
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a410e70-d79a-4fff-b662-2da1c377ef8b.roa
File: 2a410e70-d79a-4fff-b662-2da1c377ef8b.roa (raw, json)
Hash identifier: PGhIVih+ZPu4mJptvyFw+RRTmGTkWT5N4hqZT6RPfPw=
Subject key identifier: 01:30:00:38:42:5B:C1:1B:D3:31:21:31:8E:44:05:26:43:98:39:9C
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 40EE109DB627567CF6C7F301329FD92A457120EA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a410e70-d79a-4fff-b662-2da1c377ef8b.roa
Signing time: Fri 13 Feb 2026 02:10:12 +0000
ROA not before: Fri 13 Feb 2026 02:10:12 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:37d0::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ee:10:9d:b6:27:56:7c:f6:c7:f3:01:32:9f:d9:2a:45:71:20:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 02:10:12 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=df9c81d85f91d61feaaa222d93e253f8e5f516d20bc6ce83a43225823fdcb484, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:e0:8d:56:18:bf:99:72:c4:e7:bb:d1:e7:
69:58:04:c0:65:46:6d:5c:85:e0:a0:ff:b6:44:3f:
1b:17:d3:3e:76:94:e9:99:40:7b:91:e4:73:3f:c9:
65:4c:7e:f4:bf:ac:8b:d3:16:91:7b:b6:5d:58:77:
ed:8c:d8:4c:22:10:9f:ee:03:6b:a5:7c:ed:b2:aa:
64:39:9a:a2:16:73:77:f7:45:64:99:bd:52:89:c0:
f9:4b:f9:e3:75:76:c0:3f:64:93:08:52:61:ef:fd:
59:a1:74:0c:bd:b7:37:82:3b:af:b0:79:9b:3a:10:
eb:99:9c:59:fb:23:47:11:f9:99:29:fd:6f:86:de:
95:ab:0e:ca:74:b8:2e:a2:2f:df:4a:93:42:24:ae:
ee:bf:43:8c:f3:ee:a9:a2:a2:91:9c:46:76:e1:ec:
b8:d2:ca:be:bb:fb:20:9a:cc:e1:97:a0:60:8f:9b:
b8:13:d5:70:11:b6:11:28:5f:90:c9:d9:33:cc:ca:
1e:9a:bf:57:c3:0e:00:57:d7:6d:01:33:f4:b5:5b:
6f:f9:a9:cd:42:09:70:f4:8e:fc:6c:42:33:dd:b6:
3f:c9:42:57:24:2d:2b:4d:aa:98:32:41:47:ec:4a:
e0:cb:c2:2b:89:55:29:b3:33:1f:77:ce:cf:96:76:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:30:00:38:42:5B:C1:1B:D3:31:21:31:8E:44:05:26:43:98:39:9C
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2a410e70-d79a-4fff-b662-2da1c377ef8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:37d0::/47
Signature Algorithm: sha256WithRSAEncryption
4e:84:02:59:5e:12:84:47:8b:9f:af:bb:32:0d:12:fb:3e:86:
f5:88:c5:19:fc:71:25:be:51:60:17:a7:7f:7b:c9:64:6b:47:
71:db:3b:77:b2:83:c2:1c:51:8e:24:da:0f:5b:c3:1b:3f:02:
fc:42:f5:8a:b3:77:07:f5:dc:35:63:4f:dc:09:1a:b7:2f:9b:
a5:31:21:d6:13:1d:9d:a1:c8:d4:26:da:bb:78:81:91:b5:67:
f6:23:d2:04:ba:95:6f:9a:0c:38:23:97:af:22:be:1b:94:6d:
5b:1c:30:86:77:c6:e4:26:58:bc:fd:12:e7:9e:79:13:2c:14:
d0:b9:81:be:0f:98:70:c1:8d:10:0e:d0:b1:e9:d8:5f:3b:e1:
ee:46:e1:60:98:bc:93:6e:26:fd:79:32:93:4b:67:e1:6d:62:
01:0b:e7:6c:06:74:02:05:9f:e7:0a:b0:a2:8d:80:6c:5f:ef:
23:72:a5:34:b2:12:45:ac:a7:02:82:99:a7:76:cc:6d:e7:77:
4c:7d:ef:47:7d:f2:cd:99:70:86:a4:71:07:ae:7d:aa:64:b5:
19:2d:6a:61:a7:43:21:ed:3e:7a:b3:2e:c9:84:58:4e:ff:20:
2a:41:e3:07:39:a6:c7:bf:37:37:80:a5:45:0a:ea:5f:6c:22:
82:02:c8:36
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQO4QnbYnVnz2x/MBMp/ZKkVxIOowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDIxMDEyWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZjljODFkODVmOTFkNjFmZWFhYTIyMmQ5M2UyNTNmOGU1
ZjUxNmQyMGJjNmNlODNhNDMyMjU4MjNmZGNiNDg0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDizeCNVhi/mXLE57vR52lYBMBlRm1cheCg/7ZEPxsX0z52
lOmZQHuR5HM/yWVMfvS/rIvTFpF7tl1Yd+2M2EwiEJ/uA2ulfO2yqmQ5mqIWc3f3
RWSZvVKJwPlL+eN1dsA/ZJMIUmHv/VmhdAy9tzeCO6+weZs6EOuZnFn7I0cR+Zkp
/W+G3pWrDsp0uC6iL99Kk0Ikru6/Q4zz7qmiopGcRnbh7LjSyr67+yCazOGXoGCP
m7gT1XARthEoX5DJ2TPMyh6av1fDDgBX120BM/S1W2/5qc1CCXD0jvxsQjPdtj/J
QlckLStNqpgyQUfsSuDLwiuJVSmzMx93zs+WdmkVAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUATAAOEJbwRvTMSExjkQFJkOYOZwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzJhNDEwZTcwLWQ3OWEtNGZmZi1iNjYyLTJkYTFjMzc3ZWY4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAN9AwDQYJKoZIhvcNAQELBQADggEBAE6EAlleEoRHi5+vuzINEvs+
hvWIxRn8cSW+UWAXp397yWRrR3HbO3eyg8IcUY4k2g9bwxs/AvxC9Yqzdwf13DVj
T9wJGrcvm6UxIdYTHZ2hyNQm2rt4gZG1Z/Yj0gS6lW+aDDgjl68ivhuUbVscMIZ3
xuQmWLz9EueeeRMsFNC5gb4PmHDBjRAO0LHp2F874e5G4WCYvJNuJv15MpNLZ+Ft
YgEL52wGdAIFn+cKsKKNgGxf7yNypTSyEkWspwKCmad2zG3nd0x970d98s2ZcIak
cQeufapktRktamGnQyHtPnqzLsmEWE7/ICpB4wc5pse/NzeApUUK6l9sIoICyDY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:44:55 2026 by rpki-client