
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a244a18e-e78f-4bcc-916d-e1de1feda2a0.roa
File: a244a18e-e78f-4bcc-916d-e1de1feda2a0.roa (raw, json)
Hash identifier: eDXwRF0Vfs2btmcXq8cMiM8eA5mQZ/GGrsrRSEiZpjs=
Subject key identifier: 1B:2F:84:90:83:EF:82:5C:C4:DD:7B:90:B6:1F:DB:BC:C0:53:9D:5D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7A3FF7D934FC14EED65A52A5284C3095FB3DF4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a244a18e-e78f-4bcc-916d-e1de1feda2a0.roa
Signing time: Mon 04 May 2026 13:41:48 +0000
ROA not before: Mon 04 May 2026 13:41:48 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2c34::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3f:f7:d9:34:fc:14:ee:d6:5a:52:a5:28:4c:30:95:fb:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 13:41:48 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=5ecb7fba170e1f4984d4d29d219924b2be773595f0320d11f6d259905b0805de, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0b:1d:88:5a:84:7f:ee:2b:b7:a5:b9:7d:2f:
6e:3b:f1:bd:c8:2c:f7:3a:37:33:28:fb:2c:b3:57:
57:b6:c5:66:dd:38:21:fd:bb:1e:35:62:c9:08:c1:
da:03:eb:73:80:5e:7d:62:78:06:f1:e4:79:b9:22:
56:dd:67:bd:3a:c9:7c:d8:f6:1b:68:1c:73:f5:4d:
44:39:3e:3a:bc:84:d4:46:20:a3:9c:ff:1f:30:47:
fa:e0:46:5c:d6:9e:c5:c0:be:ac:f1:62:5f:64:f1:
ee:3a:94:3b:db:45:55:c6:47:2b:93:b5:46:81:23:
af:26:2a:50:d7:f0:02:de:eb:b9:3b:58:b7:bb:4a:
73:74:82:63:72:59:d4:0b:4f:07:6e:1f:e4:ae:d9:
02:38:67:48:d3:22:24:60:e6:4e:a4:65:1c:56:89:
08:f1:dd:5b:6b:d1:13:96:99:e5:ad:13:d6:9e:d2:
a8:8c:c8:d9:7e:12:5f:58:98:14:46:fb:3b:04:e9:
ec:25:c1:88:98:f9:d7:c7:7c:02:67:9d:21:e6:0c:
b4:f4:4d:ea:f4:bc:c3:10:d5:07:9c:7d:49:2d:f2:
04:b8:86:9c:c1:c7:66:33:fa:74:99:08:6a:94:3b:
59:bd:8e:02:41:85:d6:af:d6:d4:cc:be:3b:7c:a4:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:84:90:83:EF:82:5C:C4:DD:7B:90:B6:1F:DB:BC:C0:53:9D:5D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a244a18e-e78f-4bcc-916d-e1de1feda2a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2c34::/46
Signature Algorithm: sha256WithRSAEncryption
96:b7:50:8a:06:1e:e9:e1:01:69:43:6f:44:eb:26:bb:b8:bd:
c3:d1:0f:ae:17:6e:bd:ae:cc:fd:db:e7:0d:49:c4:a8:0b:03:
b9:7d:1c:33:f9:dc:7e:51:fd:d2:f9:fe:c5:78:4b:3d:e7:79:
29:7e:90:95:62:0e:6a:e7:ea:f8:c9:2d:57:da:4e:6d:9a:77:
c0:1b:32:11:d2:b9:ff:c4:61:ff:7f:cf:87:14:3f:26:31:50:
bb:49:9a:f2:2e:20:e7:6c:6d:72:d2:34:47:72:50:20:2d:74:
1f:16:1f:0d:f5:4c:ea:d0:f1:c9:fb:65:01:60:94:86:c1:45:
0d:4a:24:99:de:38:df:3f:e8:f5:b1:9d:fe:cc:93:a6:fb:66:
48:10:9b:0f:96:df:03:3a:cc:cc:15:f9:14:d0:87:ea:c4:9d:
38:0d:af:4d:97:f6:2d:0b:ba:0d:2b:4f:82:29:23:55:bd:31:
c4:61:00:ce:7d:bb:eb:42:20:f6:41:8c:79:bf:2a:4c:d7:5e:
ab:ce:26:06:ea:75:4f:7e:4e:40:b3:b3:90:2f:33:9e:08:00:
43:a5:b4:9d:9c:0b:88:57:de:68:d9:0d:9e:73:ec:d1:77:83:
50:3c:4b:00:a3:86:0a:a0:d0:da:69:b0:19:51:9c:11:74:ea:
fa:f9:26:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 00:38:44 2026 by rpki-client