
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b87ac63-66a1-4b65-a16c-9b6ac7adaad7.roa
File: 4b87ac63-66a1-4b65-a16c-9b6ac7adaad7.roa (raw, json)
Hash identifier: Q8xDpoL6fT/jCLdPI1Fo+8v1LGVzatmqsZMVZ09/ns4=
Subject key identifier: A4:29:BF:A7:78:01:66:F6:0B:79:B1:C6:97:07:75:C3:9F:D8:37:17
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5B3B0CAFC8AFD9B94AA8FCA8B44B82DA1A115D9E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b87ac63-66a1-4b65-a16c-9b6ac7adaad7.roa
Signing time: Fri 03 Apr 2026 01:11:52 +0000
ROA not before: Fri 03 Apr 2026 01:11:52 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1ea5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:3b:0c:af:c8:af:d9:b9:4a:a8:fc:a8:b4:4b:82:da:1a:11:5d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Apr 3 01:11:52 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=e5288d5dab7342dc9ffbceee17127d3b09f1bb225eda48e2e2f0c56d7555e8c1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c6:4d:b2:0c:7c:12:b8:2d:80:d3:d6:87:c0:
b4:06:8d:1d:96:ff:8f:28:36:b6:b3:f2:b5:d4:ab:
90:27:e0:c9:7d:80:33:a9:24:64:2f:4b:0e:2e:d9:
24:0d:fd:9f:36:49:a6:86:92:8c:43:4d:62:01:b3:
49:7e:b8:51:ca:7b:78:a5:9e:47:ec:8b:37:54:93:
ec:eb:88:ea:de:39:0d:f3:45:3d:ec:7d:40:77:82:
dd:43:ff:2c:9d:6e:94:c6:22:89:77:ba:65:72:99:
66:65:3a:80:be:47:5e:0d:1d:82:49:ca:58:5e:87:
07:72:99:72:6b:10:73:44:44:1f:8f:2b:95:36:ae:
05:42:03:27:e1:21:f7:29:a2:a8:23:a4:42:6f:ab:
d9:40:27:9d:7c:ba:9d:5a:4f:ef:01:1b:23:54:a9:
9b:e6:03:fd:9a:9d:9f:d2:25:f4:cb:bd:79:16:ac:
68:97:1f:c3:4b:1f:fd:df:90:a3:20:45:14:82:7c:
07:38:1c:d2:eb:5a:17:d0:cb:6a:69:68:2d:80:b9:
ca:d0:34:e7:47:ea:14:70:8b:6d:94:a1:b3:08:9c:
31:de:91:ae:be:a5:94:1e:dd:da:85:bf:de:86:8f:
1d:50:07:cb:64:4f:e4:54:72:ba:a8:cf:ff:ae:e9:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:BF:A7:78:01:66:F6:0B:79:B1:C6:97:07:75:C3:9F:D8:37:17
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b87ac63-66a1-4b65-a16c-9b6ac7adaad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1ea5::/48
Signature Algorithm: sha256WithRSAEncryption
66:2c:6a:83:76:81:ca:13:e6:2a:fb:4f:bd:34:d9:84:3c:52:
81:90:11:11:5e:97:a1:59:37:b8:5f:d5:ec:0c:38:3a:67:ba:
1d:90:7f:ac:67:a9:89:2c:3b:2e:07:a2:02:23:46:8c:ab:e8:
31:f1:33:32:4d:99:fd:25:c9:ba:f1:24:53:b8:b7:f5:04:74:
dd:3d:ea:06:a8:25:46:b1:b7:44:92:6c:a0:61:23:b3:9a:1e:
d4:ba:c9:e7:65:a4:ae:02:87:1b:52:d4:92:4f:0a:79:40:30:
3d:a9:90:cb:46:fd:ac:03:36:38:e9:22:b6:b5:f0:a4:6b:a0:
81:37:37:33:e6:5c:0a:69:91:0f:4f:a2:99:33:7a:c7:73:53:
7f:06:22:61:70:5f:8e:5c:83:85:a4:fb:05:dd:a3:83:95:1e:
c7:5f:c1:df:7e:53:fb:88:26:9a:fd:79:33:2a:8a:b1:3b:69:
6b:a8:6e:44:d7:de:2a:5f:52:3f:41:bf:07:ea:2b:8e:ce:f4:
3f:10:24:32:4c:d8:f0:ed:d2:44:a4:55:fe:42:e7:36:fe:88:
b0:8e:ed:d9:a0:03:d0:ac:42:01:e8:73:25:a4:92:24:1d:24:
cc:be:03:77:9a:b0:5d:84:51:69:28:4d:53:02:34:d0:fd:ab:
8c:53:35:c8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWzsMr8iv2blKqPyotEuC2hoRXZ4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDExMTUyWhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNTI4OGQ1ZGFiNzM0MmRjOWZmYmNlZWUxNzEyN2QzYjA5
ZjFiYjIyNWVkYTQ4ZTJlMmYwYzU2ZDc1NTVlOGMxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqxk2yDHwSuC2A09aHwLQGjR2W/48oNraz8rXUq5An4Ml9
gDOpJGQvSw4u2SQN/Z82SaaGkoxDTWIBs0l+uFHKe3ilnkfsizdUk+zriOreOQ3z
RT3sfUB3gt1D/yydbpTGIol3umVymWZlOoC+R14NHYJJylhehwdymXJrEHNERB+P
K5U2rgVCAyfhIfcpoqgjpEJvq9lAJ518up1aT+8BGyNUqZvmA/2anZ/SJfTLvXkW
rGiXH8NLH/3fkKMgRRSCfAc4HNLrWhfQy2ppaC2AucrQNOdH6hRwi22UobMInDHe
ka6+pZQe3dqFv96Gjx1QB8tkT+RUcrqoz/+u6Qc5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUpCm/p3gBZvYLebHGlwd1w5/YNxcwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzRiODdhYzYzLTY2YTEtNGI2NS1hMTZjLTliNmFjN2FkYWFkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAHqUwDQYJKoZIhvcNAQELBQADggEBAGYsaoN2gcoT5ir7T7002YQ8
UoGQERFel6FZN7hf1ewMODpnuh2Qf6xnqYksOy4HogIjRoyr6DHxMzJNmf0lybrx
JFO4t/UEdN096gaoJUaxt0SSbKBhI7OaHtS6yedlpK4ChxtS1JJPCnlAMD2pkMtG
/awDNjjpIra18KRroIE3NzPmXAppkQ9PopkzesdzU38GImFwX45cg4Wk+wXdo4OV
Hsdfwd9+U/uIJpr9eTMqirE7aWuobkTX3ipfUj9BvwfqK47O9D8QJDJM2PDt0kSk
Vf5C5zb+iLCO7dmgA9CsQgHocyWkkiQdJMy+A3easF2EUWkoTVMCNND9q4xTNcg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:45:58 2026 by rpki-client