
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34867caf-3f11-4f56-9338-9b3d895caa01.roa
File: 34867caf-3f11-4f56-9338-9b3d895caa01.roa (raw, json)
Hash identifier: OwLGzn2lw/EyynURPsaPv4eHU/sSd/UMSoDBD4aQyr4=
Subject key identifier: B6:9D:10:7B:F1:F7:2F:20:C0:52:34:B2:91:27:28:B5:DA:E2:B0:51
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6CA0AC41ED355383097ED92CF847D52E787E1697
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34867caf-3f11-4f56-9338-9b3d895caa01.roa
Signing time: Thu 10 Sep 2026 01:31:33 +0000
ROA not before: Thu 10 Sep 2026 01:31:33 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1047::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a0:ac:41:ed:35:53:83:09:7e:d9:2c:f8:47:d5:2e:78:7e:16:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 01:31:33 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=55a669a3971df08d372e33ad7e148402519beeff4d44b011f86c33f581831fa8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:01:a0:f5:c1:ad:0c:1f:44:4f:11:b2:e5:
3a:76:aa:11:3d:6f:3a:41:c5:22:7f:00:81:98:10:
e9:5b:57:48:20:ec:09:e9:7d:ae:c1:a2:58:15:a1:
8b:a6:e8:f7:a9:0a:da:f1:65:76:57:51:a0:98:8d:
ce:da:0c:73:90:40:34:af:45:da:3c:9e:a2:da:a2:
74:27:fa:b3:7c:e5:7e:ac:b6:6f:c6:85:01:c0:b7:
e6:d2:0d:8c:73:32:0c:4d:c5:a5:c7:5b:c5:fd:fa:
db:9b:42:d1:e5:cd:b4:12:94:e6:48:d9:63:b7:40:
0b:7e:a7:90:90:f7:51:34:1b:a6:a9:ca:66:0e:da:
2a:7a:74:61:8f:b0:27:ba:0c:60:ec:72:bb:a6:de:
3c:a1:f1:41:f3:e4:96:ab:32:7f:06:a1:f6:1d:e1:
60:23:8d:83:44:64:fd:36:a5:55:c9:f2:00:3c:af:
45:da:ff:90:70:bf:d6:25:22:23:f7:b7:6b:5f:fa:
de:b0:1a:a1:15:e8:03:e3:4e:93:ae:74:ee:70:aa:
37:fe:8c:d4:12:c5:26:7a:ab:5e:30:64:18:d7:35:
ed:75:80:4d:40:2a:5f:fe:cf:66:4d:4c:31:8c:04:
d5:0e:2f:f0:5f:f4:d5:38:b4:6c:a7:8a:8f:06:01:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9D:10:7B:F1:F7:2F:20:C0:52:34:B2:91:27:28:B5:DA:E2:B0:51
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/34867caf-3f11-4f56-9338-9b3d895caa01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1047::/48
Signature Algorithm: sha256WithRSAEncryption
a4:92:d1:bb:22:68:70:e4:2c:49:d4:a0:80:18:e9:d5:a3:83:
c0:73:31:99:ca:86:d3:45:2d:6d:e8:2c:04:af:b7:5c:ba:86:
11:81:fa:26:a3:d2:89:e9:e2:36:c9:19:c8:94:37:77:f4:93:
97:4d:90:45:be:db:c3:0a:56:8c:6e:7c:77:81:cc:6a:c0:f6:
e9:f0:f7:b9:be:53:ea:4d:67:2d:ed:b3:7d:4f:ac:a4:27:d3:
77:b8:4d:46:8d:28:13:a7:df:ff:09:74:35:74:4d:ff:62:51:
06:53:1a:03:49:3e:6f:2f:02:22:9a:67:57:cc:fa:37:49:1e:
71:71:b4:cb:b6:89:55:95:68:a2:57:59:70:62:4d:f4:e8:83:
0e:ae:dc:85:60:7e:f1:a4:11:8e:7b:ea:9f:1a:ad:2d:32:c4:
f5:b5:df:3b:cb:63:2a:8e:6b:06:df:8b:88:94:bd:1e:cb:3a:
02:80:07:99:fc:9d:da:d6:a7:fd:55:78:ac:be:89:a3:2e:bd:
61:a4:97:47:e6:22:a2:a6:7f:53:86:75:e1:b8:94:9a:d9:15:
b2:3e:f3:c8:b4:ff:d1:76:e9:fa:0d:da:f7:57:f6:19:4e:3c:
42:03:72:0d:ea:f7:31:f3:5f:9e:10:a5:60:99:08:27:a6:d7:
ab:84:97:c4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUbKCsQe01U4MJftks+EfVLnh+FpcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEzMTMzWhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NWE2NjlhMzk3MWRmMDhkMzcyZTMzYWQ3ZTE0ODQwMjUx
OWJlZWZmNGQ0NGIwMTFmODZjMzNmNTgxODMxZmE4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjfwGg9cGtDB9ETxGy5Tp2qhE9bzpBxSJ/AIGYEOlbV0gg
7Anpfa7BolgVoYum6PepCtrxZXZXUaCYjc7aDHOQQDSvRdo8nqLaonQn+rN85X6s
tm/GhQHAt+bSDYxzMgxNxaXHW8X9+tubQtHlzbQSlOZI2WO3QAt+p5CQ91E0G6ap
ymYO2ip6dGGPsCe6DGDscrum3jyh8UHz5JarMn8GofYd4WAjjYNEZP02pVXJ8gA8
r0Xa/5Bwv9YlIiP3t2tf+t6wGqEV6APjTpOudO5wqjf+jNQSxSZ6q14wZBjXNe11
gE1AKl/+z2ZNTDGMBNUOL/Bf9NU4tGynio8GAVgNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUtp0Qe/H3LyDAUjSykScotdrisFEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM0ODY3Y2FmLTNmMTEtNGY1Ni05MzM4LTliM2Q4OTVjYWEwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEEcwDQYJKoZIhvcNAQELBQADggEBAKSS0bsiaHDkLEnUoIAY6dWj
g8BzMZnKhtNFLW3oLASvt1y6hhGB+iaj0onp4jbJGciUN3f0k5dNkEW+28MKVoxu
fHeBzGrA9unw97m+U+pNZy3ts31PrKQn03e4TUaNKBOn3/8JdDV0Tf9iUQZTGgNJ
Pm8vAiKaZ1fM+jdJHnFxtMu2iVWVaKJXWXBiTfTogw6u3IVgfvGkEY576p8arS0y
xPW13zvLYyqOawbfi4iUvR7LOgKAB5n8ndrWp/1VeKy+iaMuvWGkl0fmIqKmf1OG
deG4lJrZFbI+88i0/9F26foN2vdX9hlOPEIDcg3q9zHzX54QpWCZCCem16uEl8Q=
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:40:26 2026 by rpki-client