
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2051c931-2fb8-4cb9-a970-9e531972a9db.roa
File: 2051c931-2fb8-4cb9-a970-9e531972a9db.roa (raw, json)
Hash identifier: bxPDIH7t7cUrf2vR8IEanKkeN1AXkDn6hfRrw7vMTog=
Subject key identifier: 21:D8:9F:1B:52:55:D2:CA:B5:BA:39:BE:93:A0:FA:B2:39:1A:06:0E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6EB761F774686A270D5E8E165B067782183949DB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2051c931-2fb8-4cb9-a970-9e531972a9db.roa
Signing time: Sun 03 May 2026 00:00:48 +0000
ROA not before: Sun 03 May 2026 00:00:48 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2dac::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b7:61:f7:74:68:6a:27:0d:5e:8e:16:5b:06:77:82:18:39:49:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 00:00:48 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=b9908dc8b21a238198cbd3ee7fa974ce00719ef997c8290ecc4aa07ff1de0589, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:3a:f4:e5:ca:39:f7:a2:53:63:de:bb:ce:
30:5a:29:d9:0c:e9:bd:71:49:4c:aa:55:17:e7:17:
d8:63:67:ce:f6:80:08:9b:f4:3e:13:ab:01:26:3c:
c1:0b:e8:5e:58:91:b5:1b:db:c4:09:13:e6:3a:16:
1c:d0:43:29:50:07:70:43:26:7c:0c:3e:a1:a9:d5:
06:1e:d8:d0:ec:6c:b6:bd:10:90:5f:09:26:71:d6:
d6:c2:a7:b0:f2:e0:34:75:46:78:17:2e:eb:c3:83:
68:32:fc:5a:b9:d7:7d:b0:06:3f:96:af:7c:65:77:
7b:f5:48:50:ad:be:a5:6c:86:ed:45:0d:61:38:e6:
db:6e:8e:ce:6c:ba:7c:17:7f:3f:2e:7a:d0:53:85:
da:37:3a:c6:0d:44:1b:11:65:27:8d:00:2a:c9:64:
37:eb:f9:88:94:75:e4:d3:07:ed:40:a8:9b:8d:17:
90:f2:57:70:b2:ad:c4:97:bc:3c:d9:4c:17:3b:8f:
a5:90:34:86:80:db:b7:40:60:5b:0e:06:12:c8:71:
71:06:b5:60:8b:5b:53:93:cf:9d:8e:80:c6:c9:1f:
bd:6e:71:7c:88:8d:12:45:f9:5b:95:1b:97:de:76:
26:2b:4b:79:4e:3b:48:ed:ff:d2:9c:cf:19:7d:4b:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D8:9F:1B:52:55:D2:CA:B5:BA:39:BE:93:A0:FA:B2:39:1A:06:0E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2051c931-2fb8-4cb9-a970-9e531972a9db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2dac::/47
Signature Algorithm: sha256WithRSAEncryption
8b:32:b3:d6:5b:3c:ab:3b:b5:68:dc:b0:e9:a8:8f:e9:6d:6c:
20:94:37:26:f7:2c:54:11:6f:0c:e8:a9:1e:75:2e:c3:ff:b5:
f1:b4:a9:11:fa:41:08:2b:bc:eb:21:e2:cf:7a:54:10:73:19:
7b:d9:1a:db:33:10:2b:74:3c:78:1d:1c:74:37:05:99:b1:65:
66:a1:c3:cd:75:de:e9:1f:96:4d:8f:9e:74:57:c0:62:37:07:
ea:ed:1d:e3:1a:18:b0:a2:cd:3c:d2:e3:12:d8:bf:af:ce:33:
9f:ee:63:fe:ce:45:c6:06:7e:07:e7:0e:16:9a:2b:86:3c:bb:
be:bd:14:08:c2:b5:9e:ec:26:d5:d8:22:2a:06:d3:92:5b:d5:
b9:32:b6:57:ef:be:b8:a0:b0:8f:5b:bd:71:aa:44:00:30:c6:
c5:45:54:ad:14:ed:90:2f:1c:e7:cf:5f:f7:31:77:66:a9:bf:
e3:54:1b:a7:2b:ba:c6:30:da:12:ae:e3:05:4f:b9:5e:f4:82:
ca:d8:4d:26:f7:88:f0:8c:92:fe:1d:73:f1:ef:25:2c:c9:d5:
1f:2f:52:56:d3:fa:16:a1:c3:4c:6e:73:13:b9:e7:a7:3e:a3:
50:af:da:ef:a2:cf:75:6f:36:f3:ca:a6:17:99:15:96:f9:bc:
59:75:7c:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 14:49:27 2026 by rpki-client