
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c2e8412-276b-4e56-9f53-55e3e538c28d.roa
File: 7c2e8412-276b-4e56-9f53-55e3e538c28d.roa (raw, json)
Hash identifier: vwwikZABQLkUNlCd9wxUqvCBR2Gvsrj4ZJ7E5wFjHCY=
Subject key identifier: 42:FE:C7:CF:89:C5:05:BD:78:63:85:93:D4:4C:1A:3A:B9:56:C1:60
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 27D27D9118222BEBC277C41EC945D6775A8239C4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c2e8412-276b-4e56-9f53-55e3e538c28d.roa
Signing time: Mon 04 May 2026 13:41:17 +0000
ROA not before: Mon 04 May 2026 13:41:17 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3ac8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d2:7d:91:18:22:2b:eb:c2:77:c4:1e:c9:45:d6:77:5a:82:39:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 13:41:17 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=e3920deeb134bdbd39213df4f0a623a7ea57fab943814afec90996f31e38e6ad, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:c5:25:e9:63:18:f2:97:92:8a:a1:f0:85:
fc:7f:0b:d8:b0:55:ae:ec:cb:70:60:66:89:c7:ef:
59:84:76:10:25:e5:54:86:8e:e5:49:34:cd:3b:2b:
23:c4:fa:94:8a:0d:d8:6e:b8:ff:40:16:a9:2d:80:
e0:84:bd:f3:9e:d6:5d:dc:2b:b2:b5:ef:b9:42:d3:
fa:66:fe:e3:da:bf:16:b0:52:22:f7:2a:1e:aa:81:
62:5e:01:b8:80:b7:ac:25:8c:77:60:bc:88:bc:5d:
a0:b3:12:cb:6d:26:26:b9:53:60:c4:06:57:8d:aa:
39:13:5c:13:24:9d:bd:5b:93:a7:9a:67:24:a3:58:
86:c3:5a:93:37:4a:03:25:28:ff:aa:a8:fd:a5:d7:
79:30:1c:ad:77:14:2d:1c:17:29:60:36:c5:63:04:
db:3c:49:7a:12:9b:fc:c9:25:ab:fd:9e:dd:66:45:
e9:4c:34:d9:17:b2:df:9f:6d:a8:63:10:04:50:b4:
1a:a7:cf:ad:ad:88:13:56:71:f4:bf:97:79:83:3d:
81:44:41:a3:0c:9e:b2:f7:2e:dd:69:8b:2a:58:a6:
d8:fe:53:69:59:45:65:a3:e8:d5:77:49:53:d9:95:
33:51:33:aa:3b:a2:74:b6:52:04:1e:75:ba:fc:6d:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:C7:CF:89:C5:05:BD:78:63:85:93:D4:4C:1A:3A:B9:56:C1:60
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7c2e8412-276b-4e56-9f53-55e3e538c28d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3ac8::/47
Signature Algorithm: sha256WithRSAEncryption
14:21:f4:9d:b5:5a:b0:95:ae:8d:37:ad:b2:cc:eb:d9:a7:6d:
8a:c1:cb:94:7e:f7:af:b5:35:b0:c2:fd:07:65:51:0f:ad:dc:
e3:52:8c:13:8d:2a:e1:c2:88:3a:65:f0:b6:44:e5:b3:99:a2:
dd:df:22:1b:76:85:ff:89:a0:82:5a:57:15:1f:71:e5:5a:0d:
f1:34:8c:b5:b5:2d:a7:d3:53:02:89:0e:5c:e0:c0:19:fc:7d:
40:e6:4e:60:e2:db:e0:55:4a:f1:88:e3:31:c5:cb:9b:8c:93:
b5:19:79:e1:89:99:1a:f8:f1:0d:b5:22:78:a8:59:10:f7:ad:
83:c2:ff:6f:ac:f4:52:3e:72:73:f1:1e:4f:22:c0:4b:3a:29:
83:43:ae:4c:b1:0d:94:3d:cc:d9:3d:5d:e6:0b:02:73:3f:dc:
3a:7c:6b:26:f9:a6:5b:cc:17:bd:4d:90:27:83:a6:e1:77:15:
bf:b8:70:c0:4c:f9:c4:21:34:8d:1b:68:62:0d:b3:4f:76:bb:
85:e4:4c:8e:b9:c6:a9:a4:44:46:c0:32:4f:8a:7e:6d:37:71:
2d:4d:6b:17:3c:a9:be:4d:7e:fe:b4:ec:b2:51:2c:6c:2e:53:
49:68:fa:8f:23:1c:ce:99:7f:cd:b4:49:f5:44:6d:e2:df:1f:
67:24:fe:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:37 2026 by rpki-client