
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/672c5e63-3f84-4ec7-99b4-d85fbb1965f5.roa
File: 672c5e63-3f84-4ec7-99b4-d85fbb1965f5.roa (raw, json)
Hash identifier: 0Ot2ThLzGtyNpqhlFDDn8YhldRjntx3uQL21p4DACWc=
Subject key identifier: 5B:5C:BA:E9:87:C7:44:F9:08:E5:02:8B:09:A8:A4:0C:56:AC:F9:70
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1AD818C8BE3E9A082C3EAA19AE56546DE2ED4F5A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/672c5e63-3f84-4ec7-99b4-d85fbb1965f5.roa
Signing time: Mon 04 May 2026 09:30:15 +0000
ROA not before: Mon 04 May 2026 09:30:15 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:27b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d8:18:c8:be:3e:9a:08:2c:3e:aa:19:ae:56:54:6d:e2:ed:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 09:30:15 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=fbd221f139e67b8ff40334ac53bcbb3f822cfd6659f2f035e07e279757919a82, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:72:51:0e:2d:81:0a:fe:75:31:d5:a3:01:
8b:2f:ab:6a:50:67:ea:a9:18:51:ca:04:7b:63:91:
5a:57:31:56:4e:0d:78:a7:99:85:21:ab:f6:31:0e:
ed:d2:ce:3e:ec:86:f3:04:da:82:fb:a4:9c:bd:83:
3d:e5:5a:c1:10:6c:7f:ed:6d:15:76:ec:42:e4:d1:
49:be:0c:db:41:5b:2e:a9:04:b5:85:39:be:4f:69:
7a:1d:e4:eb:70:6f:18:37:b8:f8:4e:ae:da:d4:b5:
5d:61:45:df:d6:12:9c:51:af:d6:1f:ce:b8:96:e3:
b6:31:c8:b9:58:62:82:d2:6b:64:e8:73:be:9a:19:
16:a0:60:77:f9:d2:2b:da:c2:90:44:63:f6:63:f7:
59:f6:50:21:13:da:ac:4e:ac:03:c7:80:ca:b7:4a:
ad:a1:4f:97:41:90:5a:44:c1:c0:95:a8:5a:50:16:
a8:51:42:4f:b8:59:a1:b0:c8:39:50:dc:79:a3:74:
3f:f9:f7:a7:fe:dd:b2:39:89:8c:39:13:12:f0:2c:
af:b8:c9:7a:e8:fa:13:50:df:50:4d:23:12:6e:01:
e5:15:cb:bd:34:64:b9:c3:72:5d:89:d9:e6:b9:10:
18:91:53:4c:81:45:f2:74:12:42:cc:47:a6:0e:cb:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5C:BA:E9:87:C7:44:F9:08:E5:02:8B:09:A8:A4:0C:56:AC:F9:70
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/672c5e63-3f84-4ec7-99b4-d85fbb1965f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:27b0::/44
Signature Algorithm: sha256WithRSAEncryption
94:d7:cd:d7:a1:ae:df:3c:5c:b9:c9:c7:fd:de:20:d9:70:08:
e2:75:a4:41:42:3a:78:e0:3f:8b:7d:10:fc:2b:9b:6b:1b:f8:
45:2f:9b:d0:d9:55:f0:08:39:7e:a7:fd:ab:91:b6:37:ab:68:
d3:85:a6:49:3f:de:af:25:f9:39:f3:0c:98:b1:76:8a:eb:29:
d6:34:74:ea:ba:c5:82:fc:5c:89:02:2d:43:22:e0:f6:87:eb:
52:24:1d:ea:48:a8:f2:5f:32:71:a6:90:b4:f6:24:c1:0d:23:
43:da:d3:9f:9d:56:13:31:84:72:90:c0:6a:8f:39:ba:a8:99:
91:33:86:9a:95:9b:75:74:20:85:b5:a4:ca:fb:1f:2e:87:d0:
68:ed:95:d8:7f:ba:44:36:57:e3:90:79:50:bc:20:e7:5b:ec:
ae:01:54:fa:05:8e:5a:ee:d0:06:2c:4b:dd:6c:42:b8:21:f0:
05:e4:7e:aa:7b:49:ed:55:a7:60:1e:1f:09:cc:2a:15:31:92:
14:59:37:2c:dd:cc:95:54:e1:fa:1d:83:2b:ac:40:67:eb:a3:
ea:e1:5e:07:01:14:71:36:be:70:4f:f5:12:7a:91:6d:d8:82:
91:05:fb:55:c4:68:4d:6c:30:99:f4:04:0b:cf:aa:ca:bc:0f:
b2:20:a3:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:19 2026 by rpki-client