
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2203f235-f965-41bf-b517-2455079916f8.roa
File: 2203f235-f965-41bf-b517-2455079916f8.roa (raw, json)
Hash identifier: PGvxPfi37bTJTM2iQXcvmrRswcWSoXrdcoH1eKL9VMY=
Subject key identifier: 14:D8:28:A7:7A:CE:41:AA:93:83:A6:84:53:17:B9:A6:18:C9:3A:36
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 75B416716EE158FAB84F2D13F69E39BE2F9CE4E2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2203f235-f965-41bf-b517-2455079916f8.roa
Signing time: Fri 03 Apr 2026 00:31:26 +0000
ROA not before: Fri 03 Apr 2026 00:31:26 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:11ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b4:16:71:6e:e1:58:fa:b8:4f:2d:13:f6:9e:39:be:2f:9c:e4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 3 00:31:26 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=91704b70d4e2165b0318af2703616be527e038303a4a5c0093193b5b8333c990, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7e:7c:ae:e2:09:4f:73:ea:05:f2:af:12:3b:
3c:f7:3f:dd:64:32:2d:76:48:be:14:cc:89:8e:43:
ca:41:0f:0f:14:85:ea:69:7d:d5:2b:20:27:35:96:
c6:6d:90:bb:4a:8c:39:24:ae:03:1a:6b:a5:d3:97:
df:7c:6d:81:f2:c4:c9:7f:e5:69:ef:56:0a:a6:be:
7b:69:3b:14:af:db:d3:df:01:f1:56:0a:52:55:d7:
29:04:8e:e2:26:14:9f:fe:6a:85:bd:33:71:2d:b4:
29:0a:ce:69:8e:aa:9d:23:32:eb:85:f0:6d:5f:85:
a3:eb:02:1c:92:89:5f:49:3a:e8:13:21:d7:a6:71:
ee:03:e9:41:df:85:af:a5:56:b1:8d:46:35:fb:4b:
05:87:ad:cd:ef:bb:80:da:d9:aa:cc:b8:e6:89:35:
96:3a:5e:52:8c:71:0c:02:73:07:19:0d:f9:15:7f:
e0:c6:99:ae:28:2b:26:1d:a7:a8:28:c8:9d:8d:99:
90:d3:ec:d0:b4:72:8d:96:77:29:1b:c3:ba:6b:58:
f1:da:27:80:90:82:d2:7a:e4:9e:69:58:9b:d7:9c:
1f:e0:29:ec:37:d5:52:bb:92:79:91:71:67:0b:e5:
b4:84:f3:5c:e9:62:58:a8:28:52:97:e0:b2:7a:86:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D8:28:A7:7A:CE:41:AA:93:83:A6:84:53:17:B9:A6:18:C9:3A:36
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2203f235-f965-41bf-b517-2455079916f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:11ff::/48
Signature Algorithm: sha256WithRSAEncryption
b5:54:db:9d:b2:29:71:3d:ad:a7:aa:78:e1:8d:46:44:95:04:
f2:da:af:5d:d8:69:7e:ea:4e:fe:c2:fb:0b:71:1a:1f:67:c6:
b3:6f:53:d5:dd:d3:57:ce:e5:bc:c9:c4:60:a2:0f:e6:03:bb:
bc:87:75:76:da:10:61:87:9b:18:11:44:58:66:ba:e6:36:44:
2f:de:e2:ac:22:d9:0a:5c:70:74:12:65:ef:19:23:8c:41:91:
af:d6:d7:7a:03:c9:ae:94:dd:51:bf:64:76:36:90:32:f1:f9:
fa:fa:69:c6:a4:c0:5b:d0:3e:c0:21:7b:08:d4:14:6d:5a:7a:
f6:0f:1a:6a:ab:4f:3b:0a:14:8e:6e:98:6a:c3:8b:97:d9:9e:
5b:03:62:d1:35:92:09:0a:f0:46:25:3d:a1:ab:4a:be:d4:48:
c3:ee:b4:59:b0:49:f1:27:44:15:73:d6:67:10:ed:b6:69:7c:
6f:6e:f2:04:86:6c:88:78:a7:6b:19:51:62:0c:e1:a9:5f:6f:
06:a0:ec:03:c5:84:28:e0:9f:52:c6:a4:fb:46:82:3c:ee:3f:
dc:9b:d8:ed:d4:2d:29:3d:5f:0c:e2:10:0c:8a:8a:ab:f9:53:
26:04:bd:e1:5a:e2:e4:d6:72:e0:f8:20:22:27:98:d1:a0:0d:
a1:4e:51:9e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdbQWcW7hWPq4Ty0T9p45vi+c5OIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDAzMTI2WhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MTcwNGI3MGQ0ZTIxNjViMDMxOGFmMjcwMzYxNmJlNTI3
ZTAzODMwM2E0YTVjMDA5MzE5M2I1YjgzMzNjOTkwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvfnyu4glPc+oF8q8SOzz3P91kMi12SL4UzImOQ8pBDw8U
heppfdUrICc1lsZtkLtKjDkkrgMaa6XTl998bYHyxMl/5WnvVgqmvntpOxSv29Pf
AfFWClJV1ykEjuImFJ/+aoW9M3EttCkKzmmOqp0jMuuF8G1fhaPrAhySiV9JOugT
Idemce4D6UHfha+lVrGNRjX7SwWHrc3vu4Da2arMuOaJNZY6XlKMcQwCcwcZDfkV
f+DGma4oKyYdp6goyJ2NmZDT7NC0co2Wdykbw7prWPHaJ4CQgtJ65J5pWJvXnB/g
Kew31VK7knmRcWcL5bSE81zpYlioKFKX4LJ6hsXvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUFNgop3rOQaqTg6aEUxe5phjJOjYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzIyMDNmMjM1LWY5NjUtNDFiZi1iNTE3LTI0NTUwNzk5MTZmOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEf8wDQYJKoZIhvcNAQELBQADggEBALVU252yKXE9raeqeOGNRkSV
BPLar13YaX7qTv7C+wtxGh9nxrNvU9Xd01fO5bzJxGCiD+YDu7yHdXbaEGGHmxgR
RFhmuuY2RC/e4qwi2QpccHQSZe8ZI4xBka/W13oDya6U3VG/ZHY2kDLx+fr6acak
wFvQPsAhewjUFG1aevYPGmqrTzsKFI5umGrDi5fZnlsDYtE1kgkK8EYlPaGrSr7U
SMPutFmwSfEnRBVz1mcQ7bZpfG9u8gSGbIh4p2sZUWIM4alfbwag7APFhCjgn1LG
pPtGgjzuP9yb2O3ULSk9XwziEAyKiqv5UyYEveFa4uTWcuD4ICInmNGgDaFOUZ4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:10 2026 by rpki-client