
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aae4e2df-8ce9-4890-8d00-abfed050d1bd.roa
File: aae4e2df-8ce9-4890-8d00-abfed050d1bd.roa (raw, json)
Hash identifier: yt/YSAET3Sojhyvqgg+enHQviOXoQjcl7iwuvub1kr0=
Subject key identifier: FF:73:AF:27:E4:66:3A:8A:E5:94:DA:8B:97:DB:6C:73:38:A7:78:29
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 51780F364284D06768CFDBB58ABA3446F22CCD8D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aae4e2df-8ce9-4890-8d00-abfed050d1bd.roa
Signing time: Thu 10 Sep 2026 01:00:38 +0000
ROA not before: Thu 10 Sep 2026 01:00:38 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:10fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:78:0f:36:42:84:d0:67:68:cf:db:b5:8a:ba:34:46:f2:2c:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Sep 10 01:00:38 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=475514359a954c5a66e3575cf03cef4a8b867098a798f39224413764498f98e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:24:5e:ef:0a:57:dc:f0:14:af:40:9a:dd:
18:d0:0d:39:c1:e4:86:c6:2a:70:3a:b5:a4:26:b4:
0d:34:d3:55:90:a5:83:b7:b3:52:b4:6f:89:50:7a:
b4:78:3c:ea:5e:9f:06:c6:9c:3b:49:bd:c2:01:b9:
22:6e:cd:1a:76:28:ce:59:1f:b0:a2:d5:3f:34:f1:
e3:62:a7:b3:71:5f:02:44:c5:ab:b5:0c:8e:18:15:
d6:bf:32:16:32:f3:c9:b8:d1:f2:69:60:44:d8:b9:
5a:bf:20:f9:e6:97:3d:22:09:73:bd:bd:5f:17:c3:
8b:c5:fb:e3:84:a5:1c:94:6a:a6:f6:83:78:cc:14:
07:5d:ea:88:82:99:61:d5:9d:ed:82:31:30:ab:2d:
29:cd:d9:9a:96:56:b2:86:b1:a3:ce:6e:0b:33:e3:
bf:0c:78:7b:05:ea:db:52:1c:86:27:4e:c6:73:9b:
ea:e3:d2:90:a2:18:b0:03:fd:1a:24:08:5d:7d:e3:
ff:21:85:6d:bc:85:ca:56:af:ce:b0:8e:81:9c:77:
87:e5:0a:af:b6:f8:28:da:25:6d:3e:fd:7e:bb:25:
9c:1a:38:ae:e2:8d:9d:bb:f2:33:5e:52:ce:3a:e2:
a2:36:e7:be:31:14:e5:64:30:6a:41:8c:55:c7:f1:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:AF:27:E4:66:3A:8A:E5:94:DA:8B:97:DB:6C:73:38:A7:78:29
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aae4e2df-8ce9-4890-8d00-abfed050d1bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:10fe::/48
Signature Algorithm: sha256WithRSAEncryption
24:56:48:c6:fa:9d:c5:0e:cb:fd:d4:55:48:42:1a:f7:f5:d6:
07:93:5b:81:ea:99:5c:f6:d1:aa:bb:89:38:2c:f6:6a:55:a5:
1e:55:72:5f:42:8d:1d:05:cf:9f:98:4f:cc:64:f1:9a:a8:16:
98:5e:65:cf:bc:aa:d1:bb:c7:d4:6a:d9:71:ba:fc:8c:e1:3c:
29:0c:7c:a0:91:6d:99:21:f1:70:9e:b2:2e:cd:5e:50:7a:9d:
8d:70:a9:45:95:83:86:cd:48:72:02:a9:cc:ff:9f:c1:ed:c4:
69:c9:b5:8d:c9:f4:bd:a1:27:8b:75:09:8c:dc:4e:55:cb:25:
4e:d0:f0:ef:b3:6f:1d:d4:d0:8d:d6:31:20:8c:60:37:07:e2:
67:64:82:07:f1:b8:46:ca:a4:b1:2e:2d:c1:fa:99:f8:a9:71:
9b:8d:fd:7f:23:71:59:2c:c7:5e:c1:3b:a9:cc:0d:f2:a0:23:
11:79:10:48:5a:3c:7c:a7:3f:b2:46:0a:7f:d6:01:61:5d:fc:
55:43:09:d4:d8:46:3f:2d:09:86:f3:f4:eb:45:38:c7:64:2f:
50:6d:e9:b9:5b:b7:25:5f:95:59:87:50:ab:5f:de:f2:ec:95:
37:7d:bd:37:c4:44:6d:5f:e6:f5:a6:f0:9f:e2:ed:1f:ce:9b:
aa:cf:1d:19
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUXgPNkKE0Gdoz9u1iro0RvIszY0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEwMDM4WhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NzU1MTQzNTlhOTU0YzVhNjZlMzU3NWNmMDNjZWY0YThi
ODY3MDk4YTc5OGYzOTIyNDQxMzc2NDQ5OGY5OGU2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRdSRe7wpX3PAUr0Ca3RjQDTnB5IbGKnA6taQmtA0001WQ
pYO3s1K0b4lQerR4POpenwbGnDtJvcIBuSJuzRp2KM5ZH7Ci1T808eNip7NxXwJE
xau1DI4YFda/MhYy88m40fJpYETYuVq/IPnmlz0iCXO9vV8Xw4vF++OEpRyUaqb2
g3jMFAdd6oiCmWHVne2CMTCrLSnN2ZqWVrKGsaPObgsz478MeHsF6ttSHIYnTsZz
m+rj0pCiGLAD/RokCF194/8hhW28hcpWr86wjoGcd4flCq+2+CjaJW0+/X67JZwa
OK7ijZ278jNeUs464qI2574xFOVkMGpBjFXH8bL7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU/3OvJ+RmOorllNqLl9tsczineCkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2FhZTRlMmRmLThjZTktNDg5MC04ZDAwLWFiZmVkMDUwZDFiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEP4wDQYJKoZIhvcNAQELBQADggEBACRWSMb6ncUOy/3UVUhCGvf1
1geTW4HqmVz20aq7iTgs9mpVpR5Vcl9CjR0Fz5+YT8xk8ZqoFpheZc+8qtG7x9Rq
2XG6/IzhPCkMfKCRbZkh8XCesi7NXlB6nY1wqUWVg4bNSHICqcz/n8HtxGnJtY3J
9L2hJ4t1CYzcTlXLJU7Q8O+zbx3U0I3WMSCMYDcH4mdkggfxuEbKpLEuLcH6mfip
cZuN/X8jcVksx17BO6nMDfKgIxF5EEhaPHynP7JGCn/WAWFd/FVDCdTYRj8tCYbz
9OtFOMdkL1Bt6blbtyVflVmHUKtf3vLslTd9vTfERG1f5vWm8J/i7R/Om6rPHRk=
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:28:58 2026 by rpki-client