
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d27ed33-f0b9-49e2-9354-5f45d72dc4e2.roa
File: 9d27ed33-f0b9-49e2-9354-5f45d72dc4e2.roa (raw, json)
Hash identifier: hFioN5PiWpY3O0GmGTJo/PozSZjn10ShV2qndB51laE=
Subject key identifier: 84:B6:72:A6:57:24:AF:EA:23:E2:9C:E7:A5:81:CF:F9:00:92:86:12
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4EE33507A889956E10E146CD5CCAF389C3415CDB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d27ed33-f0b9-49e2-9354-5f45d72dc4e2.roa
Signing time: Thu 12 Feb 2026 01:31:22 +0000
ROA not before: Thu 12 Feb 2026 01:31:22 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:29e4::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e3:35:07:a8:89:95:6e:10:e1:46:cd:5c:ca:f3:89:c3:41:5c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 01:31:22 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=a8c82b9defc7cd4282e5897906106cff9058a55c964a17e02ba5b8a7f6dcfd2c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:09:7d:e3:51:22:ee:07:1f:9c:9e:95:09:
a1:8b:10:b7:68:d3:1a:6a:4d:45:a6:2b:9b:f3:88:
d0:bc:f0:f3:72:45:8c:99:c3:5b:95:45:1c:af:e6:
2f:1e:08:0f:db:76:e3:71:20:75:d3:f6:1e:a5:33:
2a:90:cc:fe:88:88:f0:10:62:51:6a:f1:bd:4b:f3:
bc:71:41:7f:c8:5e:36:40:e6:da:ec:ab:f5:e5:ea:
c6:30:b6:7d:e9:e9:41:ba:d1:02:dc:0c:dd:7e:50:
d9:34:8c:fe:a8:5c:63:47:22:0c:5c:97:c0:7f:69:
6c:69:78:e1:cf:ff:bc:17:8c:9c:23:d5:90:cd:b7:
9c:57:83:54:aa:b7:ea:88:64:c2:38:42:d9:3f:4b:
0d:14:35:0e:2e:4e:bb:60:79:ce:12:ab:6a:00:e6:
a5:09:2f:f0:d5:26:5a:e2:eb:8e:fe:54:50:ba:3c:
ce:05:ef:35:dc:57:c3:43:79:b6:7e:c8:72:83:24:
b1:2c:99:5e:be:db:f5:3f:fa:50:36:34:53:2d:79:
3a:da:e0:da:e3:db:77:8a:3a:2c:14:d8:aa:01:2b:
25:ce:f5:17:47:61:6e:53:8b:f8:b4:9d:ce:58:5d:
95:1c:3f:73:e8:9a:8b:3d:cf:5a:08:3d:d3:47:1f:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B6:72:A6:57:24:AF:EA:23:E2:9C:E7:A5:81:CF:F9:00:92:86:12
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d27ed33-f0b9-49e2-9354-5f45d72dc4e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:29e4::/47
Signature Algorithm: sha256WithRSAEncryption
79:fe:df:02:7d:05:a4:cf:1a:9b:11:2c:cc:82:bb:84:ab:63:
e2:eb:74:92:58:4d:1d:d9:21:c2:27:8e:8d:cc:b4:ad:3b:8b:
f6:1d:39:00:60:cb:ff:4d:fd:c8:c4:1a:5b:64:cd:42:ca:2f:
91:62:7a:51:51:9d:f6:a0:74:96:12:9b:93:26:06:5c:c4:7e:
55:24:48:b3:cd:b3:9e:a2:2c:ad:47:54:9e:e2:01:d3:0b:f4:
c8:49:24:dd:50:8d:b9:78:20:46:ec:65:58:bb:0b:10:d1:c9:
07:7f:8b:bf:2a:32:21:0e:bf:08:41:1d:c6:86:10:45:c9:a6:
78:e1:f4:ee:79:52:37:5f:84:34:1b:b4:67:8d:80:b2:9a:17:
bd:2a:94:fb:aa:04:34:5f:75:e8:53:1b:ee:1b:12:1f:d5:b4:
b7:d0:b5:dc:05:37:ab:66:92:4e:b4:d1:8d:60:05:15:0e:63:
2f:5d:10:2e:de:86:98:dc:6d:49:c6:4d:e8:ec:fe:4f:00:c6:
3c:9e:f8:9e:73:bc:01:6b:76:94:7c:2f:c2:af:50:dc:cb:ba:
d6:52:e3:5c:bc:1f:4c:d2:f1:2f:a8:33:23:e5:45:15:fd:aa:
44:25:42:d7:07:44:3c:d9:97:f9:df:13:5a:a7:cd:85:07:32:
cc:93:5d:94
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTuM1B6iJlW4Q4UbNXMrzicNBXNswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDEzMTIyWhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhOGM4MmI5ZGVmYzdjZDQyODJlNTg5NzkwNjEwNmNmZjkw
NThhNTVjOTY0YTE3ZTAyYmE1YjhhN2Y2ZGNmZDJjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRtgl941Ei7gcfnJ6VCaGLELdo0xpqTUWmK5vziNC88PNy
RYyZw1uVRRyv5i8eCA/bduNxIHXT9h6lMyqQzP6IiPAQYlFq8b1L87xxQX/IXjZA
5trsq/Xl6sYwtn3p6UG60QLcDN1+UNk0jP6oXGNHIgxcl8B/aWxpeOHP/7wXjJwj
1ZDNt5xXg1Sqt+qIZMI4Qtk/Sw0UNQ4uTrtgec4Sq2oA5qUJL/DVJlri647+VFC6
PM4F7zXcV8NDebZ+yHKDJLEsmV6+2/U/+lA2NFMteTra4Nrj23eKOiwU2KoBKyXO
9RdHYW5Ti/i0nc5YXZUcP3Pomos9z1oIPdNHH+kNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUhLZyplckr+oj4pznpYHP+QCShhIwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzlkMjdlZDMzLWYwYjktNDllMi05MzU0LTVmNDVkNzJkYzRlMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKeQwDQYJKoZIhvcNAQELBQADggEBAHn+3wJ9BaTPGpsRLMyCu4Sr
Y+LrdJJYTR3ZIcInjo3MtK07i/YdOQBgy/9N/cjEGltkzULKL5FielFRnfagdJYS
m5MmBlzEflUkSLPNs56iLK1HVJ7iAdML9MhJJN1Qjbl4IEbsZVi7CxDRyQd/i78q
MiEOvwhBHcaGEEXJpnjh9O55UjdfhDQbtGeNgLKaF70qlPuqBDRfdehTG+4bEh/V
tLfQtdwFN6tmkk600Y1gBRUOYy9dEC7ehpjcbUnGTejs/k8Axjye+J5zvAFrdpR8
L8KvUNzLutZS41y8H0zS8S+oMyPlRRX9qkQlQtcHRDzZl/nfE1qnzYUHMsyTXZQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:39 2026 by rpki-client