
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9ea8d47-2168-4e6f-a867-77d03eb8fcba.roa
File: b9ea8d47-2168-4e6f-a867-77d03eb8fcba.roa (raw, json)
Hash identifier: JxVb9e3McmN6yzSB6eyFT0YZQEdgeX2DMypap5quA40=
Subject key identifier: 66:FD:67:7C:C5:4D:36:6C:BA:28:4E:84:F7:5A:33:9C:7B:2A:9B:D3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5BDDB3FE9590795DD40925C58A6CA69B3C5A071A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9ea8d47-2168-4e6f-a867-77d03eb8fcba.roa
Signing time: Sun 03 May 2026 01:11:30 +0000
ROA not before: Sun 03 May 2026 01:11:30 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:322a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:dd:b3:fe:95:90:79:5d:d4:09:25:c5:8a:6c:a6:9b:3c:5a:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 01:11:30 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=e49ae1294567deac017cbbeabf0c35232e943be9ad94742e38fd51db6e159baa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:4b:72:21:5c:81:fa:03:d5:2f:3d:b9:f4:
11:35:0e:e1:77:aa:1e:aa:35:b4:58:ef:83:58:f2:
d8:ea:34:04:25:f0:a3:aa:3c:e2:87:8f:2c:5b:84:
f2:ab:da:74:6b:e8:6f:61:69:18:6a:a1:7c:2d:d3:
2a:4c:ec:62:0a:71:73:ea:ce:fd:87:1a:72:bd:d3:
36:b2:25:61:12:b3:e2:de:7c:23:6d:99:3f:67:b5:
c5:41:09:96:39:74:61:fd:92:15:54:0f:a2:63:7a:
44:8d:08:20:08:06:e0:62:7f:ab:27:3c:4b:1f:12:
c5:a7:77:62:9f:06:a4:51:55:2f:3a:b5:4a:e3:ab:
26:4b:ce:1a:e0:b9:06:73:5f:a4:b4:0e:52:15:d4:
8c:cb:62:93:32:6c:a1:d6:75:44:ca:0a:0e:41:b1:
36:ae:ee:9d:45:73:f4:d9:4f:ec:1e:15:8c:8a:cb:
d3:c0:a1:1c:de:bd:d9:48:63:f5:57:d8:9b:e0:b1:
41:9c:9e:4c:6c:66:e9:c5:50:03:a2:a3:cd:b6:56:
ad:fd:5e:1b:03:fa:e4:2a:95:34:ad:df:40:92:cc:
33:f4:f8:fe:7c:ce:c8:a0:2c:05:71:79:d2:58:9c:
d5:2d:3e:af:e0:f1:5d:2c:09:e7:4e:13:f2:ee:fd:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FD:67:7C:C5:4D:36:6C:BA:28:4E:84:F7:5A:33:9C:7B:2A:9B:D3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9ea8d47-2168-4e6f-a867-77d03eb8fcba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:322a::/47
Signature Algorithm: sha256WithRSAEncryption
a2:8e:39:da:bf:d5:79:22:a4:0c:3d:4b:eb:e3:0a:4f:ce:87:
05:a4:41:2f:54:23:5e:e5:66:97:fc:6d:b9:46:64:2d:aa:c0:
75:54:c4:3d:4c:d1:bd:ca:ac:34:87:3b:0e:2f:66:9f:33:6f:
6b:8f:2f:f5:d1:70:c0:28:72:69:c5:e0:d3:86:2e:7e:91:81:
8c:52:c5:02:c6:08:19:d9:29:cf:c9:83:2a:5b:8a:ec:cc:bb:
ce:62:93:b1:e1:8f:bf:26:e4:db:97:31:84:9c:fb:e8:54:9a:
43:97:5d:b3:8c:62:96:1d:0c:dd:dc:2f:35:76:70:14:53:03:
b1:35:9f:25:ed:d5:45:67:4d:ba:00:c3:8a:2e:91:91:25:67:
59:4a:b1:dd:09:7f:6b:7f:da:37:37:c4:41:de:d2:44:0b:93:
8f:7e:48:a1:f3:71:e7:11:51:32:6e:0a:b0:ee:d3:97:65:62:
b8:fe:9e:3d:ae:9a:8d:bf:e2:63:f7:92:e6:35:fd:e6:3f:48:
93:cc:4e:2d:06:b8:a3:be:97:bf:d2:f6:1d:9e:9a:f0:96:7b:
37:3a:cd:b1:7b:76:35:50:54:c0:98:60:c0:c6:d2:8b:6e:7c:
c2:54:2d:e6:66:6c:d7:02:34:cc:b4:4f:dc:6c:fd:d1:89:db:
60:97:f3:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 15:23:40 2026 by rpki-client