
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/749aa9c5-493f-4771-b436-1c8f49ca0354.roa
File: 749aa9c5-493f-4771-b436-1c8f49ca0354.roa (raw, json)
Hash identifier: dk2EpdJFTp0fDCtzRmTG5BQ6y4klJgy/E2npX9HXzhE=
Subject key identifier: 3D:E1:C8:5D:E9:67:E9:F0:22:E0:3A:F6:CB:F4:73:F7:92:DE:65:D2
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0100453D2179478BAA48A472540B9DBB4C70FDD7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/749aa9c5-493f-4771-b436-1c8f49ca0354.roa
Signing time: Mon 04 May 2026 10:50:43 +0000
ROA not before: Mon 04 May 2026 10:50:43 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3bbe::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:00:45:3d:21:79:47:8b:aa:48:a4:72:54:0b:9d:bb:4c:70:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 10:50:43 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=c894e3e0c104f92df7b11a47dd63e579a06e55809eeb807b88e7ea0d4d5228c5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:b1:df:6d:f8:c3:29:ea:6d:c6:da:a2:4f:
83:fa:c8:f3:b4:cc:e1:70:bf:95:1d:8d:c3:d5:ff:
68:e1:51:12:7f:30:62:ff:2f:b7:b6:b6:2c:1d:01:
d7:7f:87:f5:d6:a1:07:f7:3d:bf:6b:59:96:ce:d0:
51:0f:0e:d5:af:68:8d:9e:79:f0:50:07:a8:5e:d6:
f3:1b:5c:99:b6:c6:0c:03:a0:70:11:09:aa:36:c4:
06:54:0f:d1:52:65:d8:59:88:c6:d7:6a:a7:ff:21:
5c:ef:a2:a8:da:56:36:bc:e9:0e:88:7f:91:ce:8f:
8c:d1:3f:3f:fe:16:42:a3:eb:0a:31:66:a2:4e:de:
19:24:83:e1:ca:c9:1e:c6:d8:53:d6:d4:00:6a:45:
3a:bd:18:c0:8e:c0:8b:e4:fe:bd:7e:40:ea:3a:ef:
b7:3a:4c:4d:75:6b:dd:f8:83:6f:3b:20:ec:dc:60:
0d:ad:48:c3:b5:b4:35:ce:3a:ed:54:3c:17:51:8a:
e8:3e:4c:bf:e0:60:ff:7b:8d:a7:31:41:8f:16:1e:
61:53:bd:45:28:27:b1:ca:7f:d2:3f:7d:aa:96:c5:
4b:41:25:f8:6b:a1:12:67:ff:52:2d:4f:74:1f:46:
bd:e5:be:8c:3c:91:55:ff:08:e1:04:34:a9:62:9b:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E1:C8:5D:E9:67:E9:F0:22:E0:3A:F6:CB:F4:73:F7:92:DE:65:D2
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/749aa9c5-493f-4771-b436-1c8f49ca0354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3bbe::/47
Signature Algorithm: sha256WithRSAEncryption
a9:a7:ca:ba:d3:b9:03:8f:09:7e:3e:fd:4c:63:11:17:8b:e9:
92:05:48:04:b1:82:36:3c:30:63:a9:39:b6:a3:e3:e6:c7:e8:
ba:47:b2:2d:01:40:a2:35:6d:9c:f2:c8:4f:f8:90:64:ef:bf:
9e:f4:d6:2e:27:e3:e9:4b:ee:8d:da:d1:37:6e:04:f1:d5:6d:
c0:a5:22:a4:94:4d:ed:1d:18:0f:57:ed:57:4e:8e:b9:b2:22:
7e:e8:0b:91:e9:2e:0a:0a:a7:dc:e2:83:d5:55:a2:ad:68:37:
11:2e:24:aa:4f:0f:70:f8:ac:91:5a:3e:3a:b4:62:6a:46:56:
12:fa:da:bc:aa:29:83:fa:cd:bf:fc:13:f5:c4:4a:a5:4b:00:
1e:10:68:d3:72:22:d1:4f:e4:87:0e:0b:02:30:0e:7a:8b:a2:
9f:e4:e7:5c:9c:2c:30:84:85:2f:d0:aa:06:df:28:eb:8f:3e:
14:55:16:50:2f:37:9c:d6:8b:0f:3b:fd:cf:a3:33:c7:c3:eb:
80:86:4f:fe:9f:9a:01:c7:e6:fa:05:7a:7c:ca:92:2e:42:79:
e3:03:e0:8c:74:cd:3c:be:7a:f1:2d:71:4f:f0:b0:cd:71:5c:
2b:f0:47:b9:e0:60:10:9a:a2:ea:7f:54:2d:cc:40:ba:84:cd:
c4:a6:42:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:16:45 2026 by rpki-client