
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/431ea9a0-8867-4c19-88cb-f06795e87448.roa
File: 431ea9a0-8867-4c19-88cb-f06795e87448.roa (raw, json)
Hash identifier: aSuf1bHI0jGYEliEelS7HxlHTcXNB9X2618mmkDTSXU=
Subject key identifier: 02:0C:07:5E:86:EE:65:0D:DA:75:1E:64:CD:8C:4C:28:C5:56:90:79
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 0FD8F1ED92DDEF398559CBC69D645A5A5F8BCD2B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/431ea9a0-8867-4c19-88cb-f06795e87448.roa
Signing time: Thu 12 Feb 2026 02:31:58 +0000
ROA not before: Thu 12 Feb 2026 02:31:58 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:327c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d8:f1:ed:92:dd:ef:39:85:59:cb:c6:9d:64:5a:5a:5f:8b:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 02:31:58 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=c6ecf1993f98713627c5d6de05fffeeea748bf005fb9a25c43d4c3822144b7b8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:0b:43:6b:70:c2:9b:82:93:22:54:f5:b0:
b1:9d:4b:11:8d:d8:c0:27:aa:04:0b:1a:38:ff:28:
6b:b6:43:cc:61:10:8a:24:fc:ac:c6:d7:bc:f3:52:
cb:e1:15:f4:27:f3:5d:3e:35:2b:66:c6:91:c3:99:
5f:0a:12:86:e8:ea:e5:28:a4:91:7b:bc:2f:f7:83:
a8:3a:04:19:cf:c8:1e:61:28:35:65:1f:32:6f:af:
74:32:83:72:5c:20:ec:9a:28:a2:21:12:2a:25:6a:
6e:b2:89:e5:33:ea:c6:d7:8a:5a:7b:85:90:72:ec:
fe:8f:96:df:29:c6:b5:55:d6:d8:46:5b:a0:f4:a4:
59:af:3c:ed:19:c7:71:a6:27:91:23:f3:a9:68:03:
53:ba:05:70:90:ff:e4:a2:82:84:bc:08:d7:f1:1a:
2f:6b:ad:78:54:fa:66:f7:aa:25:90:f2:66:fb:d0:
4b:8b:33:30:77:9d:63:c1:9a:db:05:18:53:fd:b2:
f5:77:3f:6c:85:67:81:ef:49:74:2b:09:d8:35:a0:
f3:07:7b:7e:cb:0c:e5:ba:22:42:1f:a0:d5:8c:91:
9f:5e:bd:42:ca:93:ea:c2:ef:e5:16:77:b0:03:e1:
81:23:ae:3b:43:60:34:64:76:a1:dc:d6:0d:46:17:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:07:5E:86:EE:65:0D:DA:75:1E:64:CD:8C:4C:28:C5:56:90:79
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/431ea9a0-8867-4c19-88cb-f06795e87448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:327c::/47
Signature Algorithm: sha256WithRSAEncryption
66:02:4c:a6:de:ff:d8:27:0c:fa:26:a0:df:ba:3a:11:5c:07:
d2:34:5b:b8:29:79:c8:12:e7:4d:d6:fe:be:33:de:7b:64:45:
2c:93:77:a2:50:4b:7c:6c:54:93:62:6d:68:ff:50:f9:4c:f9:
0e:c4:f8:37:99:34:97:a7:dc:a7:38:a4:68:42:f6:40:f7:8e:
ec:3e:b9:dd:80:cd:64:d3:3f:aa:d0:c9:e2:db:52:42:3e:a5:
e0:d4:46:58:e8:ad:76:be:4b:fd:84:83:64:96:64:20:1d:a9:
cb:a1:fb:6a:ef:55:c4:bb:d1:53:ee:ac:58:f0:89:3b:07:e2:
34:e3:27:88:48:a5:d5:6f:59:25:b1:05:33:a4:bb:be:3b:d3:
c2:5a:bd:81:12:e0:34:70:cb:54:6e:98:0e:f5:3a:2a:54:ea:
26:66:f5:da:94:83:2e:50:f5:3e:d1:99:4d:26:56:40:65:0e:
f4:3d:c7:a9:cd:bc:e0:f0:68:b0:00:39:80:88:32:48:36:ea:
a0:39:08:87:5b:f0:f1:68:cb:c6:5d:be:99:d0:7d:04:a0:c4:
59:59:17:a2:10:2f:c8:2c:59:14:41:bf:ea:d0:23:45:4c:4e:
de:ba:42:cf:07:18:12:ad:90:ea:f1:c9:ad:c7:03:9a:c5:be:
f3:cf:03:32
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUD9jx7ZLd7zmFWcvGnWRaWl+LzSswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDIzMTU4WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNmVjZjE5OTNmOTg3MTM2MjdjNWQ2ZGUwNWZmZmVlZWE3
NDhiZjAwNWZiOWEyNWM0M2Q0YzM4MjIxNDRiN2I4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0gwtDa3DCm4KTIlT1sLGdSxGN2MAnqgQLGjj/KGu2Q8xh
EIok/KzG17zzUsvhFfQn810+NStmxpHDmV8KEobo6uUopJF7vC/3g6g6BBnPyB5h
KDVlHzJvr3Qyg3JcIOyaKKIhEiolam6yieUz6sbXilp7hZBy7P6Plt8pxrVV1thG
W6D0pFmvPO0Zx3GmJ5Ej86loA1O6BXCQ/+SigoS8CNfxGi9rrXhU+mb3qiWQ8mb7
0EuLMzB3nWPBmtsFGFP9svV3P2yFZ4HvSXQrCdg1oPMHe37LDOW6IkIfoNWMkZ9e
vULKk+rC7+UWd7AD4YEjrjtDYDRkdqHc1g1GFzM5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUAgwHXobuZQ3adR5kzYxMKMVWkHkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQzMWVhOWEwLTg4NjctNGMxOS04OGNiLWYwNjc5NWU4NzQ0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAMnwwDQYJKoZIhvcNAQELBQADggEBAGYCTKbe/9gnDPomoN+6OhFc
B9I0W7gpecgS503W/r4z3ntkRSyTd6JQS3xsVJNibWj/UPlM+Q7E+DeZNJen3Kc4
pGhC9kD3juw+ud2AzWTTP6rQyeLbUkI+peDURljorXa+S/2Eg2SWZCAdqcuh+2rv
VcS70VPurFjwiTsH4jTjJ4hIpdVvWSWxBTOku74708JavYES4DRwy1RumA71OipU
6iZm9dqUgy5Q9T7RmU0mVkBlDvQ9x6nNvODwaLAAOYCIMkg26qA5CIdb8PFoy8Zd
vpnQfQSgxFlZF6IQL8gsWRRBv+rQI0VMTt66Qs8HGBKtkOrxya3HA5rFvvPPAzI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:28 2026 by rpki-client