
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/228ca5f6-9d36-4770-9a9a-875deb39deb7.roa
File: 228ca5f6-9d36-4770-9a9a-875deb39deb7.roa (raw, json)
Hash identifier: hgPyRA6HbavaV+nHlcvdjhgNvJnmh/iYustj5NPwuT0=
Subject key identifier: 1F:29:5F:A9:52:2E:B9:F6:1A:E6:DF:2D:17:D6:25:CE:E9:89:8E:51
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3E664589533BA76E7261101447705F9E2A11F8F0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/228ca5f6-9d36-4770-9a9a-875deb39deb7.roa
Signing time: Mon 04 May 2026 03:50:12 +0000
ROA not before: Mon 04 May 2026 03:50:12 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3b50::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:66:45:89:53:3b:a7:6e:72:61:10:14:47:70:5f:9e:2a:11:f8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 03:50:12 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=6d1562a34fd0f9c9eae29cc7b1d3ff8518839704043dca2b93729e50766cdc2c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:36:23:6a:f0:43:fa:e2:2b:5d:61:59:a9:
c3:9e:37:79:f7:44:bb:28:e8:56:5a:0b:1e:01:90:
67:a6:e1:2f:48:82:37:ed:8b:f5:fe:4a:ea:26:1d:
9d:bc:da:7c:70:c6:18:4b:15:98:1e:f7:e9:19:6f:
d4:5c:51:ea:86:da:7f:df:7a:7a:0e:ca:8f:9f:ca:
a9:b5:fa:4a:4f:ef:d4:ce:59:84:e6:ae:34:b5:84:
c3:04:8e:31:17:c0:aa:eb:fb:65:24:a8:bd:00:37:
29:56:52:8e:5b:5b:ab:1c:40:c6:72:59:41:c4:44:
e7:85:56:44:e9:85:d3:d0:26:ce:19:5a:1f:3f:9c:
fd:fc:6c:ae:dd:b9:35:f2:ca:71:86:9e:f0:85:4a:
cf:09:f7:46:56:c4:3b:d0:d6:5f:d4:31:a0:f1:74:
59:4b:9b:f6:49:f9:b5:34:1c:8d:4b:02:ea:9f:8e:
ff:94:d8:0f:da:da:0d:4c:20:4e:f6:11:83:e7:0a:
3b:5d:f0:0b:1f:09:e3:bc:24:aa:df:03:c9:c9:6e:
e6:a3:98:f5:c4:ba:c3:66:c6:5d:7b:dc:f0:70:cf:
56:d7:75:44:38:8f:2f:f8:a0:95:22:d2:a3:37:5f:
16:09:d6:a6:6d:b5:4e:4e:f7:48:40:df:08:d0:b6:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:29:5F:A9:52:2E:B9:F6:1A:E6:DF:2D:17:D6:25:CE:E9:89:8E:51
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/228ca5f6-9d36-4770-9a9a-875deb39deb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3b50::/45
Signature Algorithm: sha256WithRSAEncryption
3f:8a:26:68:4d:2b:04:4c:e5:21:67:37:08:cd:bb:6f:87:ba:
ca:07:18:f9:29:46:c2:f7:40:16:c1:12:98:76:d7:3a:b8:f5:
e8:57:80:85:5d:dd:d2:1e:37:66:ba:48:18:8b:7a:55:62:3e:
61:a0:9b:78:f0:7d:35:82:32:2d:d9:9f:05:3d:cc:d1:9f:9d:
00:7e:8f:b1:17:8c:52:c9:e2:45:bd:85:b2:e9:b4:45:f3:6e:
40:0d:10:7e:c8:e2:b0:80:a7:a1:90:9e:c6:6c:ae:d7:42:f1:
17:6e:dc:e4:6f:be:4b:a6:bb:18:fc:3d:6b:69:01:7b:57:d1:
95:78:86:79:99:0f:d2:61:e8:27:47:bd:f4:2f:3a:69:33:1a:
2a:a5:cf:81:73:27:f8:83:a4:a0:fd:85:9a:d6:ec:f6:db:94:
1a:bb:ee:4a:ff:52:e1:1a:13:3c:64:e4:ce:96:46:a5:81:96:
e1:b5:51:ee:3d:f7:41:ac:f9:51:55:81:1e:7c:de:65:f4:d9:
d2:99:aa:a4:2b:20:39:43:fc:02:67:9b:69:99:87:54:d3:53:
5b:51:61:ad:55:ed:e0:38:5c:b7:26:95:bd:58:2a:2c:31:ad:
75:28:25:b3:bb:0a:fe:1c:e9:89:5c:91:d3:c0:f4:db:ac:65:
68:fb:4c:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:19 2026 by rpki-client