
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ba91ca7-9def-4330-98e3-4ad5929315d1.roa
File: 4ba91ca7-9def-4330-98e3-4ad5929315d1.roa (raw, json)
Hash identifier: DPbqapU2vDt/eUC/buM3zBNHr+kOU7S+K4LSc/sNu8s=
Subject key identifier: ED:11:19:14:56:56:B2:FF:C9:7B:F7:89:4D:2D:AF:DC:4B:D8:83:8D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6DD664704B6B1B154DC1893A9B35840015CD6A10
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ba91ca7-9def-4330-98e3-4ad5929315d1.roa
Signing time: Mon 04 May 2026 09:01:28 +0000
ROA not before: Mon 04 May 2026 09:01:28 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3d28::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d6:64:70:4b:6b:1b:15:4d:c1:89:3a:9b:35:84:00:15:cd:6a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 09:01:28 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=365c98c657a0ac4274bbfa4840e55f08b8d890bcd675acbe720954ae43d83cd1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:4b:05:a4:a6:24:ac:6f:9c:ee:ae:c2:74:
88:89:8d:fc:a3:62:22:b6:7f:f2:b8:91:78:87:dc:
d3:b5:6e:ca:75:18:f2:7b:56:de:92:59:44:02:50:
f8:6b:30:71:86:10:6b:39:f2:5f:be:fb:80:91:f8:
bd:4c:6e:0d:27:ef:3d:56:3f:c1:a1:cd:9d:e6:44:
cd:dd:3a:a3:5e:56:24:c5:99:c3:99:25:56:85:af:
bc:e9:1b:a4:37:d6:ef:1e:04:06:04:2e:07:df:f8:
c5:a2:28:06:38:b3:74:24:29:db:2e:bf:ae:5e:7d:
df:27:f7:d1:42:79:b0:ba:7c:06:0e:49:d1:63:76:
ef:91:1c:f8:01:5a:ae:73:b2:3f:58:90:0f:15:23:
50:3d:f5:f6:e2:d2:92:52:ad:d8:94:86:a5:2b:40:
3e:12:3d:cb:a5:f3:49:d5:b9:ca:16:fc:b0:b3:0d:
26:53:5c:2d:92:d4:4f:3d:ba:3f:4a:c4:68:c6:ee:
9d:0f:4d:16:2a:c1:d6:08:38:8d:db:18:dc:5c:7d:
67:b1:ef:05:eb:b9:37:41:35:73:06:c4:cf:46:ff:
71:52:21:6e:f1:d4:d5:d2:67:41:79:46:03:68:22:
18:cf:79:c8:85:a4:ee:59:ad:3b:fa:33:db:63:3e:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:19:14:56:56:B2:FF:C9:7B:F7:89:4D:2D:AF:DC:4B:D8:83:8D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ba91ca7-9def-4330-98e3-4ad5929315d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3d28::/46
Signature Algorithm: sha256WithRSAEncryption
b6:30:45:3b:21:1f:56:ae:96:33:50:9a:06:b5:b5:36:5b:a7:
e5:e0:5d:32:83:9b:12:55:32:50:9f:45:37:34:fc:cc:c5:95:
ee:81:4c:f3:35:52:7a:01:89:e1:be:eb:5e:d2:37:c2:86:02:
d0:c0:2c:be:9e:f0:05:51:bd:48:73:87:e1:a5:24:1e:b4:cb:
13:88:63:89:9e:04:d5:62:40:98:8c:45:d9:a0:de:97:a7:73:
93:14:c7:d9:ef:b9:17:21:1a:84:7a:55:81:b9:fe:7e:66:dc:
fb:1e:08:8b:0f:bb:41:e1:8f:18:0d:fa:03:cc:30:9c:95:cf:
bd:11:6e:0e:55:59:5f:66:b0:b7:95:2a:86:30:5f:b3:72:3a:
37:b2:2b:49:33:c1:6b:95:ea:7c:3a:65:3e:a5:9a:fc:be:3f:
b1:9d:65:f4:06:57:e0:c2:af:25:8f:55:19:44:38:40:6d:ef:
fd:9c:8b:db:52:b0:da:10:4a:6e:10:cf:ed:05:ba:d6:5f:93:
84:5a:f6:6b:94:5c:9e:37:d6:bf:ba:b7:42:db:9a:51:74:05:
71:ae:74:cc:45:71:e5:9b:e9:f7:76:2f:3b:c9:54:cc:8e:79:
47:05:0c:67:a6:58:74:50:67:1d:82:2a:23:81:c9:70:3b:b0:
35:27:73:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:21:01 2026 by rpki-client