
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ebe9aee-61d1-4410-a3fa-54a7289bf71e.roa
File: 7ebe9aee-61d1-4410-a3fa-54a7289bf71e.roa (raw, json)
Hash identifier: U6yE9CQk/N87o8XJdaiZdLrfARg1k0s5v9iI0Ngn1xE=
Subject key identifier: E5:C4:9E:41:53:56:7C:1E:90:CC:3B:71:15:28:84:57:32:15:F3:22
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5BC2B0DF8D3684DB9606D2EFC09D3EAC657B03F4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ebe9aee-61d1-4410-a3fa-54a7289bf71e.roa
Signing time: Mon 04 May 2026 01:30:42 +0000
ROA not before: Mon 04 May 2026 01:30:42 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3888::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c2:b0:df:8d:36:84:db:96:06:d2:ef:c0:9d:3e:ac:65:7b:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 01:30:42 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=9d740fedf2adba91af237a549df5a06461db4f9f3125bce04313855172512b20, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:97:cf:1e:e6:ba:5a:fb:52:d5:77:c4:6a:
49:d7:8e:14:9d:f2:66:ae:43:b2:f1:d5:6f:57:74:
ed:37:38:2f:7a:66:c5:b0:e6:b5:97:09:36:32:b5:
25:1a:37:b0:b7:e0:bc:d4:f3:b4:75:f5:f5:d1:96:
8c:8e:44:95:01:df:e7:56:1e:ea:9d:6c:ca:97:44:
6d:61:af:45:d5:9f:ce:07:24:45:ca:8a:ab:75:33:
46:cc:4d:84:2b:f7:05:8e:ef:bf:9a:fb:a0:e2:c6:
19:2a:7d:70:03:e3:ec:74:bf:2a:e1:ba:be:10:f9:
af:8a:5a:3c:bb:2d:d7:61:67:f4:15:d8:98:73:a9:
b8:36:72:cd:44:5d:1c:57:ff:15:f0:fc:89:9c:eb:
a7:cf:a2:59:a4:69:4f:b4:89:6f:87:87:ef:2a:49:
0f:6e:8c:60:ed:3c:3d:45:9f:d9:70:39:4d:c3:55:
8d:27:06:6e:56:bd:f3:c9:0f:6e:e4:37:37:75:8d:
84:2a:eb:86:f3:34:bc:ab:b6:9b:7d:dd:ed:26:43:
4b:b9:bb:e7:f9:a1:79:cf:1b:7c:3a:69:2d:a3:84:
03:ac:8a:59:e8:07:53:49:92:85:2e:06:de:8a:99:
02:f8:c0:36:9d:29:93:f4:0e:2f:0f:9d:7b:8b:98:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:9E:41:53:56:7C:1E:90:CC:3B:71:15:28:84:57:32:15:F3:22
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ebe9aee-61d1-4410-a3fa-54a7289bf71e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3888::/46
Signature Algorithm: sha256WithRSAEncryption
53:aa:01:9f:31:26:22:24:90:39:5e:e9:8c:af:63:8d:b3:81:
ef:bd:f1:08:ee:41:d7:26:a2:7b:a5:40:dd:5b:8f:b8:4e:c7:
d6:74:e3:df:70:f3:7c:3a:5b:aa:54:86:41:c9:14:fc:f7:28:
19:8b:8d:28:db:f3:d4:92:e6:61:f2:a8:32:38:65:ae:f8:b4:
d6:e5:9b:54:73:d3:46:98:9a:5e:32:e8:bf:54:dc:77:f0:98:
d3:c1:bd:58:75:f6:f0:44:23:ad:a5:07:6c:7d:c4:1f:44:a5:
21:ef:c3:9b:52:18:ad:e9:fc:e6:51:da:09:99:3f:8b:84:e6:
2a:2d:d3:7b:20:2b:8c:28:7a:e8:dc:69:4d:81:da:98:e7:e1:
40:e2:b2:0b:ee:b1:9e:6e:04:41:2b:10:4e:12:4b:09:11:4f:
a7:27:0b:94:2f:d6:2d:67:89:9c:35:60:83:f4:0d:d9:81:9e:
19:f9:b7:6e:15:12:98:9b:1a:dc:80:3f:8e:9c:1a:ac:db:a0:
45:48:cb:d5:e1:ee:f6:d0:ff:1d:13:c4:37:be:cc:e3:f5:66:
58:11:4a:93:0c:01:b6:a6:d9:94:05:b8:87:b3:8a:df:3b:d3:
81:a9:6d:38:95:a1:1b:0a:d1:51:3b:85:a8:b1:bd:d5:de:0e:
c2:b7:7e:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:26 2026 by rpki-client