28cb34816d6.roa (raw, json)
Hash identifier: zfUIPX0egg6QhBfaK4AiPVlnwTjiEW5jEMVuIH4t1S0=
Subject key identifier: B7:35:DF:E0:CA:C2:BC:D1:D3:C3:F1:ED:43:45:06:A8:5E:FE:DF:18
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 39BE96DCD3CC06878D40BF93EF71B4002B21B5D9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fd229639-cdc9-4182-b97e-c28cb34816d6.roa
Signing time: Fri 13 Feb 2026 06:01:02 +0000
ROA not before: Fri 13 Feb 2026 06:01:02 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2c20::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:be:96:dc:d3:cc:06:87:8d:40:bf:93:ef:71:b4:00:2b:21:b5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 06:01:02 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=3fc3e829d57cbb8f0c4ba1b432a3f334300aebd0b53014d7f84bc8038813cb99, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:5b:7b:d9:2c:09:73:3b:88:71:26:9f:69:
65:48:b8:a0:0a:09:fa:4b:c3:d2:2d:a1:a3:62:2a:
bb:80:97:52:b0:5f:c6:33:25:6d:d9:46:05:a6:04:
2d:ae:db:d7:2f:76:65:c9:ea:fc:9a:fe:c2:51:2a:
4f:d0:1f:1e:51:eb:2a:59:30:96:b0:ef:0a:79:f6:
22:cc:7c:37:22:f0:e7:21:d8:9b:10:31:21:1c:84:
bc:6b:e6:ce:56:48:cd:e0:70:29:4a:a8:dd:2e:cf:
28:52:1f:1c:e7:3e:b7:10:92:b4:c0:c0:eb:1b:14:
6e:0f:ed:55:17:28:93:c3:6d:85:65:93:d9:e1:98:
89:d9:6c:0b:1b:0b:a0:5c:5c:36:4a:7c:e2:7e:ed:
73:bc:bc:1c:33:7c:16:18:a9:dd:60:61:51:0d:08:
ee:4f:26:57:9e:b5:cc:10:d0:05:2d:3f:0b:82:93:
31:ce:2b:bf:e9:b0:e5:f1:3c:3e:8b:06:e5:5b:90:
c7:ce:9c:75:c4:7a:f0:b1:6b:12:89:d8:3c:59:e5:
d0:1a:48:2f:2c:34:55:e6:86:3e:b6:09:a0:30:71:
fc:7f:4a:b5:03:83:e6:ae:94:62:44:3c:72:65:c2:
3a:b7:ec:ec:2a:a8:2d:4a:54:70:9b:16:fe:a0:fd:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:DF:E0:CA:C2:BC:D1:D3:C3:F1:ED:43:45:06:A8:5E:FE:DF:18
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fd229639-cdc9-4182-b97e-c28cb34816d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2c20::/46
Signature Algorithm: sha256WithRSAEncryption
c3:49:1e:c4:aa:3c:b4:c7:42:dc:4f:ff:8c:54:4a:f5:cb:c4:
94:0d:24:49:66:74:a8:dd:82:f9:19:6e:68:14:e5:fc:7c:cb:
d0:b7:9f:bd:4a:d3:7a:d1:d7:9f:7a:01:79:84:d3:99:4d:f3:
d2:d3:92:b9:ff:76:97:de:0a:b1:ad:4c:d1:17:c5:81:a3:2b:
6e:8e:7f:dc:ba:73:9c:b3:37:61:ac:09:c4:0c:5a:80:a6:2b:
a9:96:03:e9:87:99:1a:07:31:2b:47:c2:37:e0:8e:2c:18:57:
49:4b:f1:13:26:74:56:fc:31:45:14:81:dd:a6:6b:16:6f:5d:
73:52:df:e4:b6:0b:dd:c3:2f:c6:c5:5f:97:aa:08:a8:51:bc:
27:c8:09:97:87:e9:1d:04:cb:e7:ff:7e:4d:69:2e:d5:f3:9c:
e5:c8:40:93:17:0c:31:89:62:08:9f:a1:92:0d:91:d8:58:4b:
2a:c7:8e:b7:6d:ff:9d:3c:27:05:dd:73:0b:70:aa:f9:d6:3f:
1c:54:2d:e6:d9:a0:92:6d:95:2b:79:51:ec:6d:95:49:41:49:
8d:c3:f3:c3:b8:29:53:75:f1:76:92:86:34:98:0c:00:b9:98:
16:14:c8:9b:30:f0:86:c3:3b:7e:f9:06:35:07:79:81:12:49:
68:8f:71:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:16 2026 by rpki-client