
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/00f95d7f-dde2-4121-9e39-510e00531a12.roa
File: 00f95d7f-dde2-4121-9e39-510e00531a12.roa (raw, json)
Hash identifier: eNN25GeofnyhN7eB8uzctJuR7PQqStp00cZzfFH/zz8=
Subject key identifier: 18:2C:8B:C7:6B:8A:E3:97:3B:0D:72:71:21:FF:ED:AF:47:16:C8:A5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 76515564D596607088F90A7562A692A340473AAA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/00f95d7f-dde2-4121-9e39-510e00531a12.roa
Signing time: Mon 04 May 2026 13:41:21 +0000
ROA not before: Mon 04 May 2026 13:41:21 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2fb4::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:51:55:64:d5:96:60:70:88:f9:0a:75:62:a6:92:a3:40:47:3a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 13:41:21 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=bc9142e40c633a74e4f3ac0a76b5e49cf82cc99d4bdbc25f3b71564ea54aa968, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:22:ed:62:eb:b4:25:19:f9:b7:41:bc:4d:
2c:23:a2:fe:1f:eb:99:a0:49:16:d5:22:fb:67:bc:
42:bb:d8:8c:47:05:64:63:dd:6d:81:e7:44:0e:0a:
f4:7a:3b:d8:14:06:97:a0:3b:5f:6a:a4:cf:84:6f:
d8:41:64:9e:36:6c:c5:4f:91:62:56:01:6d:6a:1a:
0e:69:23:ef:21:0d:da:e5:b6:8d:0f:8d:50:d0:b6:
9a:30:d1:39:dc:8e:33:3f:0d:93:4f:b4:9d:4d:85:
6c:49:63:71:13:27:5b:28:69:b4:9a:5b:06:27:6b:
b3:a9:90:8d:cf:f3:f3:f3:94:41:8e:2b:d1:9a:51:
f9:26:7f:2b:02:f8:f7:65:9d:21:17:a2:a2:2b:9c:
93:ed:b2:d9:2f:cf:79:49:8b:57:d6:03:c6:df:ab:
d2:8d:b1:08:58:a0:2b:3f:2a:14:26:6c:e7:c9:7f:
87:77:86:19:f2:d0:74:90:5f:5e:f1:68:68:5c:a2:
9b:f4:d5:7f:51:f4:ec:44:4e:5e:04:ab:f9:3e:0c:
15:d0:3e:e3:fd:13:f2:ad:34:3b:96:f2:cd:9c:f1:
ab:ae:e4:45:5c:a0:ec:0c:3c:f9:32:a2:a7:04:0e:
ad:b9:a8:21:ba:2f:ec:c8:1e:4c:e3:4e:9b:bc:e6:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:8B:C7:6B:8A:E3:97:3B:0D:72:71:21:FF:ED:AF:47:16:C8:A5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/00f95d7f-dde2-4121-9e39-510e00531a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2fb4::/46
Signature Algorithm: sha256WithRSAEncryption
53:0a:2d:f3:63:25:2b:db:f6:2d:54:80:e8:52:c2:41:2e:01:
c9:af:78:e8:86:34:bb:07:ec:29:39:18:06:6e:69:57:f9:d4:
f7:d8:b4:7d:73:a1:23:51:26:f1:d9:cb:fb:71:bb:4e:be:30:
85:f3:7d:3e:7d:11:a9:09:a8:35:ac:12:c9:ee:ae:ef:6a:af:
3a:62:29:19:99:a3:dd:97:7a:38:8c:ee:48:32:fe:98:23:a4:
ac:da:f6:fc:e1:36:f1:bc:ec:08:ed:e7:3c:20:07:be:72:a9:
65:40:b3:33:0f:8e:7f:91:95:9a:09:2e:07:e4:e4:2b:a2:f3:
aa:cf:29:16:d1:ab:4b:8b:44:8b:be:7c:93:4f:d7:99:a0:00:
3a:c3:c8:c1:40:99:43:0a:f9:01:0a:86:e6:d2:99:06:be:77:
11:e1:6c:ca:6e:59:55:ed:6f:78:c8:f1:a6:7d:87:e8:4c:fb:
de:bc:33:a4:02:b6:04:3a:91:58:e4:eb:26:54:24:02:7f:76:
7c:a7:22:26:ef:21:30:9b:f1:0f:75:e4:24:6f:7b:c5:0c:75:
c7:53:5e:b1:ec:51:9c:1f:df:6e:fb:00:45:ec:b3:26:a6:4a:
94:7d:38:a4:3d:8e:0a:8d:8d:4f:cf:9f:a1:ac:12:62:37:9c:
87:2c:91:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:40:56 2026 by rpki-client