
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa
File: 60d13554-0aae-450a-879a-816f0a4209ac.roa (raw, json)
Hash identifier: l5Jz/3AfAaf/HDDLNku/3sLt83D1U7a2tyrXRhiybkU=
Subject key identifier: 59:9A:C9:4C:D6:77:94:AE:86:09:EC:84:C7:F5:1A:6C:35:B5:83:F1
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 792451455B3919DA8E0BCA170ECE3E98EF4120D9
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa
Signing time: Tue 10 Feb 2026 00:00:12 +0000
ROA not before: Tue 10 Feb 2026 00:00:12 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:6101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:24:51:45:5b:39:19:da:8e:0b:ca:17:0e:ce:3e:98:ef:41:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Feb 10 00:00:12 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=c5fc3689ea6173520c858c1f4f540863eb4b9f047f56984e52bebc885eecdae7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:1a:27:10:d6:92:a3:0d:74:7f:b8:5c:af:
47:4f:0a:b0:c9:f7:6c:6f:77:bf:f4:44:5a:6c:65:
83:96:01:98:62:60:24:5a:3b:0a:44:1c:bb:70:5c:
98:a0:16:35:d0:4a:a2:3a:15:cd:d6:c6:14:ea:af:
1e:22:5c:1b:fd:d8:95:8c:d8:bf:5e:52:ab:73:5f:
26:0c:e9:84:e1:be:92:ae:2e:bc:19:86:88:6e:d5:
65:2a:9f:fd:f4:2c:07:3c:d5:3b:b2:62:8e:8d:9c:
86:7a:95:5d:c1:b1:53:77:e2:90:45:5c:0f:7b:70:
18:dd:46:76:75:79:27:99:4d:84:d9:de:9e:29:4e:
75:a7:68:6b:57:56:e0:b3:77:2b:38:66:fd:cf:6a:
52:24:2d:25:08:66:c8:f6:46:af:c5:0d:57:fa:27:
65:27:5b:a1:b0:97:a7:b4:83:c4:d0:b7:c5:14:03:
6a:80:1f:15:bf:84:d3:46:61:82:0c:a1:be:42:04:
38:67:5c:67:1d:34:aa:6c:01:56:d5:98:17:e2:ec:
2b:b2:e6:46:f7:57:b2:00:2a:98:16:a9:5e:ed:72:
04:6d:0e:c4:75:3f:cf:8f:17:88:86:08:ad:76:55:
2f:58:e5:b2:04:db:b4:99:6b:fa:aa:3d:4e:fc:79:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:C9:4C:D6:77:94:AE:86:09:EC:84:C7:F5:1A:6C:35:B5:83:F1
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:6101::/48
Signature Algorithm: sha256WithRSAEncryption
43:68:ba:a3:60:96:7c:5a:59:7c:85:b2:86:5b:9b:aa:df:4d:
1a:62:93:05:34:79:d3:a8:b1:54:35:15:31:64:c6:77:1c:10:
b6:1e:75:82:ca:b7:6e:ae:c0:4c:f9:f3:49:6e:22:01:e6:70:
23:54:14:c3:71:77:f2:6f:ba:9e:45:9a:69:6f:dd:aa:3f:f2:
3c:e4:32:a4:68:51:a2:43:57:13:40:db:5e:6e:4e:22:30:2a:
21:76:97:b9:7f:33:9b:c2:80:71:17:4d:65:25:93:d9:32:30:
73:44:93:ef:f5:9e:ec:fa:a2:e5:52:b9:71:3c:60:9a:fa:5a:
13:23:51:81:c5:81:33:32:9f:ba:81:fd:2c:b5:68:c8:47:22:
6f:ea:92:81:f3:1c:1f:b2:2b:45:9a:79:de:a6:34:0e:57:60:
94:a6:a9:10:18:67:3c:6d:99:07:3b:6c:8b:20:9b:87:10:11:
d8:eb:e0:74:b5:e7:cc:fa:ef:f3:d8:c6:7b:3b:06:45:bf:34:
f3:e7:13:e9:ab:00:01:21:68:05:c4:ad:8a:8a:e2:94:ce:05:
d3:de:94:e4:2c:21:fa:45:51:95:10:53:66:33:11:fa:4f:c0:
52:01:66:5d:78:c6:28:d0:d2:08:e9:db:1a:1f:05:95:fd:ea:
bf:a6:2d:22
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUeSRRRVs5GdqOC8oXDs4+mO9BINkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEwMDAwMDEyWhcNMjYwNTExMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNWZjMzY4OWVhNjE3MzUyMGM4NThjMWY0ZjU0MDg2M2Vi
NGI5ZjA0N2Y1Njk4NGU1MmJlYmM4ODVlZWNkYWU3MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRRxonENaSow10f7hcr0dPCrDJ92xvd7/0RFpsZYOWAZhi
YCRaOwpEHLtwXJigFjXQSqI6Fc3WxhTqrx4iXBv92JWM2L9eUqtzXyYM6YThvpKu
LrwZhohu1WUqn/30LAc81TuyYo6NnIZ6lV3BsVN34pBFXA97cBjdRnZ1eSeZTYTZ
3p4pTnWnaGtXVuCzdys4Zv3PalIkLSUIZsj2Rq/FDVf6J2UnW6Gwl6e0g8TQt8UU
A2qAHxW/hNNGYYIMob5CBDhnXGcdNKpsAVbVmBfi7Cuy5kb3V7IAKpgWqV7tcgRt
DsR1P8+PF4iGCK12VS9Y5bIE27SZa/qqPU78eXVJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUWZrJTNZ3lK6GCeyEx/UabDW1g/EwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzYwZDEzNTU0LTBhYWUtNDUwYS04NzlhLTgxNmYwYTQyMDlhYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYQEwDQYJKoZIhvcNAQELBQADggEBAENouqNglnxaWXyFsoZbm6rf
TRpikwU0edOosVQ1FTFkxnccELYedYLKt26uwEz580luIgHmcCNUFMNxd/Jvup5F
mmlv3ao/8jzkMqRoUaJDVxNA215uTiIwKiF2l7l/M5vCgHEXTWUlk9kyMHNEk+/1
nuz6ouVSuXE8YJr6WhMjUYHFgTMyn7qB/Sy1aMhHIm/qkoHzHB+yK0Waed6mNA5X
YJSmqRAYZzxtmQc7bIsgm4cQEdjr4HS158z67/PYxns7BkW/NPPnE+mrAAEhaAXE
rYqK4pTOBdPelOQsIfpFUZUQU2YzEfpPwFIBZl14xijQ0gjp2xofBZX96r+mLSI=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:37:08 2026 by rpki-client