
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d22ae38-cf2a-4b55-8194-f1337a00a91a.roa
File: 3d22ae38-cf2a-4b55-8194-f1337a00a91a.roa (raw, json)
Hash identifier: n5I0QpQXo78u9z+cL7BDJNLzd5j4aKpE2zta9Mla3L8=
Subject key identifier: 1E:49:4D:1B:64:8E:67:57:A3:D0:72:82:4D:EC:F7:D6:7A:34:CC:52
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 360F9ACC24FE73B76CD92104E7F9EA9D38875F82
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d22ae38-cf2a-4b55-8194-f1337a00a91a.roa
Signing time: Fri 13 Feb 2026 09:31:40 +0000
ROA not before: Fri 13 Feb 2026 09:31:40 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3880::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:0f:9a:cc:24:fe:73:b7:6c:d9:21:04:e7:f9:ea:9d:38:87:5f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 09:31:40 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=1b21053d53b4039c68a628501584a18e6d78065fa44fa13fcc3dc39c4482ea93, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:f6:5b:20:b4:81:18:9c:ba:60:00:be:78:
28:60:04:31:85:5b:56:d6:c2:62:aa:b9:df:84:f5:
75:2c:f4:75:1b:ee:37:8a:44:44:19:00:6c:23:a1:
cb:42:a9:6a:94:64:81:52:dc:0d:40:2f:5a:b5:76:
7c:38:c4:99:d4:78:ae:30:65:f2:dc:54:2b:be:bf:
91:b3:dd:c8:73:e2:09:af:06:ab:74:fb:22:61:99:
d6:87:c6:8e:3f:de:7d:b1:6d:20:5f:36:43:2c:d0:
64:ba:e4:d5:d6:b2:27:0e:22:3f:a6:6a:e5:0b:7d:
c0:f1:21:00:5f:6d:15:b9:f5:30:30:5f:82:c4:b0:
17:a4:ff:82:99:83:d1:5c:14:35:47:44:ce:14:5b:
bb:80:4b:1f:e5:ab:d7:fb:d1:28:e5:5f:ec:fc:3b:
32:29:b3:a6:f0:3f:ff:a6:1c:e7:35:6c:37:a5:79:
28:9c:16:16:cc:f3:01:37:ca:ff:2d:01:ff:ba:d2:
5e:b7:fe:35:37:16:cf:25:37:8a:ba:5b:bb:c1:cd:
be:4c:ee:a6:9a:32:5e:f5:d2:22:12:36:fb:8c:47:
d1:b9:2f:de:57:03:de:01:4a:ca:b6:7e:74:e0:80:
2e:60:2f:a2:ac:c9:6d:60:b4:0c:91:a7:99:db:37:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:49:4D:1B:64:8E:67:57:A3:D0:72:82:4D:EC:F7:D6:7A:34:CC:52
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d22ae38-cf2a-4b55-8194-f1337a00a91a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3880::/41
Signature Algorithm: sha256WithRSAEncryption
2e:23:27:f7:b0:08:db:e0:72:02:02:cd:bc:73:6d:5b:49:31:
5a:9c:79:f8:dc:31:6c:cb:53:8d:d7:f5:0d:2d:3e:72:87:8b:
4e:e7:44:76:26:38:a6:ae:41:52:0d:80:7b:2a:e4:bc:9d:99:
0a:c2:69:b3:fe:fd:50:aa:fe:50:30:2f:e7:06:d7:82:dd:5a:
2d:63:36:da:73:39:f2:f6:9c:ab:ae:90:ef:44:87:7b:7f:b5:
85:70:51:3f:5a:36:30:be:55:dc:6c:6e:82:83:57:5b:37:6e:
bf:80:0f:16:ca:08:c3:5d:67:cd:68:4a:22:60:0b:fe:5f:88:
56:44:b9:94:0d:b9:13:9c:7f:de:cc:b6:24:3a:5d:a9:cd:78:
d9:5a:bf:e1:05:b4:53:35:ed:86:1c:e0:b9:82:bc:96:90:c0:
46:c2:58:88:06:37:c1:07:e0:1e:a8:e0:73:59:10:68:4b:31:
2b:1d:80:e4:6b:81:5f:0c:78:13:14:b9:9b:a8:d6:64:bd:be:
d6:00:d1:af:6f:0b:46:17:71:c8:5f:3d:90:51:4a:f6:92:4f:
ef:7f:a5:18:49:28:69:7a:0e:be:06:cb:59:7c:53:f6:ef:cb:
21:91:3d:8f:28:db:84:41:3d:ea:5f:1d:56:fd:42:ed:18:79:
75:dd:6b:af
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNg+azCT+c7ds2SEE5/nqnTiHX4IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDkzMTQwWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYjIxMDUzZDUzYjQwMzljNjhhNjI4NTAxNTg0YTE4ZTZk
NzgwNjVmYTQ0ZmExM2ZjYzNkYzM5YzQ0ODJlYTkzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwCvZbILSBGJy6YAC+eChgBDGFW1bWwmKqud+E9XUs9HUb
7jeKREQZAGwjoctCqWqUZIFS3A1AL1q1dnw4xJnUeK4wZfLcVCu+v5Gz3chz4gmv
Bqt0+yJhmdaHxo4/3n2xbSBfNkMs0GS65NXWsicOIj+mauULfcDxIQBfbRW59TAw
X4LEsBek/4KZg9FcFDVHRM4UW7uASx/lq9f70SjlX+z8OzIps6bwP/+mHOc1bDel
eSicFhbM8wE3yv8tAf+60l63/jU3Fs8lN4q6W7vBzb5M7qaaMl710iISNvuMR9G5
L95XA94BSsq2fnTggC5gL6KsyW1gtAyRp5nbN4/HAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUHklNG2SOZ1ej0HKCTez31no0zFIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzNkMjJhZTM4LWNmMmEtNGI1NS04MTk0LWYxMzM3YTAwYTkxYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwcmAJAAOIAwDQYJKoZIhvcNAQELBQADggEBAC4jJ/ewCNvgcgICzbxzbVtJ
MVqcefjcMWzLU43X9Q0tPnKHi07nRHYmOKauQVINgHsq5LydmQrCabP+/VCq/lAw
L+cG14LdWi1jNtpzOfL2nKuukO9Eh3t/tYVwUT9aNjC+VdxsboKDV1s3br+ADxbK
CMNdZ81oSiJgC/5fiFZEuZQNuROcf97MtiQ6XanNeNlav+EFtFM17YYc4LmCvJaQ
wEbCWIgGN8EH4B6o4HNZEGhLMSsdgORrgV8MeBMUuZuo1mS9vtYA0a9vC0YXcchf
PZBRSvaST+9/pRhJKGl6Dr4Gy1l8U/bvyyGRPY8o24RBPepfHVb9Qu0YeXXda68=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:48 2026 by rpki-client