
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa
File: 5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa (raw, json)
Hash identifier: pUDx0qU1wQbSM90sdyjXrh2GWu2RmahYz5IrvI25f/Q=
Subject key identifier: FF:77:B9:49:6D:C0:2F:C1:F6:7B:86:2B:88:05:D5:F2:40:38:FE:8F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 54595D9A2237DB64C9D895D290CBB8BF141E7912
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa
Signing time: Mon 04 May 2026 07:50:58 +0000
ROA not before: Mon 04 May 2026 07:50:58 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3878::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:59:5d:9a:22:37:db:64:c9:d8:95:d2:90:cb:b8:bf:14:1e:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 07:50:58 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=582d012d1ea954339d563c2e3aed4f867d85e97ef217f48edf52dfc940faefaf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:cc:2f:6c:fa:02:40:5c:67:69:9f:35:a1:
fa:41:db:96:69:40:97:7e:1f:3b:40:63:1e:a3:8c:
67:ac:be:de:82:9f:69:e3:42:0c:7b:26:4d:24:8a:
c8:af:a0:44:1b:8e:f3:e6:07:50:31:c6:15:e1:6e:
c1:4e:15:11:93:48:e2:21:c7:88:25:48:33:87:a9:
36:2d:c9:a4:ab:37:ca:f7:20:d6:e3:82:ae:f6:9d:
6d:ec:3c:b9:22:f9:93:ec:bb:5f:a3:54:25:94:35:
ac:76:a9:da:ad:71:09:63:a8:d2:50:8f:ca:e5:8b:
81:72:c9:5a:4b:a6:73:2d:0f:fc:7d:24:2c:e2:33:
b1:d2:b8:b5:93:f3:c9:70:9b:7f:3d:0b:ab:61:f7:
79:86:43:8b:b0:1e:fd:36:68:10:0a:91:4b:49:58:
c4:5e:78:7a:2a:72:a1:94:14:fe:a8:0a:00:e7:b0:
06:8f:05:0c:96:47:63:af:d9:26:94:0b:cd:c8:d7:
b4:16:de:50:40:90:8a:77:07:f2:8c:f6:50:cf:9e:
1a:ec:85:dd:b7:57:28:0b:a9:fb:3d:62:a2:6d:3d:
30:cd:fb:21:43:d6:79:fb:09:50:ca:25:5e:11:7d:
94:40:6b:00:1d:03:2c:44:2c:f0:32:7a:f8:d0:00:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:77:B9:49:6D:C0:2F:C1:F6:7B:86:2B:88:05:D5:F2:40:38:FE:8F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3878::/45
Signature Algorithm: sha256WithRSAEncryption
66:a8:ff:05:71:70:78:3b:c0:fd:24:6c:73:43:f7:1b:94:59:
99:40:2f:af:8e:ea:dc:ad:e7:d5:62:72:5c:ef:a9:a0:7d:f3:
92:98:16:eb:ed:c2:af:be:b1:66:ce:87:bf:39:cb:0a:f8:cf:
ec:28:a5:17:52:65:08:02:d4:86:3f:3c:07:7a:e0:46:0f:b3:
db:95:96:dd:bd:b9:f7:26:c1:6b:53:22:f8:64:2d:9a:46:0f:
25:c2:a9:1a:79:cf:3a:33:c8:74:0a:50:b4:93:c7:e7:e1:49:
1e:63:9c:f2:d6:48:f2:6a:61:c5:6e:c5:c2:a0:ee:90:a5:31:
2c:84:04:0d:d6:79:d3:fc:5d:1d:62:26:f7:aa:dc:c1:40:4c:
44:28:8a:f6:76:f5:b4:a0:5b:47:78:23:8c:57:05:31:f7:12:
e5:f9:50:b0:ea:9e:30:86:fc:fd:84:8c:63:b5:71:e5:e2:ae:
36:1e:3a:dd:4b:5f:82:e9:a1:0b:41:a2:ad:6f:4c:22:2a:82:
5c:64:37:44:70:07:77:19:e5:c0:b4:5a:ef:68:c5:9d:05:3a:
ff:80:07:55:30:83:2a:7a:86:d2:0c:5a:a3:b1:a3:f1:89:55:
f7:e1:39:a1:a7:5d:2e:5b:58:1e:57:47:22:c4:a2:be:ff:c5:
e5:5f:86:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:59:21 2026 by rpki-client