
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3612cd78-3127-478b-b038-b463cf40f106.roa
File: 3612cd78-3127-478b-b038-b463cf40f106.roa (raw, json)
Hash identifier: +LZHxujmGGof4UX2H5jnlJY1lsiLaJoAFM3F/VjlRLM=
Subject key identifier: C6:76:A1:D8:A5:9F:0E:33:CA:7F:F5:0A:E8:F9:28:CD:3C:E7:22:76
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 72EA71F29B07692029A270E2B9CB6B0AFA63BC5B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3612cd78-3127-478b-b038-b463cf40f106.roa
Signing time: Mon 04 May 2026 13:51:30 +0000
ROA not before: Mon 04 May 2026 13:51:30 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:35ea::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ea:71:f2:9b:07:69:20:29:a2:70:e2:b9:cb:6b:0a:fa:63:bc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 13:51:30 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=31ed80b93f4917d42d021a025aafe6d96232dd2a086b0f035b4dcae728c14671, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:fb:4b:5f:6b:77:40:0f:d2:49:6c:93:c9:
38:90:87:61:18:fc:fe:0c:09:30:d7:e8:d7:39:08:
17:0d:1f:76:68:73:86:bb:22:5d:bf:09:7b:e6:63:
16:52:a0:62:99:d1:45:07:45:cc:c4:47:28:df:ce:
d1:c4:57:6f:7d:33:8b:7d:0b:19:69:51:fa:11:fb:
b6:d9:07:13:73:f8:af:48:49:24:d9:db:86:fc:8c:
df:d1:16:57:df:a1:bc:fe:df:bb:c2:9f:99:0b:14:
61:a1:c5:54:70:af:b0:47:96:23:92:91:d1:73:11:
a0:17:ec:6e:77:65:16:46:cc:f4:78:ae:3c:33:46:
80:0f:89:7b:ca:80:0a:ac:59:26:c1:8e:b0:74:50:
ba:e7:27:30:c7:bb:6c:ba:90:2b:34:42:48:56:59:
7b:e7:9a:82:ea:69:21:1d:00:14:9d:f7:36:a3:d9:
7c:11:6e:aa:f4:92:2c:ac:81:3b:34:5c:59:79:37:
49:8c:5d:cc:59:86:f3:12:a3:49:fd:7b:d2:05:f3:
ac:85:5b:95:6a:08:ca:ab:bd:b8:fa:86:f0:72:90:
15:3e:f9:6a:01:fa:21:31:f7:53:20:86:3c:6a:c4:
b8:ef:d4:18:f4:42:93:58:bc:04:4d:19:b7:fd:32:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:76:A1:D8:A5:9F:0E:33:CA:7F:F5:0A:E8:F9:28:CD:3C:E7:22:76
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3612cd78-3127-478b-b038-b463cf40f106.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:35ea::/47
Signature Algorithm: sha256WithRSAEncryption
97:22:c4:8b:70:de:d1:04:6c:fc:70:f0:91:51:4b:b6:57:33:
fc:a4:33:df:51:3c:3d:97:58:a9:55:2a:c2:6f:63:86:5a:46:
8b:ac:5c:39:dd:99:cb:ce:5a:1d:d0:66:fd:80:b8:b7:b6:35:
8e:a6:ec:0a:ba:6b:1f:9d:51:15:c1:7b:15:28:42:af:d9:4f:
fd:b8:57:1a:56:e2:10:e0:80:bb:65:0b:7e:44:40:13:ac:83:
b2:9e:21:39:a4:e6:be:e5:8f:71:57:90:58:a1:7e:67:ae:c4:
03:13:76:4e:be:b3:a0:d3:ab:e9:7b:6f:ca:78:b7:76:e9:12:
42:e5:81:c7:92:b4:fb:ba:3e:9e:d3:1f:73:90:79:52:57:dd:
34:11:5e:5c:ac:7d:27:7d:bd:7b:43:9e:41:2f:23:a0:6d:f2:
2b:35:6f:11:f5:88:eb:36:fd:af:9f:f3:63:a6:79:b8:fd:d2:
9b:4d:6b:34:3a:7c:ff:43:d5:9c:ee:ca:c7:1c:53:c6:6f:01:
fe:35:e7:ae:8b:9b:57:ea:41:a2:48:f5:52:22:d6:0b:b1:c1:
cb:f2:eb:7d:50:80:2f:a7:22:c5:3a:5a:4d:8f:e3:3c:15:cb:
fb:61:10:2e:1e:53:53:22:be:41:af:4f:51:ec:2c:d6:20:48:
83:a4:39:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:36:27 2026 by rpki-client