
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11f264f2-a326-43d2-974e-f02ac162663e.roa
File: 11f264f2-a326-43d2-974e-f02ac162663e.roa (raw, json)
Hash identifier: DtxgxhuL6mZrerbg72gbAhkgv5yIAocFR/btLNcC898=
Subject key identifier: 46:24:38:A5:65:60:25:67:56:66:03:66:43:9B:68:42:A5:25:BB:AA
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0132D601CCFA321BDD5DFBD4D1D2013DB9257E2F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11f264f2-a326-43d2-974e-f02ac162663e.roa
Signing time: Sun 03 May 2026 00:10:11 +0000
ROA not before: Sun 03 May 2026 00:10:11 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2674::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:32:d6:01:cc:fa:32:1b:dd:5d:fb:d4:d1:d2:01:3d:b9:25:7e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 00:10:11 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=5c8bcf754fa74456d2c0df5ac3b76bcd17105d3adc3d9659c7941d0f02f69f17, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:be:e1:bc:e6:4e:25:bb:96:53:84:76:45:ff:
0e:c8:e6:64:81:5a:5f:4d:59:16:a8:ce:65:67:e3:
d3:fd:cf:5b:5c:36:ef:2a:16:68:a2:fe:9c:1e:05:
74:42:52:19:22:05:9c:ad:bb:e4:d8:a2:40:c1:e4:
d9:fc:4f:56:d3:4b:78:09:00:3e:f7:1c:f9:eb:47:
b3:78:e7:5d:b4:bb:de:d2:4e:b1:b3:e2:bc:81:81:
43:16:26:8b:90:1a:2f:a5:28:54:41:2e:8b:2d:4b:
4f:28:b0:24:ca:bb:45:e7:52:b6:0c:0b:1a:8e:fe:
43:51:7d:5c:36:4d:c3:74:1a:f7:7e:93:0e:61:a7:
02:e0:ec:13:12:f4:50:38:0d:e5:48:ee:a4:84:78:
dd:37:bd:72:3f:ac:99:66:09:82:be:69:4b:d0:42:
5f:6c:82:d5:47:50:8e:93:82:b9:78:e2:b0:3d:9f:
9c:67:57:22:ab:ed:9c:77:84:0f:1c:bf:c8:8f:84:
a8:13:01:b6:e8:3f:ac:c2:2d:47:12:f5:f4:f0:f1:
35:d4:2d:87:c2:f8:87:a1:cd:1f:db:b8:3a:df:f0:
83:1a:98:69:7f:ab:f7:8c:b6:2e:c1:b4:22:60:da:
74:4e:75:b1:4a:37:2c:9e:b2:e2:cd:30:d3:71:f9:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:24:38:A5:65:60:25:67:56:66:03:66:43:9B:68:42:A5:25:BB:AA
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/11f264f2-a326-43d2-974e-f02ac162663e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2674::/48
Signature Algorithm: sha256WithRSAEncryption
3c:a6:ba:ee:15:9e:5b:47:79:cd:84:11:ce:6f:31:49:81:48:
a3:74:ce:cd:2a:d4:92:b5:ea:28:f6:e6:fa:b4:9d:7d:27:fe:
e4:0e:42:1a:0c:b2:93:d3:aa:75:11:ae:8a:a2:f1:92:e4:4a:
2c:7f:ca:c7:9d:44:23:fd:3f:5c:3a:29:1f:00:8a:0d:a2:4c:
66:53:ea:fc:2e:44:2d:e7:af:ef:36:95:21:45:a8:0f:1e:b1:
19:1c:11:25:85:28:9b:64:a3:08:35:1f:25:c4:2c:60:df:19:
c7:54:b2:3f:33:9e:46:72:87:05:f2:2f:02:0f:5c:7c:34:2c:
bd:39:73:ea:aa:a3:4d:47:cb:2f:e9:2d:3d:b5:66:41:9b:8f:
eb:e4:ed:f3:e3:dc:5f:09:3c:49:2b:a4:9a:4f:c7:b6:31:b5:
26:a0:55:cf:30:14:83:5d:51:76:1c:eb:ed:a8:3b:14:a0:7e:
ba:f8:f8:9b:20:67:92:f4:d4:85:75:98:d6:eb:08:f0:64:02:
1c:47:ae:3b:7f:f1:6e:7c:09:6b:8e:2f:72:38:38:69:a1:ef:
36:80:7f:2b:cb:1b:e5:e7:30:84:32:22:ec:2b:e2:2b:da:6f:
96:61:72:3f:3d:fc:67:03:07:92:a7:ff:9b:66:5d:0f:31:86:
f7:33:9a:aa
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUATLWAcz6MhvdXfvU0dIBPbklfi8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDAxMDExWhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1YzhiY2Y3NTRmYTc0NDU2ZDJjMGRmNWFjM2I3NmJjZDE3
MTA1ZDNhZGMzZDk2NTljNzk0MWQwZjAyZjY5ZjE3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqvuG85k4lu5ZThHZF/w7I5mSBWl9NWRaozmVn49P9z1tc
Nu8qFmii/pweBXRCUhkiBZytu+TYokDB5Nn8T1bTS3gJAD73HPnrR7N45120u97S
TrGz4ryBgUMWJouQGi+lKFRBLostS08osCTKu0XnUrYMCxqO/kNRfVw2TcN0Gvd+
kw5hpwLg7BMS9FA4DeVI7qSEeN03vXI/rJlmCYK+aUvQQl9sgtVHUI6Tgrl44rA9
n5xnVyKr7Zx3hA8cv8iPhKgTAbboP6zCLUcS9fTw8TXULYfC+IehzR/buDrf8IMa
mGl/q/eMti7BtCJg2nROdbFKNyyesuLNMNNx+bedAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQURiQ4pWVgJWdWZgNmQ5toQqUlu6owHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzExZjI2NGYyLWEzMjYtNDNkMi05NzRlLWYwMmFjMTYyNjYzZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAJnQwDQYJKoZIhvcNAQELBQADggEBADymuu4VnltHec2EEc5vMUmB
SKN0zs0q1JK16ij25vq0nX0n/uQOQhoMspPTqnURroqi8ZLkSix/ysedRCP9P1w6
KR8Aig2iTGZT6vwuRC3nr+82lSFFqA8esRkcESWFKJtkowg1HyXELGDfGcdUsj8z
nkZyhwXyLwIPXHw0LL05c+qqo01Hyy/pLT21ZkGbj+vk7fPj3F8JPEkrpJpPx7Yx
tSagVc8wFINdUXYc6+2oOxSgfrr4+JsgZ5L01IV1mNbrCPBkAhxHrjt/8W58CWuO
L3I4OGmh7zaAfyvLG+XnMIQyIuwr4ivab5Zhcj89/GcDB5Kn/5tmXQ8xhvczmqo=
-----END CERTIFICATE-----
Generated at Sun May 3 16:15:20 2026 by rpki-client