
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1829f7b2-4c89-486d-a38d-976a654e5c1b.roa
File: 1829f7b2-4c89-486d-a38d-976a654e5c1b.roa (raw, json)
Hash identifier: +VRsEqqWRpJ8VTfKfIJ44HIXhFoH/Lw277uU9izFUbs=
Subject key identifier: DF:81:45:DB:53:D4:A1:CD:22:20:A2:B6:39:F8:1C:45:A6:67:F4:44
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5F0D01C813500211AC37084070159D303724686D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1829f7b2-4c89-486d-a38d-976a654e5c1b.roa
Signing time: Thu 12 Feb 2026 01:40:57 +0000
ROA not before: Thu 12 Feb 2026 01:40:57 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2b32::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0d:01:c8:13:50:02:11:ac:37:08:40:70:15:9d:30:37:24:68:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 01:40:57 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=7abb155e9db3e31d3eb3feb196df079daa5d5a6b05d8c30da6ab22f216300259, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:9a:65:92:ea:96:9a:a4:e1:a0:7f:48:31:
76:62:64:50:5a:16:36:d6:72:8b:2d:8f:e9:67:79:
4d:9b:d8:1d:66:60:80:be:88:a0:b7:4c:f2:da:33:
81:60:63:fb:b4:8f:2e:6b:59:c6:e4:68:93:92:a2:
09:b5:97:72:12:77:9c:a9:af:cf:5f:f8:7f:f6:51:
50:20:ec:38:9b:91:17:5d:8b:30:dc:ae:d2:de:a5:
f4:90:d5:6c:ff:0b:2a:f1:c3:3b:e3:e2:00:55:8e:
33:19:50:65:d9:1a:40:6a:1d:3e:67:00:6c:15:fc:
33:1c:e1:5f:c9:85:b9:51:95:95:74:a5:8a:53:d1:
09:f6:3c:ee:cb:a5:bb:a9:95:b4:b9:74:0a:a3:e2:
c3:1a:0a:ce:be:bc:55:98:6d:c6:e5:58:e6:e9:92:
5e:e7:85:eb:d9:51:64:00:af:d7:62:93:a1:f3:08:
03:0f:6f:63:f5:c6:b9:a6:74:82:46:2a:f4:f8:69:
dd:4c:c2:97:92:bc:45:70:14:c0:d3:25:07:10:cb:
b4:44:6a:95:ad:2f:00:31:aa:8c:0a:c8:fb:f3:88:
c6:a1:95:2b:f5:c8:79:18:d6:59:c7:0f:f7:0f:8e:
39:b7:74:91:e4:e2:59:cb:8d:b6:a7:3f:c4:09:86:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:81:45:DB:53:D4:A1:CD:22:20:A2:B6:39:F8:1C:45:A6:67:F4:44
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1829f7b2-4c89-486d-a38d-976a654e5c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2b32::/47
Signature Algorithm: sha256WithRSAEncryption
97:d6:e1:b2:be:68:34:2a:2d:cf:64:b1:fb:7a:d2:a9:39:e0:
0c:8c:67:a2:e5:6b:65:bd:f1:68:e3:05:ae:25:00:95:32:7b:
4b:c0:9a:13:e9:b1:43:19:3f:20:2b:d9:72:fe:f2:41:13:fd:
99:fe:20:d7:4f:c6:3e:aa:24:89:51:b8:99:99:5d:db:15:8d:
88:5b:a4:ce:7f:5b:b0:32:44:ea:73:64:8a:16:df:33:91:05:
68:bb:5a:ef:8e:c9:10:dd:ef:02:64:0a:bd:93:7f:bd:a5:e4:
d3:3a:68:66:6e:94:c7:d3:f9:fa:4c:03:24:c6:08:f3:47:a9:
9a:18:ff:c6:55:80:84:72:f5:db:92:22:1f:34:24:5f:0a:4c:
d5:53:26:1f:ad:75:a6:c6:70:b7:1d:62:d0:18:9e:b0:a4:fc:
d1:4e:03:34:92:b5:19:c3:83:e7:bb:08:42:9f:20:f7:d6:ca:
8c:89:8d:b8:14:08:3c:42:78:bf:98:d9:6e:84:bd:61:45:25:
a5:ae:a6:28:15:e8:1e:48:20:eb:5a:a4:ad:7c:18:7c:5e:ad:
e8:81:25:3a:0a:61:2d:30:2c:59:91:6a:f4:41:a0:88:f0:55:
76:e2:44:8b:8d:d7:78:09:00:ed:77:a4:36:51:05:e6:9b:98:
49:34:05:52
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXw0ByBNQAhGsNwhAcBWdMDckaG0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDE0MDU3WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3YWJiMTU1ZTlkYjNlMzFkM2ViM2ZlYjE5NmRmMDc5ZGFh
NWQ1YTZiMDVkOGMzMGRhNmFiMjJmMjE2MzAwMjU5MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrfpplkuqWmqThoH9IMXZiZFBaFjbWcostj+lneU2b2B1m
YIC+iKC3TPLaM4FgY/u0jy5rWcbkaJOSogm1l3ISd5ypr89f+H/2UVAg7DibkRdd
izDcrtLepfSQ1Wz/Cyrxwzvj4gBVjjMZUGXZGkBqHT5nAGwV/DMc4V/JhblRlZV0
pYpT0Qn2PO7LpbuplbS5dAqj4sMaCs6+vFWYbcblWObpkl7nhevZUWQAr9dik6Hz
CAMPb2P1xrmmdIJGKvT4ad1MwpeSvEVwFMDTJQcQy7REapWtLwAxqowKyPvziMah
lSv1yHkY1lnHD/cPjjm3dJHk4lnLjbanP8QJhjthAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU34FF21PUoc0iIKK2OfgcRaZn9EQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzE4MjlmN2IyLTRjODktNDg2ZC1hMzhkLTk3NmE2NTRlNWMxYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKzIwDQYJKoZIhvcNAQELBQADggEBAJfW4bK+aDQqLc9ksft60qk5
4AyMZ6Lla2W98WjjBa4lAJUye0vAmhPpsUMZPyAr2XL+8kET/Zn+INdPxj6qJIlR
uJmZXdsVjYhbpM5/W7AyROpzZIoW3zORBWi7Wu+OyRDd7wJkCr2Tf72l5NM6aGZu
lMfT+fpMAyTGCPNHqZoY/8ZVgIRy9duSIh80JF8KTNVTJh+tdabGcLcdYtAYnrCk
/NFOAzSStRnDg+e7CEKfIPfWyoyJjbgUCDxCeL+Y2W6EvWFFJaWupigV6B5IIOta
pK18GHxereiBJToKYS0wLFmRavRBoIjwVXbiRIuN13gJAO13pDZRBeabmEk0BVI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:02 2026 by rpki-client