
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad398887-0218-4b79-bce0-1e3646753d06.roa
File: ad398887-0218-4b79-bce0-1e3646753d06.roa (raw, json)
Hash identifier: PSMNYZSBI6R950jrNdbWG8SUXlU1OsSDMv0ChRKoc4I=
Subject key identifier: 81:2A:6F:8B:11:57:7D:D4:F2:45:CA:E8:42:22:D6:36:F7:BD:B7:59
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1EE208E0575A2D0E9073F25E29F72A6067D93173
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad398887-0218-4b79-bce0-1e3646753d06.roa
Signing time: Mon 04 May 2026 13:50:38 +0000
ROA not before: Mon 04 May 2026 13:50:38 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ea0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e2:08:e0:57:5a:2d:0e:90:73:f2:5e:29:f7:2a:60:67:d9:31:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 13:50:38 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=b28585867ef727a843803e841786e554e81bc8edd69eab05ead220bee1d53396, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:80:8c:c3:37:79:f8:7c:e2:87:a2:ab:8f:
12:4c:12:65:22:8a:58:18:1d:f9:12:ff:39:f5:1b:
9b:f1:c5:04:81:38:ff:9c:92:bb:ae:0e:4e:16:56:
d3:59:1a:54:16:fd:92:1d:31:b5:81:68:35:32:1f:
aa:d9:a4:c1:14:ab:ea:f1:39:3a:99:1a:59:60:18:
bd:14:11:04:fd:30:ea:e0:e4:74:c7:7f:02:ed:72:
bd:55:42:7e:0a:cd:be:9d:a3:4b:46:ab:3e:56:a4:
d7:27:e9:d3:80:19:38:d5:c7:14:02:51:89:3e:f4:
72:ce:5a:bf:7a:a2:d2:55:47:66:53:12:f1:4c:3c:
fb:44:42:4e:cf:03:4a:4c:cf:c9:6a:ee:29:97:0b:
94:72:2a:e7:fe:14:74:54:fe:43:3f:84:fb:9f:08:
cd:fe:56:94:32:c7:0c:31:01:66:4a:c4:6a:50:fc:
2f:25:47:84:1f:12:40:31:26:af:41:f0:25:65:b1:
7b:1c:19:2c:12:58:78:e1:2d:4d:f1:c1:76:d6:2e:
c1:a3:25:63:db:5c:ce:c7:c8:bf:90:49:71:68:98:
15:7a:bc:6d:9c:6a:d8:3b:2f:4f:c9:11:4d:38:31:
05:72:20:f8:df:3b:7d:2e:03:ff:c8:65:ed:2d:98:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2A:6F:8B:11:57:7D:D4:F2:45:CA:E8:42:22:D6:36:F7:BD:B7:59
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad398887-0218-4b79-bce0-1e3646753d06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ea0::/45
Signature Algorithm: sha256WithRSAEncryption
50:78:98:57:f2:c3:b6:f3:ba:54:4b:20:50:ca:5e:86:ed:39:
de:57:8f:f4:a4:94:0a:4e:4a:f3:70:82:a4:fe:f3:ff:38:12:
d1:35:3f:bd:9c:5a:53:35:07:1d:be:0c:ab:7d:45:fe:65:8e:
85:9d:a3:f6:33:01:63:0d:c4:15:1e:8e:62:fe:96:35:0c:90:
49:65:38:5b:65:45:87:25:51:3f:9c:bc:3f:7a:ad:63:0f:99:
aa:b5:46:12:42:21:e5:36:9b:07:fc:22:da:bc:f6:66:9b:b1:
ea:a4:26:46:aa:b8:25:6c:7d:07:9c:69:c5:b8:70:81:b2:cd:
f1:59:23:7f:80:94:5f:08:1b:50:dd:c9:6a:43:83:70:53:47:
56:2e:26:ac:5d:54:d2:b4:ca:ba:11:60:5d:b9:bb:f1:54:87:
48:b3:3c:8b:5e:ad:4a:b1:af:bc:13:95:26:93:51:3d:b4:63:
9f:f7:a8:27:79:07:30:a5:cb:0a:93:ff:c4:56:a9:31:c5:18:
ea:34:7d:43:81:39:f1:52:99:97:48:98:f3:62:62:6e:6c:de:
3c:55:66:6c:e0:26:18:2c:80:c9:74:fc:58:0f:67:0c:52:da:
cf:c3:89:3b:54:af:d4:e1:72:9a:41:f1:9b:2c:d7:20:02:6d:
7c:02:17:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:16:39 2026 by rpki-client