
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33a2563e-6cfa-45bd-bcea-c59be7bbdcd7.roa
File: 33a2563e-6cfa-45bd-bcea-c59be7bbdcd7.roa (raw, json)
Hash identifier: 6aP6F0epVXOIo8kr4e/YTQ+DLUW3E+gxsuRXU1vlOsw=
Subject key identifier: F7:CF:96:CA:50:35:74:82:71:1A:35:C2:C9:9E:97:6A:8C:CF:41:D2
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 31273A54A65F564D9B5CBA44CAF2EE1A79C27107
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33a2563e-6cfa-45bd-bcea-c59be7bbdcd7.roa
Signing time: Fri 07 Aug 2026 00:10:07 +0000
ROA not before: Fri 07 Aug 2026 00:10:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:110c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:27:3a:54:a6:5f:56:4d:9b:5c:ba:44:ca:f2:ee:1a:79:c2:71:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Aug 7 00:10:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=70311131109bb9a09150646ac4243cd16244eb199883a7cde516e32b4ff5a3de, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:53:75:3c:af:15:2e:d2:e5:ea:01:21:7f:
b8:c1:5e:69:1e:c5:73:28:9e:5e:61:ba:c9:a3:e9:
6b:1f:1e:4d:40:ce:03:02:a6:0e:77:9d:d7:c6:ab:
9d:2f:6d:ba:cd:67:15:55:23:56:bd:c6:d1:90:f6:
60:85:c0:18:b7:56:2e:55:98:67:b2:54:67:ae:8b:
25:b2:66:e5:c3:fd:2c:8b:d9:0f:1e:90:d7:6a:6c:
4b:b6:7c:a7:26:23:ee:61:7b:cc:de:e8:ea:e2:0e:
d7:3a:be:0c:a1:e6:6e:12:ae:39:82:db:02:52:37:
c8:89:18:3b:7a:79:c2:05:68:8d:a6:93:df:d8:d8:
f8:e9:6b:58:8d:16:88:5b:9b:14:6b:74:e2:19:9d:
38:30:a2:f4:d6:6d:2f:15:59:b9:c3:34:37:87:55:
3b:7b:d1:68:99:46:57:f8:78:f0:b5:b2:33:b2:69:
d4:4f:62:31:4a:e0:cd:36:21:ea:9e:5d:8d:fe:89:
2b:28:1a:a6:10:d4:ed:90:0a:f4:3c:28:c6:b0:38:
8f:09:f0:e5:73:48:d6:5b:4f:f8:75:8a:75:12:cf:
ef:75:1e:0e:46:19:31:68:85:45:07:d7:3c:7b:3c:
f0:54:da:90:4e:40:d9:ca:f1:4e:4e:b1:70:5f:86:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:96:CA:50:35:74:82:71:1A:35:C2:C9:9E:97:6A:8C:CF:41:D2
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33a2563e-6cfa-45bd-bcea-c59be7bbdcd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:110c::/48
Signature Algorithm: sha256WithRSAEncryption
bd:22:a2:02:b8:f3:c2:71:fa:c8:0f:05:1b:32:20:28:36:51:
a1:4f:05:98:28:77:0e:50:b5:27:90:01:e5:9d:15:0b:04:4a:
19:5e:ab:4e:3f:48:a9:eb:62:a5:e1:7c:4a:96:d8:b8:eb:b6:
46:a0:2e:52:4f:2d:e5:80:c0:ff:5f:63:92:29:3d:34:a3:ef:
cd:2b:cb:46:32:61:a2:73:0b:46:ba:ad:b6:84:5d:ed:ea:a4:
24:9d:00:9c:f8:10:25:65:1c:25:b4:e4:63:3d:65:41:13:61:
16:fb:b4:97:d6:ee:f8:3b:c1:9e:f1:ae:5e:07:31:42:31:01:
67:a8:21:c8:f8:e0:40:d0:e9:b3:d4:9d:97:9f:0e:84:79:3c:
16:08:93:ba:8e:89:b1:df:32:43:84:b4:2c:13:43:71:22:a7:
d6:2c:91:bb:17:76:2a:e6:2b:79:06:f4:e1:4a:d1:8d:8d:1e:
d0:5b:2e:78:2c:9a:c8:01:b6:15:ef:bc:b3:fd:1a:8f:3d:db:
ed:6a:66:45:45:ef:0a:67:c2:19:e9:0b:2e:ca:8a:96:3d:8d:
0a:c8:bf:c2:31:9a:52:44:61:c3:d3:74:f7:28:20:5f:ea:55:
3d:21:f7:28:3d:d8:ee:de:63:40:d2:26:e0:d3:2e:7f:ed:fb:
1f:96:3b:03
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMSc6VKZfVk2bXLpEyvLuGnnCcQcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwODA3MDAxMDA3WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MDMxMTEzMTEwOWJiOWEwOTE1MDY0NmFjNDI0M2NkMTYy
NDRlYjE5OTg4M2E3Y2RlNTE2ZTMyYjRmZjVhM2RlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVXVN1PK8VLtLl6gEhf7jBXmkexXMonl5husmj6WsfHk1A
zgMCpg53ndfGq50vbbrNZxVVI1a9xtGQ9mCFwBi3Vi5VmGeyVGeuiyWyZuXD/SyL
2Q8ekNdqbEu2fKcmI+5he8ze6OriDtc6vgyh5m4SrjmC2wJSN8iJGDt6ecIFaI2m
k9/Y2Pjpa1iNFohbmxRrdOIZnTgwovTWbS8VWbnDNDeHVTt70WiZRlf4ePC1sjOy
adRPYjFK4M02IeqeXY3+iSsoGqYQ1O2QCvQ8KMawOI8J8OVzSNZbT/h1inUSz+91
Hg5GGTFohUUH1zx7PPBU2pBOQNnK8U5OsXBfhh1vAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU98+WylA1dIJxGjXCyZ6XaozPQdIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzMzYTI1NjNlLTZjZmEtNDViZC1iY2VhLWM1OWJlN2JiZGNkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEQwwDQYJKoZIhvcNAQELBQADggEBAL0iogK488Jx+sgPBRsyICg2
UaFPBZgodw5QtSeQAeWdFQsEShleq04/SKnrYqXhfEqW2LjrtkagLlJPLeWAwP9f
Y5IpPTSj780ry0YyYaJzC0a6rbaEXe3qpCSdAJz4ECVlHCW05GM9ZUETYRb7tJfW
7vg7wZ7xrl4HMUIxAWeoIcj44EDQ6bPUnZefDoR5PBYIk7qOibHfMkOEtCwTQ3Ei
p9YskbsXdirmK3kG9OFK0Y2NHtBbLngsmsgBthXvvLP9Go892+1qZkVF7wpnwhnp
Cy7KipY9jQrIv8IxmlJEYcPTdPcoIF/qVT0h9yg92O7eY0DSJuDTLn/t+x+WOwM=
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:47 2026 by rpki-client