
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0405393c-8613-4fed-b845-7ea8bcd9e672.roa
File: 0405393c-8613-4fed-b845-7ea8bcd9e672.roa (raw, json)
Hash identifier: k7I5ENmUimKTNStcBfkId/JOMPtaYv9TvZnZyR4ZkL4=
Subject key identifier: E2:AA:1E:45:5A:EA:AD:76:FE:63:1A:89:07:8F:B6:75:02:B5:47:64
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4B35BD7D512984C9CD4B182F326DCC4E2E124F4A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0405393c-8613-4fed-b845-7ea8bcd9e672.roa
Signing time: Thu 10 Sep 2026 01:10:44 +0000
ROA not before: Thu 10 Sep 2026 01:10:44 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1210::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:35:bd:7d:51:29:84:c9:cd:4b:18:2f:32:6d:cc:4e:2e:12:4f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 01:10:44 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=b582d17bf7bdcf7258b7fbcd75a38a40a525fb0e44fc3ab46a4b0bfb4d77c6d0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:55:54:78:46:0b:ed:0a:49:5d:58:a0:73:
ad:bf:27:b3:57:67:57:d8:07:a8:e7:98:a8:b2:ce:
6e:c7:5f:c3:6c:1d:d6:06:af:18:07:a9:8e:67:d8:
94:a8:95:80:09:f3:ce:3b:f0:65:b0:c4:96:d8:6c:
35:9a:9d:6c:e8:82:d7:15:6c:ba:f0:38:21:5d:3f:
99:97:1a:ea:95:e5:a7:43:2a:2c:60:c0:de:07:b9:
92:83:46:5c:00:0d:a0:05:7f:bc:7d:0f:54:31:7e:
41:2c:0b:31:b9:82:5a:bd:ee:9f:6a:22:49:36:a1:
74:31:09:ed:4b:5b:b0:e5:82:26:f5:eb:44:99:d8:
b8:83:82:0a:e1:0b:1b:49:87:03:93:ab:6a:60:54:
cc:a0:03:7b:5e:9e:46:38:be:8a:c5:bd:82:00:e1:
37:20:1b:ff:85:e6:65:f6:d9:c0:03:b5:af:10:68:
cb:51:8b:86:00:d6:a1:b6:af:e7:3a:a1:b7:93:57:
bb:45:d5:1c:5c:90:3f:cd:88:59:45:b2:24:8e:cc:
4e:62:72:d6:64:7b:6b:c4:76:11:6a:7a:c3:20:99:
99:c4:2d:83:bc:82:66:0e:72:61:a6:a2:09:50:13:
7d:04:f2:8a:69:e3:e3:46:a5:21:b9:eb:26:da:ac:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:1E:45:5A:EA:AD:76:FE:63:1A:89:07:8F:B6:75:02:B5:47:64
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0405393c-8613-4fed-b845-7ea8bcd9e672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1210::/48
Signature Algorithm: sha256WithRSAEncryption
0e:b1:9e:24:6b:79:9e:29:5a:42:66:3c:1d:d8:3e:ef:39:b5:
35:68:c5:de:63:f7:55:f7:eb:bf:89:88:60:fc:f7:fb:c3:f1:
c9:48:1f:b2:87:96:2c:89:a5:39:34:6b:69:3b:75:f2:7e:95:
32:17:c9:0a:53:02:7d:8b:c2:0a:bb:f0:3c:7e:80:29:91:7d:
e4:70:33:d2:0f:e8:9d:9a:c7:c1:ba:3c:24:08:58:74:37:fb:
58:6b:63:a0:4e:d1:3f:37:31:e3:a3:c9:9d:92:e7:42:86:ff:
44:3f:7e:d0:81:65:19:e0:78:37:65:90:92:dd:5d:ae:04:dc:
66:ce:2d:41:de:be:22:53:4d:6c:f3:eb:61:84:dc:9d:20:88:
7f:1a:28:aa:e3:23:65:e9:f2:bd:ce:56:21:27:d4:0a:cb:c0:
fe:73:c7:65:5e:2b:4e:fe:07:7f:5f:67:c6:71:1a:ed:fc:98:
74:cc:d3:3b:00:11:44:1f:1b:23:8a:41:3f:d9:f6:b7:3d:68:
6e:35:40:84:0b:b2:a2:20:f2:d9:3f:30:df:7c:0b:0f:d0:7a:
b5:31:e8:75:3c:35:36:0c:a4:6b:ee:69:50:09:fd:c6:d2:c5:
55:92:79:05:b9:47:7c:ff:5b:c8:78:ed:85:9e:70:ec:29:28:
65:8a:51:b8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSzW9fVEphMnNSxgvMm3MTi4ST0owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDExMDQ0WhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNTgyZDE3YmY3YmRjZjcyNThiN2ZiY2Q3NWEzOGE0MGE1
MjVmYjBlNDRmYzNhYjQ2YTRiMGJmYjRkNzdjNmQwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCIWlVUeEYL7QpJXVigc62/J7NXZ1fYB6jnmKiyzm7HX8Ns
HdYGrxgHqY5n2JSolYAJ88478GWwxJbYbDWanWzogtcVbLrwOCFdP5mXGuqV5adD
KixgwN4HuZKDRlwADaAFf7x9D1QxfkEsCzG5glq97p9qIkk2oXQxCe1LW7Dlgib1
60SZ2LiDggrhCxtJhwOTq2pgVMygA3tenkY4vorFvYIA4TcgG/+F5mX22cADta8Q
aMtRi4YA1qG2r+c6obeTV7tF1RxckD/NiFlFsiSOzE5ictZke2vEdhFqesMgmZnE
LYO8gmYOcmGmoglQE30E8opp4+NGpSG56ybarDv9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU4qoeRVrqrXb+YxqJB4+2dQK1R2QwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA0MDUzOTNjLTg2MTMtNGZlZC1iODQ1LTdlYThiY2Q5ZTY3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEhAwDQYJKoZIhvcNAQELBQADggEBAA6xniRreZ4pWkJmPB3YPu85
tTVoxd5j91X367+JiGD89/vD8clIH7KHliyJpTk0a2k7dfJ+lTIXyQpTAn2Lwgq7
8Dx+gCmRfeRwM9IP6J2ax8G6PCQIWHQ3+1hrY6BO0T83MeOjyZ2S50KG/0Q/ftCB
ZRngeDdlkJLdXa4E3GbOLUHeviJTTWzz62GE3J0giH8aKKrjI2Xp8r3OViEn1ArL
wP5zx2VeK07+B39fZ8ZxGu38mHTM0zsAEUQfGyOKQT/Z9rc9aG41QIQLsqIg8tk/
MN98Cw/QerUx6HU8NTYMpGvuaVAJ/cbSxVWSeQW5R3z/W8h47YWecOwpKGWKUbg=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:28:56 2026 by rpki-client