
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b1086f61-18e9-4d06-9bb2-4972d2579509.roa
File: b1086f61-18e9-4d06-9bb2-4972d2579509.roa (raw, json)
Hash identifier: AadA1cn4v95XzfQvmU8Fc+Eg1DiS8CNvuSH5VYauPm8=
Subject key identifier: 9D:10:50:99:58:75:68:E9:63:EE:90:3C:B8:EC:F2:D1:1D:ED:10:70
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 212D6A6AFC7865E6C6801F0B663B726439B88E9E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b1086f61-18e9-4d06-9bb2-4972d2579509.roa
Signing time: Thu 12 Feb 2026 03:30:49 +0000
ROA not before: Thu 12 Feb 2026 03:30:49 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:219a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2d:6a:6a:fc:78:65:e6:c6:80:1f:0b:66:3b:72:64:39:b8:8e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 03:30:49 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=08391089284248a612b27bff635c8d9a412c57326d16733e81e994c7e76cff5d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:c7:64:66:b3:58:49:b2:16:81:bc:45:55:
97:1b:46:09:27:34:d8:e9:f6:c4:1a:33:75:43:f3:
bb:80:d2:2c:20:b8:a2:c9:8d:14:48:f3:45:0b:27:
f2:da:1c:02:92:6c:4c:8b:0c:f3:0c:05:a9:04:ac:
60:1a:6e:fa:a0:68:c9:e8:ac:0b:3e:9d:fb:17:84:
b4:f4:9f:79:26:06:c3:83:d6:e8:68:cd:d2:64:5a:
f0:d1:1d:46:ee:2f:98:2e:65:45:46:7b:4a:01:db:
bb:98:10:1b:10:fe:0d:5c:f3:a5:5c:30:d7:aa:46:
bc:67:35:d5:0b:48:53:89:fc:1b:52:a2:86:7a:5b:
62:d0:b3:bf:7a:e7:77:9b:2d:ee:b7:03:91:c0:cf:
2e:e6:44:30:29:25:de:8d:21:1c:9c:3a:4f:3e:de:
eb:07:9c:0b:9e:da:51:ee:b8:42:15:fe:93:fd:28:
97:2c:88:cc:dd:10:89:0b:fc:9d:eb:a4:5b:41:fd:
8f:03:19:0b:95:e2:7e:88:bd:a1:9e:c4:a1:69:61:
62:45:d2:a8:83:a9:da:5b:f6:eb:4a:e7:31:07:78:
e6:56:1c:32:be:56:4e:a7:0b:aa:5e:e8:67:e7:1c:
6c:29:77:a7:24:5b:ab:36:8e:b5:94:a5:34:d7:84:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:50:99:58:75:68:E9:63:EE:90:3C:B8:EC:F2:D1:1D:ED:10:70
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b1086f61-18e9-4d06-9bb2-4972d2579509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:219a::/48
Signature Algorithm: sha256WithRSAEncryption
7c:8a:be:e3:36:89:f1:1a:3c:12:0c:35:91:4d:99:71:62:4d:
f0:b6:c7:a3:05:b3:de:09:88:fd:d9:5e:25:6a:93:ec:26:e9:
b2:8f:52:b0:1d:6f:ae:c6:3d:87:39:b6:5a:77:d6:e6:45:91:
86:fb:14:5a:42:4f:e2:5a:25:25:ba:6c:01:36:00:32:c9:ad:
5c:d7:70:e0:c2:80:50:20:9e:3f:c4:60:27:60:3e:6a:eb:a5:
ae:c7:bf:42:32:93:4a:ee:5e:96:1c:48:ed:1f:4a:04:0f:ce:
e9:f6:37:48:3e:d1:06:65:af:89:29:1a:8c:3b:2c:8c:46:be:
a2:1c:b8:e9:38:f3:15:b0:cf:99:86:ee:70:48:bb:e1:8e:97:
aa:48:21:e6:d3:00:31:02:d7:74:97:ac:64:3a:05:bc:15:44:
7e:cb:f6:8e:43:44:74:4a:9d:fb:54:16:5f:9d:e2:85:a9:e5:
af:d0:4c:0a:47:49:2a:c5:65:71:1a:a2:b6:3a:59:cb:62:1e:
cb:61:3f:d3:23:3e:40:bb:97:9e:85:b8:f0:b9:46:8a:aa:ad:
b2:d3:06:1b:a0:8a:07:68:7a:9c:b4:de:d2:cc:1e:a4:ea:6b:
1e:40:45:89:03:c2:22:93:32:9d:a3:8f:e7:26:83:c5:ae:33:
b2:e7:47:db
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIS1qavx4ZebGgB8LZjtyZDm4jp4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDMzMDQ5WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwODM5MTA4OTI4NDI0OGE2MTJiMjdiZmY2MzVjOGQ5YTQx
MmM1NzMyNmQxNjczM2U4MWU5OTRjN2U3NmNmZjVkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTc8dkZrNYSbIWgbxFVZcbRgknNNjp9sQaM3VD87uA0iwg
uKLJjRRI80ULJ/LaHAKSbEyLDPMMBakErGAabvqgaMnorAs+nfsXhLT0n3kmBsOD
1uhozdJkWvDRHUbuL5guZUVGe0oB27uYEBsQ/g1c86VcMNeqRrxnNdULSFOJ/BtS
ooZ6W2LQs79653ebLe63A5HAzy7mRDApJd6NIRycOk8+3usHnAue2lHuuEIV/pP9
KJcsiMzdEIkL/J3rpFtB/Y8DGQuV4n6IvaGexKFpYWJF0qiDqdpb9utK5zEHeOZW
HDK+Vk6nC6pe6GfnHGwpd6ckW6s2jrWUpTTXhLD3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUnRBQmVh1aOlj7pA8uOzy0R3tEHAwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2IxMDg2ZjYxLTE4ZTktNGQwNi05YmIyLTQ5NzJkMjU3OTUwOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAIZowDQYJKoZIhvcNAQELBQADggEBAHyKvuM2ifEaPBIMNZFNmXFi
TfC2x6MFs94JiP3ZXiVqk+wm6bKPUrAdb67GPYc5tlp31uZFkYb7FFpCT+JaJSW6
bAE2ADLJrVzXcODCgFAgnj/EYCdgPmrrpa7Hv0Iyk0ruXpYcSO0fSgQPzun2N0g+
0QZlr4kpGow7LIxGvqIcuOk48xWwz5mG7nBIu+GOl6pIIebTADEC13SXrGQ6BbwV
RH7L9o5DRHRKnftUFl+d4oWp5a/QTApHSSrFZXEaorY6WctiHsthP9MjPkC7l56F
uPC5RoqqrbLTBhugigdoepy03tLMHqTqax5ARYkDwiKTMp2jj+cmg8WuM7LnR9s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:30 2026 by rpki-client