
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a52c26be-3fbf-4a06-afc9-aeb86a94f846.roa
File: a52c26be-3fbf-4a06-afc9-aeb86a94f846.roa (raw, json)
Hash identifier: ZK9nl785Rp4U/tySxPBw+THMfZumGc96XtYnIs+laOs=
Subject key identifier: 1E:54:0E:41:1F:58:58:4A:76:5B:7B:ED:1E:C5:88:29:04:C4:C7:A8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4F4CBF3279787ABD3AB2737138D453CF9139FABD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a52c26be-3fbf-4a06-afc9-aeb86a94f846.roa
Signing time: Mon 04 May 2026 08:41:15 +0000
ROA not before: Mon 04 May 2026 08:41:15 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3984::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:4c:bf:32:79:78:7a:bd:3a:b2:73:71:38:d4:53:cf:91:39:fa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 08:41:15 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=471b6fadc366329fec041f58c0a89d97590c87b7339b31170bf15f7e344853cb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:7c:f1:16:e6:8f:60:49:53:51:41:9c:8d:
9a:0d:0b:09:fe:72:5d:87:87:a1:a6:12:50:b6:9b:
9f:cb:eb:b1:28:4a:48:85:97:d1:24:3c:ed:df:0d:
3f:d0:ad:ee:40:65:b2:db:13:8d:ad:de:9e:8f:17:
67:3b:c6:00:86:64:d2:56:d2:64:4b:2c:8e:bc:e2:
85:cc:1b:ba:e4:cb:95:8b:9d:ba:33:db:f7:0d:2d:
ec:e3:5e:79:d6:a6:f3:16:cd:cd:8a:45:b9:a8:36:
64:95:30:63:e5:7c:61:b5:72:c8:e4:9b:e7:bf:8f:
a7:3c:70:68:c1:29:55:ad:eb:64:53:9f:eb:e3:fd:
2a:8b:2d:c0:02:26:fd:c9:21:04:45:0e:1b:10:00:
78:99:a9:2c:bf:17:91:be:22:38:91:0a:90:25:e5:
fb:cc:7f:65:bc:9b:48:20:55:f7:3f:7d:bd:6d:b0:
5e:b0:3e:e0:04:7e:ca:44:45:9d:3e:23:a9:2d:5d:
e0:9a:c1:fd:ec:c0:26:aa:19:6e:7a:01:0f:68:24:
ca:34:2d:19:32:d4:05:05:6d:22:4f:15:24:7a:7a:
6c:8d:e0:80:6d:43:4d:21:c4:be:93:01:3b:f2:8a:
73:f8:d7:49:2c:58:d6:84:35:4e:d3:4d:17:7c:d6:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:54:0E:41:1F:58:58:4A:76:5B:7B:ED:1E:C5:88:29:04:C4:C7:A8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a52c26be-3fbf-4a06-afc9-aeb86a94f846.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3984::/46
Signature Algorithm: sha256WithRSAEncryption
af:f5:16:72:0e:3b:c5:f2:37:bd:27:2b:79:3f:d7:8c:c8:ff:
4a:10:a7:70:48:c7:b8:81:46:de:b6:25:18:37:c1:dd:6f:aa:
2b:4a:83:4f:89:d2:94:f3:f9:58:90:d0:ea:b1:3f:2d:a2:e5:
ff:d7:46:83:d5:be:7e:83:bf:88:49:35:07:4b:76:a3:b4:ba:
4b:7e:74:24:8b:89:32:b8:bf:04:5f:e4:cd:0a:3e:fe:98:f0:
e2:bf:f6:79:2d:c4:3a:19:91:09:05:d3:20:21:e3:fd:80:eb:
61:41:fe:dc:bd:0e:49:fd:41:c5:2f:62:31:a4:cb:36:43:0e:
1d:f4:56:a6:c6:2b:b5:11:06:75:28:58:a9:fd:84:25:c4:af:
1b:5f:b4:32:5b:4c:69:a8:f4:36:c1:89:c0:4c:a1:5a:d0:56:
bc:08:1b:a4:d3:94:19:ef:4f:a7:78:94:c0:d0:95:b2:84:a1:
ed:c8:a6:4f:f2:0c:1f:2a:02:6c:72:7e:b2:95:39:e8:47:81:
85:05:88:79:4e:ca:f8:4f:9e:4f:ae:43:24:eb:b4:52:fa:28:
89:2c:95:e2:e5:f6:5e:de:25:13:af:2f:62:10:f2:5e:a0:15:
1c:62:c8:b7:ba:39:9c:fb:02:0a:10:ab:20:62:54:0c:d8:ee:
dd:36:be:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:31:36 2026 by rpki-client