
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf0f384a-888d-4bc9-884c-6e8b24c940a8.roa
File: bf0f384a-888d-4bc9-884c-6e8b24c940a8.roa (raw, json)
Hash identifier: ITNlUVQfRg9CDU2wsvJeS+Z6ZzRu5J8fDuOzaQ3agGw=
Subject key identifier: 80:56:45:46:9F:AC:42:EB:8B:C2:BE:1F:79:8F:69:96:92:4F:78:96
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5178BC7FAF34A827E541347DE7668AD764BBF5B1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf0f384a-888d-4bc9-884c-6e8b24c940a8.roa
Signing time: Mon 04 May 2026 03:21:58 +0000
ROA not before: Mon 04 May 2026 03:21:58 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2bd0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:78:bc:7f:af:34:a8:27:e5:41:34:7d:e7:66:8a:d7:64:bb:f5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 03:21:58 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=58e0ba57ba3e3fea7f965f08e21b4e2a7653e4cf7c27bc18ebf0652355654c2d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:6c:ea:ae:14:62:0b:b7:a2:8e:cb:36:e2:
00:32:08:9b:22:cc:cb:f2:fd:67:d3:ba:1d:47:02:
be:0c:e3:d2:a5:df:86:8a:39:86:1f:fe:ee:3b:8a:
e6:7d:76:9a:ca:1c:df:b3:27:8e:bf:a9:36:77:eb:
57:fe:d7:a6:a0:e0:e3:d4:50:af:6a:52:74:cb:51:
c9:fe:aa:0d:0c:86:d3:c3:c6:5f:74:59:b5:42:57:
4d:d5:3d:ba:c5:4e:64:50:22:1c:80:c2:24:79:af:
0d:7e:1a:07:12:2c:46:86:d3:28:92:fe:78:13:0d:
ef:ef:a5:81:ab:0f:cc:18:b1:e8:23:a7:de:07:67:
73:e8:2a:f0:15:28:f0:9f:7d:8d:e0:dc:12:43:77:
12:a3:29:93:fc:8b:07:e1:03:c3:ce:71:55:4d:63:
a6:c9:72:01:33:c8:58:b1:68:c5:89:58:b7:38:cd:
a7:f7:a3:52:64:f9:0f:ca:11:22:1b:8a:ee:d3:76:
d2:12:b1:95:71:91:8a:b8:12:e4:60:63:df:e1:cb:
38:40:12:99:7b:9b:ae:f7:db:fb:68:c5:c3:ab:51:
ff:06:4d:eb:12:38:e7:a4:72:c1:c6:0e:58:8f:92:
bb:3f:c1:5b:96:de:42:4b:57:13:e9:8c:2c:63:17:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:45:46:9F:AC:42:EB:8B:C2:BE:1F:79:8F:69:96:92:4F:78:96
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf0f384a-888d-4bc9-884c-6e8b24c940a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2bd0::/44
Signature Algorithm: sha256WithRSAEncryption
47:87:3b:e0:76:b7:2b:92:c8:4f:06:0b:4f:db:3a:04:2a:8d:
3a:5b:8d:58:49:47:29:7a:aa:e0:f7:c0:a7:6a:6d:6b:2d:68:
87:1b:ed:de:11:76:9b:cd:65:94:cb:72:1b:2e:ab:b1:9c:df:
66:bc:7a:b7:5a:6f:6f:ee:82:e3:df:05:33:b3:6e:e1:39:81:
e7:97:23:e1:64:ee:23:6e:80:8e:bf:dd:21:87:89:23:0b:aa:
ee:07:13:9f:b3:4f:d7:dd:a5:38:1f:3d:4f:4f:44:2c:72:e1:
2a:03:1e:cf:7e:15:3f:2b:37:3d:f7:3f:9b:d2:c5:be:dc:f4:
87:81:d3:92:3f:5f:3d:2c:94:37:c4:15:59:35:f6:48:28:e6:
6e:1f:f4:71:e7:0c:8f:18:a9:c1:3a:bf:da:d4:8a:33:35:80:
b7:94:40:be:ef:05:ae:7c:3d:b6:81:62:25:96:e4:7d:bf:d1:
35:c0:0f:2f:80:5d:89:72:eb:12:7f:3b:60:5f:b2:2e:93:03:
47:36:00:5d:f5:90:8f:38:9e:d4:0f:d5:11:73:3e:88:84:bb:
e2:0a:bc:f8:a8:6c:04:1c:ba:e7:2b:0a:13:06:1d:a1:e2:2d:
e0:a3:2a:71:7d:81:ef:34:a8:43:a5:cb:1c:7d:38:d7:36:72:
63:31:40:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:00:46 2026 by rpki-client