
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a912498-5d73-4ec8-b4f5-ce7ed4263173.roa
File: 8a912498-5d73-4ec8-b4f5-ce7ed4263173.roa (raw, json)
Hash identifier: nwbjqN3sW9YOcSgE1fsgsLc7mYz34WRJbEMkE6/aUQM=
Subject key identifier: 05:DD:57:78:AA:A2:E5:AD:EC:18:27:F6:E3:E7:DC:2F:9A:76:31:7C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5F2708D4F317920A23D8680326D99DE249073486
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a912498-5d73-4ec8-b4f5-ce7ed4263173.roa
Signing time: Sun 03 May 2026 03:10:41 +0000
ROA not before: Sun 03 May 2026 03:10:41 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2e98::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:27:08:d4:f3:17:92:0a:23:d8:68:03:26:d9:9d:e2:49:07:34:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 03:10:41 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=9b14775747d3344fbe789b094d4db4ad118a69516b82eab7523e0c2e9084aab0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:46:b3:a4:3a:14:88:c5:48:96:41:b6:e0:
0a:31:90:68:72:21:5e:bb:3f:79:a7:f0:e2:af:bf:
19:5c:8f:7c:35:d5:90:52:3c:7a:30:c3:56:14:a2:
2a:7b:05:5f:f2:fa:c7:9d:cf:30:ac:ff:b1:ab:80:
b5:66:da:5f:ef:56:80:40:70:32:8d:be:84:ff:8c:
f3:bd:f4:32:0a:58:d1:ef:e6:1d:32:27:16:f4:6d:
5f:44:76:89:e9:8a:db:d7:b8:79:68:82:63:91:11:
88:4c:6e:96:3b:19:b8:be:1a:ea:5b:3f:ed:f5:a2:
53:68:5c:95:c9:09:aa:23:86:aa:a9:b0:1f:9b:83:
1e:07:1b:48:05:d8:a8:8a:d4:27:9c:32:7a:b5:16:
71:ce:d7:9d:41:44:05:a2:ae:3a:66:d4:2f:84:74:
33:22:92:ea:12:17:db:3c:ed:97:aa:bf:81:5d:03:
ae:42:5d:20:f1:6c:8a:3f:07:08:ef:4d:2e:a0:68:
e3:fb:b7:44:21:c2:a9:42:63:08:8e:5d:ac:df:0d:
19:88:92:71:96:1f:0d:3e:23:d7:74:8f:da:73:d6:
fc:08:89:b5:6a:ea:82:98:a6:e1:82:27:76:61:42:
cc:9b:ee:60:a8:86:e4:13:e3:fe:bb:e7:39:f4:f6:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DD:57:78:AA:A2:E5:AD:EC:18:27:F6:E3:E7:DC:2F:9A:76:31:7C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a912498-5d73-4ec8-b4f5-ce7ed4263173.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2e98::/47
Signature Algorithm: sha256WithRSAEncryption
83:4e:23:ba:57:4b:58:b2:c3:83:1d:92:97:0e:f6:e9:b6:ab:
04:a1:cb:31:c5:5e:dd:52:fb:a8:3a:06:74:35:f8:4c:9f:58:
01:de:6a:e4:c0:5b:74:f6:21:ab:74:7a:97:69:31:e1:93:7a:
ec:71:b3:c7:e0:71:36:a0:8a:e7:fc:fa:e5:27:b0:38:f9:4e:
c0:0d:07:7f:e4:85:67:e5:30:6a:9a:0e:80:19:39:e4:4f:19:
8c:c9:73:20:35:64:70:d9:0f:6e:9b:34:6a:15:b1:f3:3e:d5:
a4:e9:d7:9b:c5:14:67:80:02:11:a2:51:00:b5:3a:2c:70:ef:
2a:4a:60:00:6d:c5:7f:6a:34:f5:52:0a:7a:6f:e1:da:77:55:
8f:c7:b9:59:2a:77:c0:05:56:8b:7e:cb:8b:c6:cf:c5:78:cf:
8e:42:9c:92:ab:be:ca:ec:88:55:01:61:88:24:0d:6d:63:d4:
ee:1c:c3:d2:c6:fb:bd:0e:ea:b9:bc:42:d6:d2:1c:2a:b2:cb:
a3:aa:7c:26:e8:74:7f:da:d7:c0:2d:5f:40:f2:d2:e7:08:11:
c7:7d:69:b8:71:1a:7e:24:22:b7:82:9c:df:a1:c4:2e:59:99:
64:22:a0:7d:3d:c4:ce:76:2c:5d:c5:18:b6:04:f6:fd:5e:5e:
9e:1c:34:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:26:49 2026 by rpki-client