
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e8f4751-14b8-4132-a9b6-0952462a17d6.roa
File: 6e8f4751-14b8-4132-a9b6-0952462a17d6.roa (raw, json)
Hash identifier: k/oRAf/PlV8DIdDwj+5gID6WEu2mrazjIFKTwib1c+s=
Subject key identifier: C3:9C:B1:40:CD:85:6F:70:C3:74:A5:0F:CE:7B:20:7F:1B:45:51:18
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 580DD8F493FD7A1176D6C3ACB875FB8D77653303
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e8f4751-14b8-4132-a9b6-0952462a17d6.roa
Signing time: Mon 04 May 2026 05:00:41 +0000
ROA not before: Mon 04 May 2026 05:00:41 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:354e::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0d:d8:f4:93:fd:7a:11:76:d6:c3:ac:b8:75:fb:8d:77:65:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 05:00:41 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=12b30a0db97bae4972ff0d71fad07117b173efb5f93ae4e65ab7d6c95d88ca35, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:e3:a9:a0:38:f5:25:59:c9:a1:13:91:50:
f5:bc:ed:34:1e:c9:29:98:8f:88:85:cf:2a:cf:04:
32:3e:0e:7d:c7:e1:51:bf:0c:ac:71:b4:8a:56:33:
ad:49:5e:21:8e:91:a0:ad:92:cf:3b:a0:74:e7:e6:
b4:90:84:44:31:20:2c:54:d4:0a:bf:85:94:78:87:
82:cb:b6:ef:8e:19:23:e4:8a:03:bf:69:f8:fd:a5:
50:28:e7:34:8e:a1:02:10:39:3f:a9:a0:0c:90:af:
0e:d1:ee:6b:78:7b:b6:ae:19:85:87:c3:69:98:8a:
d9:4a:7e:21:3f:59:0f:cc:04:28:e2:ed:7d:7f:6b:
b0:cd:3f:b5:ec:fc:85:a8:89:69:6b:b5:21:75:7b:
bb:35:52:fc:c5:51:34:b5:80:68:73:39:ac:f6:52:
2b:db:2f:bc:fc:80:0f:14:f9:34:9b:a4:46:e7:52:
ff:6e:79:09:33:22:a9:d0:d2:5a:3a:73:0d:c4:7e:
89:bd:34:76:4f:aa:b8:38:3b:ec:d8:55:29:60:13:
25:a7:1e:fc:22:4c:26:b3:9a:6a:c0:fb:8c:d8:d1:
e2:7e:3a:47:92:ba:72:06:00:5e:3b:14:7d:14:f7:
32:bf:68:09:f8:0c:2f:bf:e6:2b:a3:02:d0:75:6c:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:B1:40:CD:85:6F:70:C3:74:A5:0F:CE:7B:20:7F:1B:45:51:18
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6e8f4751-14b8-4132-a9b6-0952462a17d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:354e::/47
Signature Algorithm: sha256WithRSAEncryption
85:81:5c:56:4f:1e:c0:af:c1:2a:9a:b1:9b:93:86:dc:5f:8c:
21:a5:25:4a:4f:ff:81:39:65:37:ec:77:75:ed:3d:a2:49:cd:
c2:b5:fe:07:87:fd:cd:1a:d4:5e:b5:24:23:29:6e:1b:d5:84:
10:f8:ab:70:5e:a0:84:7d:47:23:6a:22:17:46:a3:4e:c1:b1:
a1:61:4e:7e:2d:95:f5:41:26:9c:80:02:d7:ea:ab:41:4d:8f:
04:ed:08:47:35:bf:ae:be:46:68:92:e8:0c:38:0b:70:8d:63:
b6:31:7f:96:44:b1:bf:0e:f8:34:a4:29:3d:38:fb:5e:a3:de:
72:a6:ce:60:5e:a7:27:59:6b:39:68:07:1b:c7:3b:c5:6a:3b:
cc:c1:bf:9e:1f:eb:c5:ec:00:7b:0c:b7:ff:73:68:c9:89:35:
af:5e:90:49:f7:90:de:81:0b:d6:be:56:7e:e0:cb:11:19:2e:
ad:aa:f5:ee:49:82:8f:ce:ee:b7:4b:2c:f4:b6:b9:b7:f4:f5:
81:e3:62:15:fb:73:94:c0:fb:87:0d:89:2a:d2:53:8e:a1:b8:
47:45:b7:b1:6c:44:eb:e7:71:25:21:37:9c:00:9d:f8:d2:a3:
dc:a7:d7:c1:02:cb:31:9a:a1:02:d7:9c:0d:e2:22:ee:f1:d0:
f6:ba:97:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:24:02 2026 by rpki-client