
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e8e362c-8cae-4d01-b5b3-d6e21960aee7.roa
File: 4e8e362c-8cae-4d01-b5b3-d6e21960aee7.roa (raw, json)
Hash identifier: E64BXtXfyHq/avBBHfgYrPiYhmjFJXuf1Se/GLpdAbk=
Subject key identifier: B6:31:A1:F8:99:73:76:F2:25:20:68:27:08:11:11:02:5A:68:37:5D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 11528686A72715BF7FD98445F3286C27770CBB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e8e362c-8cae-4d01-b5b3-d6e21960aee7.roa
Signing time: Mon 04 May 2026 03:10:13 +0000
ROA not before: Mon 04 May 2026 03:10:13 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3e66::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:52:86:86:a7:27:15:bf:7f:d9:84:45:f3:28:6c:27:77:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 03:10:13 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=405d7afcd404086bbc2abc97d45904839ef0cf97f7cc7309c2df0582faab4ef8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:12:e8:7b:9b:87:1a:11:99:60:fe:f7:f6:
82:11:ba:d4:d8:d3:94:a1:5d:58:2c:bd:31:53:da:
5c:16:4b:a5:48:98:d1:37:64:76:2d:56:8e:d7:7e:
1b:e6:84:c4:50:d2:e5:fd:08:93:96:62:45:06:23:
49:a8:f3:96:8e:4b:8a:18:9e:30:6e:9c:74:ad:e0:
06:19:35:dc:43:9f:d2:cd:4f:01:cf:50:51:d4:17:
e1:cd:39:2b:8b:bd:3f:25:b2:95:13:fe:61:8a:a4:
fa:3c:4f:ec:5a:c6:cd:e2:ec:9d:e8:ed:42:20:a4:
0c:52:d9:cb:fc:1e:76:44:f8:c8:ff:df:e9:5e:b5:
1e:0b:07:86:69:bb:69:fb:87:e7:87:97:cc:dd:53:
22:7f:09:08:51:3b:4f:c5:00:71:fc:99:bb:85:ac:
d0:6d:53:e2:ad:c4:96:9f:cd:8e:e0:72:3d:71:a8:
e4:ad:7c:1d:69:80:93:e9:e9:c0:60:77:b0:15:c9:
da:1a:df:22:e6:df:08:9b:64:4b:6c:c0:01:fe:6f:
d1:6c:b9:02:d5:12:13:7f:f8:9f:7a:85:02:50:d0:
a0:65:e2:08:c6:73:c4:03:d4:c3:79:f0:2b:9b:df:
c1:17:5c:e8:6c:df:69:71:2c:eb:d1:39:93:46:f9:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:31:A1:F8:99:73:76:F2:25:20:68:27:08:11:11:02:5A:68:37:5D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e8e362c-8cae-4d01-b5b3-d6e21960aee7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3e66::/47
Signature Algorithm: sha256WithRSAEncryption
a3:23:65:30:d6:53:2b:8a:0e:c6:85:71:85:e2:26:bc:98:ed:
8c:cb:8d:55:b8:f2:b3:f6:46:a2:a2:74:f7:de:8a:5a:69:f4:
8a:c4:a5:7d:6e:52:4f:d4:72:d6:d9:f1:dc:1d:e2:a2:96:18:
2a:3c:0e:cb:b7:4b:ea:38:53:21:d8:11:06:33:40:9f:7c:68:
d6:de:ce:d5:dd:db:9e:ff:4f:ca:cb:a5:ee:52:d5:90:cd:c6:
ba:b9:f5:d8:69:eb:35:12:99:78:bb:3a:ab:bb:ea:e7:f1:12:
13:36:de:65:c1:ad:a8:91:d1:e3:e3:f9:36:3a:45:a7:59:d4:
6e:59:1a:63:9b:a0:f0:f4:44:7b:7b:50:94:21:88:9e:ba:71:
e4:35:1c:da:55:08:c0:40:6f:32:d3:4e:33:2c:f4:31:af:47:
c3:69:d7:88:79:8d:bc:e2:14:57:f3:02:fb:f3:80:a5:7f:78:
5c:c1:a9:5c:d7:84:fb:41:87:d5:d6:51:3d:81:28:c5:33:3a:
34:5a:82:e5:61:1d:13:ec:2e:42:ec:43:6b:ed:e5:ed:a1:cf:
e7:5c:4a:94:82:13:21:19:f2:c1:cf:f2:33:ef:6a:03:38:59:
ce:0f:0f:18:ce:f6:ef:5c:a8:f0:b8:b7:81:af:f8:48:ff:84:
b9:63:a1:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:32:23 2026 by rpki-client