
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98b2ed50-2e83-4c0e-90c7-a4cb1249105d.roa
File: 98b2ed50-2e83-4c0e-90c7-a4cb1249105d.roa (raw, json)
Hash identifier: YBSfMfbWjDdoVuTsp2HKGxkV4n+UCpLZoSH54/mupms=
Subject key identifier: 2D:6D:EC:AE:75:91:DE:78:BC:A8:39:EF:C8:6E:C5:35:B9:4C:5A:C2
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 60A562717138089C7FC736CBC71445894CF48D1B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98b2ed50-2e83-4c0e-90c7-a4cb1249105d.roa
Signing time: Mon 04 May 2026 03:30:56 +0000
ROA not before: Mon 04 May 2026 03:30:56 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:29e8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a5:62:71:71:38:08:9c:7f:c7:36:cb:c7:14:45:89:4c:f4:8d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 03:30:56 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=0f2decdaf248ff4e3fca90df11a3185d975fb329aea6d04c9685ee617b1b0a6c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:16:b0:a4:57:9d:02:56:59:b1:6a:97:a9:
92:00:22:dc:49:88:4f:65:ab:f6:23:c5:8b:a9:cc:
7e:7a:ec:b8:5c:3d:cd:81:b7:49:b9:df:ae:b9:ac:
8c:e3:98:7d:fc:b8:0e:0d:2a:32:69:2a:17:03:30:
05:da:bc:a2:21:31:1d:f5:11:55:08:ec:26:68:79:
17:42:02:a2:90:fc:9e:a5:26:d3:b7:90:b9:ee:ca:
46:77:cc:d5:91:68:e7:1b:eb:63:52:8c:d7:06:ea:
eb:7b:31:46:90:f7:51:f1:5e:99:e1:49:51:56:63:
73:23:a1:4f:cd:64:60:b2:63:b3:ed:38:1c:bc:f4:
da:2e:4d:4d:98:9a:ac:bf:fe:49:8f:8f:56:2c:2b:
0f:79:a8:0e:64:4d:a1:2f:15:b5:60:a4:eb:9c:c2:
18:df:6b:5d:93:4d:d3:96:e9:44:b9:e7:d6:2b:09:
75:14:e8:ff:43:74:32:29:4f:59:33:93:80:75:c2:
b4:d2:02:85:8f:0a:ac:47:93:2e:9b:20:ec:d1:cf:
2e:d8:29:6a:a9:ae:c4:99:87:dd:67:d3:87:eb:3f:
c9:43:c3:54:53:13:33:74:ab:e5:25:4f:41:3e:9c:
2b:0c:5e:ee:48:e1:d2:03:5e:af:4e:26:c6:96:09:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:EC:AE:75:91:DE:78:BC:A8:39:EF:C8:6E:C5:35:B9:4C:5A:C2
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98b2ed50-2e83-4c0e-90c7-a4cb1249105d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:29e8::/46
Signature Algorithm: sha256WithRSAEncryption
a0:e2:1f:36:33:76:2b:fa:0f:a8:96:64:5a:5a:49:60:9e:2c:
be:69:e9:d3:0f:6e:af:cb:fc:f5:d6:f7:52:fd:a9:92:d5:87:
98:d3:3f:52:79:f8:ac:8d:b8:ff:9f:08:64:fd:10:a7:c2:87:
16:4c:37:b4:d5:9a:1b:98:1a:29:f5:58:50:62:5d:11:c3:8e:
67:a1:3a:66:a1:9f:14:2a:6b:2b:05:59:39:32:bc:1d:38:3f:
1e:53:bb:dc:cc:7f:ea:f4:7a:51:e3:3a:18:d8:65:7d:e8:ce:
a9:05:a3:d7:8d:83:36:55:ef:c6:3b:aa:78:21:c0:f1:01:31:
2e:7e:7b:d1:b1:bb:f6:06:29:a4:af:e5:4e:29:77:4e:46:20:
2f:26:50:6b:4a:f4:a8:a1:4b:c5:3a:3e:b4:c7:88:3c:c6:83:
52:85:bc:18:f3:92:b1:5f:18:e8:a9:95:99:ad:ee:fc:f0:31:
b9:67:20:86:ba:8e:56:82:b3:26:5e:02:87:06:ed:13:d5:69:
29:31:85:cc:18:fd:28:c5:d6:9a:44:2a:df:0d:d2:f9:6a:76:
e0:be:b7:77:72:49:b0:4a:94:ce:45:8e:8c:09:a3:3c:f4:51:
ce:30:fd:4d:bf:95:5d:41:c5:d7:04:eb:3c:39:6f:18:b6:05:
05:08:9f:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:42 2026 by rpki-client