
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5874cfc8-3aae-463b-93bc-23eea30b8ca4.roa
File: 5874cfc8-3aae-463b-93bc-23eea30b8ca4.roa (raw, json)
Hash identifier: cgAdy+AQjLI6Y13mACcUOpRkm7F66Ygm53vvH3T9Gps=
Subject key identifier: 84:E2:B3:55:B8:8D:F7:00:AF:B2:F3:CB:61:03:01:BE:A4:DB:F3:3A
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4F87A4495B48F8707CAFED0C1AC99CB4F4FC86F1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5874cfc8-3aae-463b-93bc-23eea30b8ca4.roa
Signing time: Mon 04 May 2026 13:30:13 +0000
ROA not before: Mon 04 May 2026 13:30:13 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:38a0::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:87:a4:49:5b:48:f8:70:7c:af:ed:0c:1a:c9:9c:b4:f4:fc:86:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 13:30:13 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=ebf0684b92ba45d0ec68ff66af5a4765a897d65a9e8b2b2c94a455dffa4bf4fd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:ac:94:93:9e:44:68:2c:61:1f:6e:08:ca:
c5:39:00:e4:d7:15:d0:a4:4e:51:45:f0:71:50:f9:
5a:6a:f0:25:ab:76:ce:eb:6c:ca:62:c7:3c:7a:a1:
75:79:96:80:66:c7:bc:0c:cd:df:28:44:39:07:5d:
69:e3:9e:0f:3b:69:08:4b:db:1f:71:d9:2b:47:56:
7f:8e:42:54:96:43:ec:f8:16:69:85:34:9f:e7:82:
e6:dd:87:ab:a6:6a:b0:03:0c:6b:6e:51:89:e6:bc:
d4:ac:c7:c5:c3:71:59:c7:1c:12:5d:6b:dd:7f:bc:
7b:75:82:62:5d:2f:af:b7:a5:1a:fd:a6:a3:05:34:
96:60:f6:5e:0e:7c:ef:1e:04:6c:6e:2b:43:56:76:
ca:e6:53:a5:e4:0a:b1:6a:82:35:fd:77:73:bd:7a:
e8:14:81:31:93:fe:f8:01:04:0c:ae:3c:0d:ad:7a:
07:b3:f6:2d:9b:55:92:a4:50:8f:99:46:54:45:87:
70:92:3e:5e:68:82:5f:7b:d6:17:2a:00:d8:9c:21:
f9:6e:c5:91:18:42:3d:68:55:d3:79:bf:2b:b3:e8:
51:c6:67:57:7f:92:08:65:46:9f:2e:8b:b8:80:c8:
59:4b:1d:99:65:6d:82:6a:eb:ce:5c:b8:6d:ef:65:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E2:B3:55:B8:8D:F7:00:AF:B2:F3:CB:61:03:01:BE:A4:DB:F3:3A
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5874cfc8-3aae-463b-93bc-23eea30b8ca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:38a0::/46
Signature Algorithm: sha256WithRSAEncryption
77:74:61:1d:c8:10:2b:1f:8e:27:e4:ea:ae:db:6b:1d:10:9b:
b2:45:a1:29:7c:7f:e1:16:77:13:30:d0:80:d5:59:8d:3e:fd:
ff:84:e9:dd:fb:83:60:69:37:08:fb:20:31:cc:a7:72:28:af:
23:24:ea:d3:96:d0:db:8c:ca:8d:76:4b:40:fc:14:43:dd:1d:
be:ae:f4:bf:f5:16:f0:8f:e4:dc:95:c7:50:ae:36:ba:4c:8c:
d4:76:ac:46:7e:8e:26:ae:5d:3b:59:a2:bf:b1:fd:e0:86:32:
c1:3c:8b:9f:0e:a5:e7:0d:d6:bb:0f:6b:27:3d:95:ab:3c:42:
f7:a2:ff:ef:fb:9c:0f:61:11:48:08:76:d5:10:dc:8c:ce:86:
d6:a2:83:9c:6a:be:68:b7:9f:fc:65:7e:3a:88:12:46:93:6d:
30:e7:65:f0:0a:ab:59:be:da:e9:fa:24:6e:90:a4:1a:52:07:
ed:12:f1:95:9a:b5:bb:99:33:1d:1e:f8:ec:ca:cc:4c:0e:37:
bf:94:37:6d:cf:f1:f9:23:f7:70:ee:c4:9c:96:c8:2a:0a:a8:
4c:1b:70:cb:02:20:9c:1f:71:a5:f4:5d:f5:c7:fc:46:cc:55:
e0:17:20:81:b6:d6:7b:74:fb:d5:cf:97:a5:c4:e9:67:a4:c7:
68:01:da:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:30 2026 by rpki-client