
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5591f579-336d-4e78-85b6-b70b7da7b982.roa
File: 5591f579-336d-4e78-85b6-b70b7da7b982.roa (raw, json)
Hash identifier: zEnsrSpkP5I+jB7rhsUdwFU8XbBj81SlUwQKuXu7kIc=
Subject key identifier: A0:7D:61:CB:60:C6:7D:54:94:DD:E0:C9:02:57:D3:31:02:4C:AA:C7
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 58D6F9EA5375E4BFC6EBB4C84FE477368FFBB462
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5591f579-336d-4e78-85b6-b70b7da7b982.roa
Signing time: Thu 12 Feb 2026 03:11:02 +0000
ROA not before: Thu 12 Feb 2026 03:11:02 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3206::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d6:f9:ea:53:75:e4:bf:c6:eb:b4:c8:4f:e4:77:36:8f:fb:b4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 03:11:02 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=1fbf31f2e884d078ae0753f1484e1cd9b3949ff3284a329c877f898a711f851c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:b4:65:f3:32:49:b8:60:2b:aa:ad:09:f9:
e6:b9:59:12:3e:04:f4:76:9d:91:29:20:b8:88:99:
7e:f9:3a:d6:76:a9:c8:7e:1b:f9:82:eb:c5:25:44:
d7:1b:53:c6:23:3a:a6:04:fb:b5:73:39:33:e4:9a:
a0:35:b6:f2:c5:52:0a:67:0c:20:d1:5f:0c:25:a3:
be:1b:39:34:75:d8:02:fe:05:37:32:09:51:34:b7:
2c:b1:74:23:b5:5a:1a:ca:77:cc:1a:95:ad:a5:b0:
76:2a:2d:a0:16:a4:cf:69:ea:bb:01:a9:78:bf:dd:
24:e3:2b:5d:1e:9b:72:51:3d:80:60:80:c3:f1:17:
cb:3e:05:81:f7:db:3c:b8:a7:94:19:42:05:68:7d:
bf:7a:b8:26:e8:66:94:8b:96:7d:77:aa:fc:02:19:
82:c1:a4:33:ae:93:3b:33:34:a1:a7:ae:fb:16:62:
2e:d0:ad:43:3d:44:22:02:e5:f4:55:34:29:cb:63:
75:d2:93:9d:e8:9a:c4:cb:c6:a7:ca:2a:39:de:9b:
b3:ba:e4:33:26:37:2a:2b:b0:2d:36:72:d1:ba:e9:
4f:e1:00:12:af:48:9e:0f:45:1f:5a:cf:77:6b:09:
39:df:ad:65:42:ac:22:da:86:ee:3f:96:02:af:4e:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7D:61:CB:60:C6:7D:54:94:DD:E0:C9:02:57:D3:31:02:4C:AA:C7
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5591f579-336d-4e78-85b6-b70b7da7b982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3206::/47
Signature Algorithm: sha256WithRSAEncryption
13:81:04:38:fd:03:83:ec:f8:f3:26:5b:74:b9:c3:ff:27:11:
23:e4:f5:af:2a:de:7d:68:45:f8:99:01:a0:c3:ab:27:72:4d:
80:73:61:43:48:6a:ba:19:2d:4d:77:bc:56:09:07:f0:eb:4b:
4c:2c:1d:9c:52:62:0e:89:c6:9d:25:b7:2e:14:5f:ab:3a:a8:
ed:be:9d:a2:d6:4e:7e:38:55:38:f4:35:8d:3a:35:90:bb:4e:
4a:22:cc:22:f0:ca:ef:df:4c:5c:ef:9b:ca:20:41:73:ca:66:
2a:76:01:e7:b0:df:45:f4:7b:11:00:4a:7b:1b:4c:cd:23:43:
b0:7e:17:3f:ee:95:c0:26:60:cd:21:02:23:9d:ad:75:42:55:
6d:d2:5b:5f:92:ac:50:f9:e4:cf:c9:40:24:e3:9e:f3:74:ba:
5e:ed:e2:52:37:35:ee:3f:ba:7f:a1:0b:e6:cd:e5:f9:a7:cd:
78:16:13:77:12:4d:ff:d1:0b:92:d3:d3:8b:76:51:de:16:94:
d4:0e:f7:67:b4:26:da:ac:15:be:0b:4b:e1:93:b6:63:23:25:
c1:73:e5:50:a8:70:bf:e6:98:15:32:16:93:d6:5b:f6:c3:f7:
d1:2e:89:bf:6c:f2:90:72:7a:33:25:e5:b6:6b:a3:e6:8d:7f:
85:3b:64:6c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWNb56lN15L/G67TIT+R3No/7tGIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDMxMTAyWhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxZmJmMzFmMmU4ODRkMDc4YWUwNzUzZjE0ODRlMWNkOWIz
OTQ5ZmYzMjg0YTMyOWM4NzdmODk4YTcxMWY4NTFjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDW27Rl8zJJuGArqq0J+ea5WRI+BPR2nZEpILiImX75OtZ2
qch+G/mC68UlRNcbU8YjOqYE+7VzOTPkmqA1tvLFUgpnDCDRXwwlo74bOTR12AL+
BTcyCVE0tyyxdCO1WhrKd8wala2lsHYqLaAWpM9p6rsBqXi/3STjK10em3JRPYBg
gMPxF8s+BYH32zy4p5QZQgVofb96uCboZpSLln13qvwCGYLBpDOukzszNKGnrvsW
Yi7QrUM9RCIC5fRVNCnLY3XSk53omsTLxqfKKjnem7O65DMmNyorsC02ctG66U/h
ABKvSJ4PRR9az3drCTnfrWVCrCLahu4/lgKvTlH1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUoH1hy2DGfVSU3eDJAlfTMQJMqscwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU1OTFmNTc5LTMzNmQtNGU3OC04NWI2LWI3MGI3ZGE3Yjk4Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAMgYwDQYJKoZIhvcNAQELBQADggEBABOBBDj9A4Ps+PMmW3S5w/8n
ESPk9a8q3n1oRfiZAaDDqydyTYBzYUNIaroZLU13vFYJB/DrS0wsHZxSYg6Jxp0l
ty4UX6s6qO2+naLWTn44VTj0NY06NZC7TkoizCLwyu/fTFzvm8ogQXPKZip2Aeew
30X0exEASnsbTM0jQ7B+Fz/ulcAmYM0hAiOdrXVCVW3SW1+SrFD55M/JQCTjnvN0
ul7t4lI3Ne4/un+hC+bN5fmnzXgWE3cSTf/RC5LT04t2Ud4WlNQO92e0JtqsFb4L
S+GTtmMjJcFz5VCocL/mmBUyFpPWW/bD99Euib9s8pByejMl5bZro+aNf4U7ZGw=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:13 2026 by rpki-client