
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/461f24b5-a411-4af6-b6e6-a25d61de9c97.roa
File: 461f24b5-a411-4af6-b6e6-a25d61de9c97.roa (raw, json)
Hash identifier: ShUpZOjONPlvHcXJd2U08lf3jRAPGd3Hxxt3+JpS1bM=
Subject key identifier: 9C:E4:BB:28:59:63:69:61:8C:6A:02:6A:5F:8E:43:02:4F:92:53:41
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 7B7A32A951B83BE5C5B8D8D68C88E67682701FA5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/461f24b5-a411-4af6-b6e6-a25d61de9c97.roa
Signing time: Sun 03 May 2026 00:30:13 +0000
ROA not before: Sun 03 May 2026 00:30:13 +0000
ROA not after: Sat 01 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2a52::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7a:32:a9:51:b8:3b:e5:c5:b8:d8:d6:8c:88:e6:76:82:70:1f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 3 00:30:13 2026 GMT
Not After : Aug 1 23:59:59 2026 GMT
Subject: serialNumber=10eb1d96e06a3080a414ee3cda2c7d27dfe7063e0648f48900b716fea786d52d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:9e:c7:6c:89:f3:96:74:0b:97:2f:ec:5e:
24:e2:50:26:be:ba:33:ca:ba:92:9c:92:0e:e1:ea:
21:6f:c1:f6:a2:ad:5e:50:7c:26:bc:5a:3d:f5:16:
7c:7e:7b:86:e9:a9:d7:b4:d5:1b:3f:76:c1:38:8d:
c3:9f:ca:dc:44:c0:fe:f7:1c:25:70:a1:0b:d4:17:
d5:01:bb:f3:4a:fe:b1:4d:6f:8d:06:7f:a2:d1:8d:
0a:39:37:8d:c6:cb:d3:6e:2b:3d:2a:60:d8:45:b2:
d6:ff:36:51:8f:57:66:9e:90:5b:b9:19:0c:da:6c:
92:93:3f:21:b5:3c:46:5f:00:53:bc:60:cc:00:8e:
9c:dd:57:ef:83:ab:36:cf:94:74:57:2b:90:21:2d:
ed:7a:2a:4f:42:58:f6:f1:19:05:d8:1b:23:79:cf:
a2:bc:0f:86:64:68:ad:84:b7:40:c3:72:4d:2a:e0:
ef:61:0d:4b:ed:62:be:75:a5:66:a2:80:21:68:8d:
84:4a:13:71:8c:85:7c:8b:23:0a:4c:29:ad:b0:a2:
e8:97:6d:3d:3f:de:89:53:7a:48:7c:b2:07:a1:c2:
c7:1d:e7:2b:6b:72:ea:50:a5:76:06:a5:de:1d:d0:
56:5b:43:ef:4d:6d:b5:e0:2c:9a:99:02:2c:6d:ea:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:BB:28:59:63:69:61:8C:6A:02:6A:5F:8E:43:02:4F:92:53:41
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/461f24b5-a411-4af6-b6e6-a25d61de9c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2a52::/47
Signature Algorithm: sha256WithRSAEncryption
74:bc:a7:c0:9c:98:54:25:6a:a6:ba:b0:3b:a8:96:99:99:f6:
5b:81:d7:9a:35:1d:17:53:65:72:63:53:18:8a:e2:d9:bf:89:
91:3a:a1:69:bf:1f:ec:5b:32:22:a2:1c:94:8b:4b:29:1d:0f:
56:31:2f:6d:e9:6a:02:87:39:79:ab:67:8b:2e:a0:25:4f:e4:
db:67:95:94:89:dd:6e:98:56:63:22:16:a8:2e:f3:46:31:b1:
ef:eb:b4:1c:6c:8a:1c:60:0c:31:a6:00:19:41:9b:f1:2b:80:
76:9f:93:6d:4f:99:da:c3:5a:13:8d:a9:61:b3:5e:d9:17:85:
53:72:00:a1:5a:ef:a2:76:7e:d2:28:79:42:40:e7:27:d1:d9:
e0:ea:6b:a8:63:50:ca:89:7b:47:ba:27:e1:c3:e7:e1:dc:0d:
cd:5e:be:6e:2e:3a:03:b3:e4:7a:90:e7:6e:0c:79:23:dc:67:
21:e7:2c:7b:76:6a:24:27:cb:ac:63:e8:8c:33:3a:af:0d:19:
52:7c:77:8d:a6:45:c6:25:2a:07:c5:22:cf:9e:f6:c3:bc:90:
37:23:35:d3:48:17:f3:15:c0:4e:e3:6c:05:b5:ef:8c:90:20:
c6:96:8e:5c:1c:84:83:22:dd:d0:d9:c7:e7:3b:98:4d:9f:38:
94:65:57:8f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUe3oyqVG4O+XFuNjWjIjmdoJwH6UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDAzMDEzWhcNMjYwODAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMGViMWQ5NmUwNmEzMDgwYTQxNGVlM2NkYTJjN2QyN2Rm
ZTcwNjNlMDY0OGY0ODkwMGI3MTZmZWE3ODZkNTJkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5n57HbInzlnQLly/sXiTiUCa+ujPKupKckg7h6iFvwfai
rV5QfCa8Wj31Fnx+e4bpqde01Rs/dsE4jcOfytxEwP73HCVwoQvUF9UBu/NK/rFN
b40Gf6LRjQo5N43Gy9NuKz0qYNhFstb/NlGPV2aekFu5GQzabJKTPyG1PEZfAFO8
YMwAjpzdV++DqzbPlHRXK5AhLe16Kk9CWPbxGQXYGyN5z6K8D4ZkaK2Et0DDck0q
4O9hDUvtYr51pWaigCFojYRKE3GMhXyLIwpMKa2wouiXbT0/3olTekh8sgehwscd
5ytrcupQpXYGpd4d0FZbQ+9NbbXgLJqZAixt6kGlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUnOS7KFljaWGMagJqX45DAk+SU0EwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQ2MWYyNGI1LWE0MTEtNGFmNi1iNmU2LWEyNWQ2MWRlOWM5Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKlIwDQYJKoZIhvcNAQELBQADggEBAHS8p8CcmFQlaqa6sDuolpmZ
9luB15o1HRdTZXJjUxiK4tm/iZE6oWm/H+xbMiKiHJSLSykdD1YxL23pagKHOXmr
Z4suoCVP5NtnlZSJ3W6YVmMiFqgu80Yxse/rtBxsihxgDDGmABlBm/ErgHafk21P
mdrDWhONqWGzXtkXhVNyAKFa76J2ftIoeUJA5yfR2eDqa6hjUMqJe0e6J+HD5+Hc
Dc1evm4uOgOz5HqQ524MeSPcZyHnLHt2aiQny6xj6IwzOq8NGVJ8d42mRcYlKgfF
Is+e9sO8kDcjNdNIF/MVwE7jbAW174yQIMaWjlwchIMi3dDZx+c7mE2fOJRlV48=
-----END CERTIFICATE-----
Generated at Sun May 3 15:31:04 2026 by rpki-client