
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8699d51c-9557-47d3-a27c-a2a10687a34c.roa
File: 8699d51c-9557-47d3-a27c-a2a10687a34c.roa (raw, json)
Hash identifier: fTbOfeP5FXHg1B4lQuhwZyZnQ7/ACGgBJxfsKTwmouM=
Subject key identifier: 83:58:82:1D:22:95:39:1F:20:13:6E:37:C1:8C:16:95:68:9B:F2:AE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 43FBE5146B5315D961658B5DF72642BB16B5F85C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8699d51c-9557-47d3-a27c-a2a10687a34c.roa
Signing time: Thu 12 Feb 2026 02:31:31 +0000
ROA not before: Thu 12 Feb 2026 02:31:31 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2bfe::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:fb:e5:14:6b:53:15:d9:61:65:8b:5d:f7:26:42:bb:16:b5:f8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 02:31:31 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=45141f155ec7ab9433a61fe1737564897bb7de60719ba0f19ad1d064fbd83d1e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:b0:74:19:97:3b:30:0b:2f:5c:18:fc:fe:
4e:a0:a2:ff:a9:e0:13:63:c7:e7:81:c2:9a:b1:56:
20:67:31:51:1c:f1:d4:25:48:c9:27:fc:c1:b0:88:
17:3d:71:b8:b9:86:47:03:10:c3:8d:2f:50:44:b1:
fa:ee:ed:de:e8:03:96:be:9f:60:8b:d4:49:b4:88:
38:61:7e:36:62:76:78:2a:b5:0f:04:78:3f:46:28:
0e:c9:87:75:98:08:72:5f:2c:c1:ca:77:95:ab:ed:
6b:dd:06:64:9a:92:f5:32:46:66:8a:bf:af:d3:5d:
b0:17:30:7a:0e:29:22:c5:03:6e:67:44:9e:c2:84:
1a:87:b3:3a:da:06:44:ae:4c:01:e1:3c:cf:48:54:
94:40:b3:45:4a:13:26:d2:c0:6f:fe:95:9d:11:02:
1a:c9:51:81:1b:a3:ec:22:70:ff:cc:da:22:3e:82:
ed:7e:b6:47:83:31:bf:8a:c7:fd:77:ec:93:ac:48:
bc:8f:26:1d:52:c8:47:8f:d0:93:05:04:5d:ce:60:
e9:89:8c:a8:9e:2e:f8:30:69:51:b7:8d:f0:9a:6a:
93:a5:f7:33:6a:99:bd:78:7f:10:67:b4:ac:a9:76:
47:ee:a8:77:fa:83:30:83:55:93:f8:77:fe:f7:a4:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:58:82:1D:22:95:39:1F:20:13:6E:37:C1:8C:16:95:68:9B:F2:AE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8699d51c-9557-47d3-a27c-a2a10687a34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2bfe::/47
Signature Algorithm: sha256WithRSAEncryption
1d:70:9d:17:74:08:57:b4:50:33:e3:85:11:36:b7:27:cd:9c:
b1:c7:ba:f3:ee:c5:63:6b:7d:5d:02:8e:1b:14:f0:b6:21:b0:
b7:aa:f4:11:ea:2b:76:37:d0:44:ee:7c:d3:34:fa:0f:94:7d:
ed:6c:06:73:00:c7:4e:e0:ef:88:1e:28:e9:d3:fb:dc:ea:0e:
ab:e2:22:16:a3:88:db:53:a8:11:1b:57:87:68:78:0f:9c:27:
9a:9d:28:32:74:2b:42:98:d4:01:6d:81:5c:10:ee:82:e5:6f:
d0:4b:3d:5a:30:15:04:23:31:c2:61:bf:9b:32:f9:c1:5d:16:
26:98:c3:67:78:38:ac:5b:47:eb:18:57:6c:17:77:1c:b2:94:
3a:66:be:e7:4f:4b:49:bb:7a:c4:9b:26:a3:7c:b6:d2:04:66:
58:99:cd:f7:d7:d5:e9:6f:32:dd:76:4b:43:da:37:18:fe:8f:
3c:39:e6:1a:a4:a3:32:0d:25:da:20:d2:8f:5a:43:6a:26:b5:
95:34:75:df:66:1b:67:59:0e:34:e8:32:89:7f:d8:49:2c:43:
71:38:cd:5a:4b:98:74:cb:73:87:ef:ae:79:af:27:3f:fc:d4:
4b:93:ae:34:a1:f6:ea:d3:04:f5:57:68:60:ad:e8:5b:0c:21:
93:a3:2f:50
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQ/vlFGtTFdlhZYtd9yZCuxa1+FwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDIzMTMxWhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTE0MWYxNTVlYzdhYjk0MzNhNjFmZTE3Mzc1NjQ4OTdi
YjdkZTYwNzE5YmEwZjE5YWQxZDA2NGZiZDgzZDFlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNa7B0GZc7MAsvXBj8/k6gov+p4BNjx+eBwpqxViBnMVEc
8dQlSMkn/MGwiBc9cbi5hkcDEMONL1BEsfru7d7oA5a+n2CL1Em0iDhhfjZidngq
tQ8EeD9GKA7Jh3WYCHJfLMHKd5Wr7WvdBmSakvUyRmaKv6/TXbAXMHoOKSLFA25n
RJ7ChBqHszraBkSuTAHhPM9IVJRAs0VKEybSwG/+lZ0RAhrJUYEbo+wicP/M2iI+
gu1+tkeDMb+Kx/137JOsSLyPJh1SyEeP0JMFBF3OYOmJjKieLvgwaVG3jfCaapOl
9zNqmb14fxBntKypdkfuqHf6gzCDVZP4d/73pCEbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUg1iCHSKVOR8gE243wYwWlWib8q4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzg2OTlkNTFjLTk1NTctNDdkMy1hMjdjLWEyYTEwNjg3YTM0Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAK/4wDQYJKoZIhvcNAQELBQADggEBAB1wnRd0CFe0UDPjhRE2tyfN
nLHHuvPuxWNrfV0CjhsU8LYhsLeq9BHqK3Y30ETufNM0+g+Ufe1sBnMAx07g74ge
KOnT+9zqDqviIhajiNtTqBEbV4doeA+cJ5qdKDJ0K0KY1AFtgVwQ7oLlb9BLPVow
FQQjMcJhv5sy+cFdFiaYw2d4OKxbR+sYV2wXdxyylDpmvudPS0m7esSbJqN8ttIE
ZliZzffX1elvMt12S0PaNxj+jzw55hqkozINJdog0o9aQ2omtZU0dd9mG2dZDjTo
Mol/2EksQ3E4zVpLmHTLc4fvrnmvJz/81EuTrjSh9urTBPVXaGCt6FsMIZOjL1A=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:31 2026 by rpki-client