
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4ebc709-1039-4042-b48b-16122d5ae2b4.roa
File: a4ebc709-1039-4042-b48b-16122d5ae2b4.roa (raw, json)
Hash identifier: PyLAvMCdCEcUzLUka4v2Y4Ebf13PYew6KcUzqTaqBNo=
Subject key identifier: 62:D8:0E:1B:7F:95:A0:01:96:03:A3:3D:89:D4:17:48:61:E9:B3:5E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1DDD79B8D07A2552E6E6A5A4D9C1159B1F7CE202
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4ebc709-1039-4042-b48b-16122d5ae2b4.roa
Signing time: Mon 04 May 2026 12:40:10 +0000
ROA not before: Mon 04 May 2026 12:40:10 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3eb4::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:dd:79:b8:d0:7a:25:52:e6:e6:a5:a4:d9:c1:15:9b:1f:7c:e2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 12:40:10 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=3681e713df088677e9854f9e61d89f3184155fd01628f5d4c0825d16dfb15e86, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:8b:0a:6e:91:21:4c:6a:40:8f:f9:b8:1e:
75:b1:4f:59:04:67:72:53:e3:01:14:38:87:6f:2a:
c0:3b:e7:36:54:0d:b0:8b:7a:69:61:83:de:fb:28:
ce:09:2e:48:b8:f0:12:52:67:be:25:75:d5:e4:58:
93:ff:ce:d2:16:c0:36:3e:50:e4:c5:43:70:38:21:
95:e4:6b:9b:5b:06:9f:78:04:8e:7b:a7:89:02:66:
e4:b1:53:75:de:b7:16:78:9a:5c:90:5e:85:31:66:
08:2e:51:ac:10:a2:b5:58:48:32:7c:9c:92:18:97:
c3:89:57:c0:8c:a0:3a:66:82:7f:a8:66:b5:2c:2d:
35:f4:2c:41:7a:27:26:e9:3c:82:ba:03:f1:5c:a2:
9d:94:01:4e:1e:bb:74:7f:2c:c7:b9:38:de:1c:a7:
bc:33:5c:39:6a:2d:f2:c7:46:ff:64:e7:d8:63:85:
5c:38:43:d8:29:75:6d:a7:b2:83:f0:4a:3c:1c:7c:
07:f6:83:6d:eb:ee:9c:44:cb:02:79:e2:d9:9b:74:
ce:7a:63:f0:62:3f:38:b4:29:c7:54:53:c5:4d:28:
e8:31:2d:71:e6:dc:49:a3:aa:8a:9b:2a:04:f8:bf:
cb:68:38:c4:f6:6f:33:97:bc:f8:f4:a3:d0:84:9f:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D8:0E:1B:7F:95:A0:01:96:03:A3:3D:89:D4:17:48:61:E9:B3:5E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4ebc709-1039-4042-b48b-16122d5ae2b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3eb4::/46
Signature Algorithm: sha256WithRSAEncryption
23:2f:26:1a:fa:e8:cf:b9:eb:40:95:75:d6:c0:8c:04:e7:df:
f9:d0:49:e4:ee:56:bf:99:cf:6a:32:a1:1e:3d:30:9c:77:d8:
46:2f:11:3f:5f:f4:4d:37:62:45:fa:d7:69:88:4a:f8:3c:42:
52:62:ce:36:db:79:13:de:33:1c:24:3c:d2:3a:57:c7:4a:a4:
c4:3a:bd:31:1a:c4:84:e8:14:2d:cf:46:8e:f4:6e:50:83:23:
4e:ee:25:b1:5f:a8:a8:fd:fb:f4:d6:d9:84:fb:16:aa:6d:57:
f8:05:29:72:5a:5d:fc:75:61:94:b8:ae:68:d1:fb:f4:8a:7f:
85:68:54:a1:3f:cd:2d:91:e4:ed:2b:92:ff:73:fb:de:eb:ad:
96:2d:1a:20:26:71:dc:37:07:3f:6f:4c:d4:e2:47:db:f3:1f:
47:06:ed:2d:5b:1b:5c:47:ef:9f:ca:7a:95:69:0a:53:fd:a1:
a0:c2:fb:58:d6:ad:74:84:64:e6:61:72:96:9d:90:8d:94:84:
88:24:02:4c:53:83:72:b6:3e:eb:05:80:7d:a9:3b:8f:d7:c9:
08:68:70:97:f0:2f:cb:2c:23:a3:30:0b:45:b7:13:3b:40:0b:
24:55:d1:66:b9:d7:df:32:39:c7:9c:54:83:77:51:3c:77:13:
01:53:40:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:02:42 2026 by rpki-client