
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb43c87-8840-4711-b54b-169e61239441.roa
File: 2cb43c87-8840-4711-b54b-169e61239441.roa (raw, json)
Hash identifier: SFUd2M8f3woMkkTPUtzcQK6uTJpDilz8QYmWml7WL8M=
Subject key identifier: 5B:A8:44:BF:CD:59:B1:D8:3B:38:2C:CF:26:81:8E:5C:A8:47:38:8A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 2B6C5BA0E61906049271A74CD08E71349C6047AF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb43c87-8840-4711-b54b-169e61239441.roa
Signing time: Mon 04 May 2026 05:41:23 +0000
ROA not before: Mon 04 May 2026 05:41:23 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3f88::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6c:5b:a0:e6:19:06:04:92:71:a7:4c:d0:8e:71:34:9c:60:47:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 05:41:23 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=9206e7bef6caf5aaeba8c4a1b0e19e7465bcdf21fdde5566e33333409faa9f5d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:bb:ec:d7:28:93:e2:ad:1e:3f:21:73:8b:
b6:ef:1a:29:6d:34:d5:de:90:e0:63:a8:83:95:d5:
22:25:8f:90:d2:4a:e7:d5:dd:90:99:7a:7e:c8:2c:
13:43:35:cc:cf:1d:e5:dc:ae:7c:83:e5:cc:93:9a:
42:90:96:69:75:82:67:59:37:69:2b:f8:d7:85:ae:
ec:cc:84:c6:e7:49:53:07:ce:1e:4d:3c:d1:bb:d4:
dd:2b:d6:c6:0f:68:19:65:36:cd:c0:a5:3e:47:b6:
e8:68:c3:29:a4:ae:c1:26:1a:fe:87:dd:e0:b6:71:
c4:1b:07:f8:cf:95:2b:15:02:a5:6f:38:19:7a:3d:
6d:21:67:7e:43:50:cf:b0:38:91:89:e3:a3:55:f3:
40:5a:0e:ce:10:0e:75:26:f1:6e:17:71:9c:ce:9d:
2d:18:57:1d:2c:2b:5c:8f:be:70:3a:40:45:47:fc:
47:ea:4a:1e:55:bf:6b:a7:c9:cd:f7:e4:82:a7:71:
93:4e:93:ac:fe:c3:57:af:05:4e:30:68:c4:1d:14:
5d:82:19:0a:97:1e:ec:e7:23:e1:cf:b2:e7:3f:fa:
db:c1:9b:a8:ff:cf:d9:e5:5e:5f:e7:c7:95:e1:ab:
e9:12:f5:cf:71:93:21:75:e1:b9:cb:d4:f5:a2:83:
ef:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A8:44:BF:CD:59:B1:D8:3B:38:2C:CF:26:81:8E:5C:A8:47:38:8A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb43c87-8840-4711-b54b-169e61239441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3f88::/46
Signature Algorithm: sha256WithRSAEncryption
08:af:e5:31:42:b4:48:5f:4d:77:86:81:21:8f:4d:9a:a6:ec:
44:19:1f:4b:ce:9c:3d:0c:b4:7c:e7:52:2e:83:f1:1f:bc:d6:
6f:97:a3:77:e1:24:25:8e:e2:06:fa:f1:69:f6:04:02:c5:53:
e5:cc:66:f3:27:ca:da:9f:13:6b:0c:a2:f8:3c:c1:de:64:75:
96:7c:f2:96:39:9b:f1:bd:8e:6c:8d:d5:8f:eb:8c:b9:38:b8:
9f:8e:7d:45:fe:fd:81:88:4a:6b:03:d6:02:19:92:d1:14:3f:
c6:4e:f8:03:29:ab:1d:ea:0d:01:6a:5c:52:f8:ca:31:d2:bb:
91:cb:10:0c:c2:0f:c0:54:a4:37:1e:dc:4c:1b:18:3a:43:e8:
61:43:f0:ec:e0:8b:70:47:24:91:30:75:c2:df:bf:c2:98:c4:
b1:64:06:69:55:e9:c6:df:7e:7f:64:a6:b6:3e:5a:d6:d8:77:
66:9f:3a:81:4d:f4:6d:00:bc:1b:87:cb:61:39:3d:eb:f2:15:
19:12:fd:6d:cc:c0:a3:38:36:4d:1b:0e:cb:d6:60:eb:e9:3b:
d2:d4:b7:2c:27:d8:63:f7:ce:c4:d5:81:f5:77:74:29:8e:0f:
d0:f3:53:be:c4:2e:5c:21:5b:29:1e:f3:d7:82:09:21:ae:4f:
94:f2:8a:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:02 2026 by rpki-client