
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ce84d39-acdb-4467-aa3e-e66b3d8d9771.roa
File: 4ce84d39-acdb-4467-aa3e-e66b3d8d9771.roa (raw, json)
Hash identifier: OHCzddVUGBChVzngWWqPPDrf36dwFPKEKoUVuXB++qY=
Subject key identifier: E2:27:19:16:48:BD:58:B0:64:BC:24:43:67:EC:EB:5C:59:2A:22:68
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 27B70712A9FC40EEB1D30AD13E1FF8238C23D001
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ce84d39-acdb-4467-aa3e-e66b3d8d9771.roa
Signing time: Mon 04 May 2026 11:12:16 +0000
ROA not before: Mon 04 May 2026 11:12:16 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3db4::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b7:07:12:a9:fc:40:ee:b1:d3:0a:d1:3e:1f:f8:23:8c:23:d0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 11:12:16 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=5a7b06141e2fd20483543a1bbc5f6f30ba6947554cf9f49238e0efc86919333f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:67:3b:98:b6:b6:e7:e8:3f:e8:07:e3:16:
dd:e3:3b:79:4b:d6:c8:69:d4:86:cf:70:ad:4e:af:
14:87:0f:5d:97:b3:10:12:b6:98:6a:ec:25:7a:c5:
90:9e:ab:9c:02:97:93:70:f4:0f:a7:1e:22:1b:2f:
59:66:9a:af:e6:36:d2:b5:74:36:c5:fd:88:d5:1d:
6d:81:43:0a:56:7f:71:89:52:3a:86:98:ba:3a:66:
62:6d:96:cc:69:06:86:d8:e3:1b:03:32:58:d7:04:
9b:05:76:84:4b:29:68:84:26:d3:91:a7:94:b0:98:
47:fa:51:40:0e:dd:86:36:be:42:e6:a5:94:5f:3f:
f8:69:49:cc:17:1d:fc:6d:d6:20:f4:fd:c7:a2:6b:
ef:fc:cb:24:9c:ca:74:77:04:6e:f4:38:b5:63:9f:
18:b8:79:33:7e:c2:bd:eb:fd:67:4f:aa:b6:8a:9d:
01:a1:f9:99:6f:d7:a7:b7:4b:df:02:11:0b:70:e7:
3c:03:52:76:fc:f3:7f:98:af:cd:14:ad:d1:38:93:
d0:cb:bf:89:f5:9c:70:09:71:ba:dd:6a:be:d1:51:
03:be:88:81:46:a7:02:b1:13:c8:dc:8b:27:e6:2b:
da:e1:8d:90:22:8e:8a:4c:0c:45:e4:05:bd:b1:a8:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:19:16:48:BD:58:B0:64:BC:24:43:67:EC:EB:5C:59:2A:22:68
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ce84d39-acdb-4467-aa3e-e66b3d8d9771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3db4::/47
Signature Algorithm: sha256WithRSAEncryption
20:e2:24:2f:b8:67:d6:22:a6:68:46:31:6b:c8:29:c3:b1:53:
5a:39:7e:46:81:a0:27:d0:c2:59:1c:9f:9f:19:65:78:6c:9a:
06:f8:02:88:8d:16:9c:92:e5:d3:f3:da:dc:37:af:da:64:82:
ce:e7:fa:c9:e0:66:99:c3:3f:b4:42:9a:57:f3:6e:ab:51:43:
bc:0c:1d:40:0b:66:e7:ea:9f:b4:73:6d:f9:ca:46:99:c1:50:
82:e0:da:3b:81:f6:18:09:7f:9f:25:00:cd:29:2f:e3:c6:91:
7b:79:02:39:a6:5e:45:a2:c2:8c:ee:66:99:d5:8d:78:c9:e4:
82:c9:a3:26:04:ba:e6:fd:c9:cc:45:7c:db:20:c9:20:c8:3e:
14:e1:d9:96:b1:51:cd:e4:ec:c6:c0:cb:9b:f0:90:ce:e0:4c:
65:b3:ce:2c:56:d8:44:e7:d3:ae:29:39:48:d3:e9:e6:8d:54:
fe:fe:68:84:ce:b1:1e:ac:ad:b5:ca:0d:48:bf:1a:05:ec:fa:
67:f0:27:dd:42:8a:27:fd:12:96:6e:04:eb:3f:97:87:34:e2:
fc:be:9a:03:83:ee:de:05:36:3c:e6:11:1c:a7:9d:35:b9:d7:
ef:f1:98:d4:6f:cd:c1:f5:d6:e0:0f:97:f4:eb:4c:10:3b:6e:
db:99:26:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:59:14 2026 by rpki-client