
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/974c641f-4a3f-4ba1-bf18-6a6c483ec39f.roa
File: 974c641f-4a3f-4ba1-bf18-6a6c483ec39f.roa (raw, json)
Hash identifier: PYJ40/fTV1oMgxttI/b46la9Wm+1PQ7EjdcRLAIq+4w=
Subject key identifier: F1:8C:36:4D:73:80:53:AE:D9:B2:6A:49:B5:7A:14:86:AB:41:AF:A5
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4AEF19366DFAC7FA1BA162C9F4A46ED75245EB2A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/974c641f-4a3f-4ba1-bf18-6a6c483ec39f.roa
Signing time: Mon 04 May 2026 07:30:13 +0000
ROA not before: Mon 04 May 2026 07:30:13 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2bb0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ef:19:36:6d:fa:c7:fa:1b:a1:62:c9:f4:a4:6e:d7:52:45:eb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 07:30:13 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=122bf89ca4da36932173677f63aa19f571bf4588b6f29b42913e62e88520e5fe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:7e:87:0c:ea:5d:33:3a:ee:a3:f1:fb:74:
3a:58:48:0e:e6:e5:a3:48:b9:ea:4f:c7:78:37:cf:
cd:8b:2a:a7:2d:d8:eb:da:0d:d8:a3:48:83:6a:0e:
55:ad:5e:36:90:86:c9:57:85:d1:27:75:c7:b5:20:
2c:a7:c7:a4:73:7b:2e:63:19:82:25:18:39:b8:62:
24:84:d9:7e:ca:87:f9:7d:b3:ce:b7:22:6c:21:78:
09:14:52:e7:59:ab:e7:20:62:aa:44:99:c0:3c:ad:
ee:71:bf:cd:4b:34:10:10:cf:17:e3:d1:d9:16:5f:
3f:ad:62:f3:e3:d0:6a:3d:42:3e:37:9f:b1:c6:c8:
42:22:76:c3:92:87:ee:0b:5c:e4:cd:29:7c:75:62:
f6:7c:78:40:fd:f9:26:95:86:6c:cb:5b:97:62:a2:
7d:c1:a4:d6:ec:fa:60:db:1e:58:1e:55:e9:3d:12:
1c:85:a6:75:b2:0f:28:cf:ed:8e:5d:63:cb:8e:dd:
37:a5:76:09:4a:7a:4e:4d:39:b3:76:ea:5f:39:89:
06:7a:da:05:dd:08:84:a3:cd:d6:37:ce:4f:36:ab:
34:25:cb:b5:ab:dc:a4:83:ba:83:5f:3f:69:f2:de:
d3:73:77:cc:9b:14:d6:ce:b0:f7:c5:ac:51:0d:9d:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:36:4D:73:80:53:AE:D9:B2:6A:49:B5:7A:14:86:AB:41:AF:A5
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/974c641f-4a3f-4ba1-bf18-6a6c483ec39f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2bb0::/44
Signature Algorithm: sha256WithRSAEncryption
aa:8b:15:07:6c:01:49:6a:a8:6b:e2:83:5f:06:52:5b:5e:a9:
6f:9f:0e:b7:f1:41:7a:e3:de:e9:87:71:59:3d:66:ed:ab:a0:
cc:67:2e:ff:3b:4b:e9:e5:51:f2:cc:7a:90:aa:5b:35:b9:8c:
e5:7a:81:9d:87:2e:7a:8f:01:e7:b3:95:38:3f:a1:a7:78:8a:
36:4c:e1:54:09:f7:91:db:d7:97:e4:29:94:38:a2:1c:59:d5:
a1:1d:8e:be:a5:9c:f6:db:a1:9f:fb:03:db:10:e2:c2:5e:c5:
b4:97:77:4e:fb:69:3f:62:c3:33:bd:0e:c7:51:d1:f7:17:e6:
ea:c9:82:40:38:58:30:df:8d:98:eb:6d:ec:8f:55:23:9d:a4:
27:50:e8:28:b7:1c:12:d3:9b:c3:9e:06:24:87:94:1e:44:67:
79:58:1a:a9:c1:a3:b9:56:a5:37:0e:59:6a:1a:56:c6:69:53:
a1:c4:3e:69:9b:97:0d:8b:f2:ae:8c:37:23:2c:0c:b0:aa:26:
2c:c6:66:74:61:52:dd:14:10:52:b2:b3:9a:4f:c3:6a:ef:1c:
ea:89:80:7f:6c:2b:c1:8f:ad:6a:8b:5f:e9:9d:a3:99:a7:32:
9c:41:79:4a:93:db:e3:22:89:92:23:d8:ca:ee:bb:2e:50:3e:
c3:72:5a:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:00:43 2026 by rpki-client