
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1246369f-7e24-4a6e-95d1-2cfc646e520c.roa
File: 1246369f-7e24-4a6e-95d1-2cfc646e520c.roa (raw, json)
Hash identifier: Gpnk/vY9g11Cs62t5erqBXoSmTihL2CDGfvsZfI2r0A=
Subject key identifier: 5B:AE:7E:EE:BA:EE:62:CD:00:45:DD:F7:F1:C5:3C:4E:DA:31:CC:72
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0A3FB82B642D153FF3CFFACD85F26DE599F06DD5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1246369f-7e24-4a6e-95d1-2cfc646e520c.roa
Signing time: Sun 03 May 2026 02:01:17 +0000
ROA not before: Sun 03 May 2026 02:01:17 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2050::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3f:b8:2b:64:2d:15:3f:f3:cf:fa:cd:85:f2:6d:e5:99:f0:6d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 02:01:17 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=6271f86c38e29c589f65f6cfcf20e19cdd050a88bda8bf49f98c86fd056fc61c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:e9:6b:f2:36:17:24:77:0b:23:04:30:da:
33:13:33:e4:63:32:f5:47:b2:d2:6c:cf:08:1f:d7:
3e:ca:0e:30:dc:e6:8e:8f:0c:73:80:81:e7:67:50:
9e:4a:d0:0d:eb:5f:24:10:23:52:93:43:87:d5:95:
38:b9:a3:79:3a:5c:41:7d:b1:40:22:c3:95:e5:94:
98:70:f3:fc:e9:91:69:e7:d7:6a:c1:90:cf:88:c5:
90:64:bd:cb:87:67:26:ce:b9:ff:db:31:fb:7d:c8:
b3:a7:e3:b8:31:bc:a9:93:87:b0:30:7a:6a:6f:21:
92:29:09:bd:8e:4c:1f:65:ed:29:db:c1:23:83:36:
06:01:b0:f1:27:a3:2b:53:2d:d5:03:12:5f:d4:c8:
0c:45:00:5c:29:37:5c:08:df:b7:fe:79:11:5e:a8:
57:dd:20:31:2c:1c:b1:67:94:0c:5a:ce:e3:24:59:
9b:58:73:bb:81:1f:44:87:b2:ba:a1:7a:83:f0:69:
a6:dd:d8:24:a1:14:7d:d8:65:eb:a4:b7:47:91:e0:
7a:ae:bd:3e:de:ce:fd:f7:74:98:6b:02:b8:40:05:
93:c4:f1:29:6c:6c:b9:8f:cc:20:fd:e2:72:c5:a1:
37:a2:8f:6b:a6:62:57:7c:05:61:19:28:33:34:f6:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:7E:EE:BA:EE:62:CD:00:45:DD:F7:F1:C5:3C:4E:DA:31:CC:72
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1246369f-7e24-4a6e-95d1-2cfc646e520c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2050::/44
Signature Algorithm: sha256WithRSAEncryption
78:3a:eb:16:df:fc:af:f8:17:46:0d:f8:56:03:b8:3b:08:13:
fe:fe:9f:a1:90:81:5d:e2:70:d5:e3:c6:90:c7:f5:6a:a9:89:
04:c9:f8:07:5d:96:0d:0c:c3:5c:bf:16:cf:12:19:2d:2c:a9:
3a:da:83:83:68:6f:42:b8:3d:4a:04:cc:b3:d6:b8:a4:32:44:
4a:52:f8:34:45:da:72:c9:9c:d4:84:2c:e4:13:3b:03:c1:40:
32:db:15:54:44:11:0e:ab:34:a7:cc:61:1f:c7:f6:84:bd:96:
a5:11:f7:35:d0:eb:85:db:5e:cd:18:a9:52:8e:48:dd:18:ad:
93:c6:de:05:0d:ee:41:71:09:12:f6:5b:f5:3d:a6:0c:3e:f0:
3b:52:fa:1d:b8:61:53:53:04:f1:1c:e2:01:99:5e:42:58:3c:
b0:2c:47:8c:7b:56:92:af:44:32:af:0c:36:17:b9:0e:60:43:
c9:87:80:e6:f8:ab:bf:8f:c7:52:8c:5c:24:b9:16:b9:bd:81:
8b:cb:10:d1:af:af:2b:c0:c4:37:5c:34:39:a4:9b:ff:4f:6b:
11:39:1d:3e:e6:b2:b4:3b:d3:93:27:81:a3:98:f2:9c:f0:c3:
f4:f6:0f:ec:c9:2c:2b:e7:05:19:24:dd:d1:b6:a2:b9:a2:d6:
cc:95:98:6f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCj+4K2QtFT/zz/rNhfJt5ZnwbdUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDIwMTE3WhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MjcxZjg2YzM4ZTI5YzU4OWY2NWY2Y2ZjZjIwZTE5Y2Rk
MDUwYTg4YmRhOGJmNDlmOThjODZmZDA1NmZjNjFjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfuelr8jYXJHcLIwQw2jMTM+RjMvVHstJszwgf1z7KDjDc
5o6PDHOAgednUJ5K0A3rXyQQI1KTQ4fVlTi5o3k6XEF9sUAiw5XllJhw8/zpkWnn
12rBkM+IxZBkvcuHZybOuf/bMft9yLOn47gxvKmTh7AwempvIZIpCb2OTB9l7Snb
wSODNgYBsPEnoytTLdUDEl/UyAxFAFwpN1wI37f+eRFeqFfdIDEsHLFnlAxazuMk
WZtYc7uBH0SHsrqheoPwaabd2CShFH3YZeukt0eR4HquvT7ezv33dJhrArhABZPE
8SlsbLmPzCD94nLFoTeij2umYld8BWEZKDM09n7XAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUW65+7rruYs0ARd338cU8TtoxzHIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzEyNDYzNjlmLTdlMjQtNGE2ZS05NWQxLTJjZmM2NDZlNTIwYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAAIFAwDQYJKoZIhvcNAQELBQADggEBAHg66xbf/K/4F0YN+FYDuDsI
E/7+n6GQgV3icNXjxpDH9WqpiQTJ+Addlg0Mw1y/Fs8SGS0sqTrag4Nob0K4PUoE
zLPWuKQyREpS+DRF2nLJnNSELOQTOwPBQDLbFVREEQ6rNKfMYR/H9oS9lqUR9zXQ
64XbXs0YqVKOSN0YrZPG3gUN7kFxCRL2W/U9pgw+8DtS+h24YVNTBPEc4gGZXkJY
PLAsR4x7VpKvRDKvDDYXuQ5gQ8mHgOb4q7+Px1KMXCS5Frm9gYvLENGvryvAxDdc
NDmkm/9PaxE5HT7msrQ705MngaOY8pzww/T2D+zJLCvnBRkk3dG2ormi1syVmG8=
-----END CERTIFICATE-----
Generated at Sun May 3 15:33:01 2026 by rpki-client