
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c026c791-4a4f-425d-8f53-a71313a87333.roa
File: c026c791-4a4f-425d-8f53-a71313a87333.roa (raw, json)
Hash identifier: p/6vfopncWxhQvOLQCk2b9zS5Q4N7szVyBlWHCLDnOA=
Subject key identifier: 3F:EA:F8:7F:C2:2A:DE:C7:DD:CB:FC:48:3D:F2:F8:6E:70:B5:B3:F7
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 16724DE5B053BF2C28E4DCAA5CF134C83E64AAA2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c026c791-4a4f-425d-8f53-a71313a87333.roa
Signing time: Fri 31 Oct 2025 02:27:08 +0000
ROA not before: Fri 31 Oct 2025 02:27:08 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:144c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:72:4d:e5:b0:53:bf:2c:28:e4:dc:aa:5c:f1:34:c8:3e:64:aa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Oct 31 02:27:08 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4bfd3e06fc19ce30683162567725b437e7fcb5db55f667a466fbf40c9b9bdd36, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:df:0b:44:8c:19:8a:79:bc:28:67:bc:75:
84:69:d8:7b:45:61:99:37:05:26:26:a4:79:ee:09:
f8:dd:9c:9e:75:08:7b:65:3e:a8:86:6d:46:0a:d5:
2f:a1:c1:31:8f:ff:b5:24:05:31:89:1d:80:d0:88:
2c:e6:53:87:47:05:99:4e:d5:fb:0e:2d:10:7d:70:
47:d8:da:25:06:de:b7:da:d9:5f:09:fa:47:60:59:
57:20:44:5f:9e:d6:a3:8c:21:34:32:66:87:06:91:
33:f4:84:0e:bb:e4:17:ea:3f:ef:6f:8a:3c:fe:73:
96:8d:33:54:f3:af:4f:70:cf:60:2b:72:3a:0f:35:
3e:a9:4f:47:a3:4e:d6:83:9a:fb:e5:3b:2e:03:01:
83:4e:5f:52:8b:60:31:9d:0c:9e:b6:f8:98:11:ff:
d4:f2:3c:40:55:ba:06:1a:fd:46:2e:ec:8f:0e:62:
c1:7e:5c:d4:4a:f8:e1:c0:d9:3c:03:05:32:dc:b9:
7b:74:f1:7f:82:32:08:8e:7a:74:6e:00:c3:c5:8a:
1a:2f:6e:1b:d9:bd:96:6e:66:79:8c:2d:02:87:f5:
f1:2c:a3:77:ae:5f:e0:52:88:2c:49:0f:f6:ca:01:
1a:6f:37:5a:cd:9c:25:32:5d:4c:c2:13:56:56:ff:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:F8:7F:C2:2A:DE:C7:DD:CB:FC:48:3D:F2:F8:6E:70:B5:B3:F7
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c026c791-4a4f-425d-8f53-a71313a87333.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:144c::/46
Signature Algorithm: sha256WithRSAEncryption
ae:72:52:28:a0:38:29:58:56:c2:88:9e:d3:b3:d5:fd:83:3b:
37:1f:77:0d:b6:0c:10:48:1b:62:2f:14:29:4f:54:33:dd:5e:
80:b6:46:01:f1:3e:06:20:c1:02:c0:17:bf:ec:7d:04:30:0c:
c9:b6:70:54:d2:5b:4f:e5:1d:cc:97:b2:cc:aa:5c:05:86:a4:
44:e4:20:3e:d1:6b:78:7e:a0:cb:f6:37:9f:82:e3:03:57:e9:
8b:6c:67:83:74:35:cf:f4:cc:9d:f6:1b:36:b7:ad:3a:e5:f4:
e4:0e:3b:d4:f3:4e:8e:8e:32:b2:54:0b:d3:32:4d:ae:4a:7b:
2e:4d:e4:cc:6e:34:49:e9:1d:68:06:16:eb:93:9f:14:09:a6:
ea:d5:65:89:9a:84:69:d5:71:76:15:43:fc:2b:93:e9:16:0d:
bc:ef:8c:a3:80:56:6d:6e:02:ca:fb:61:9d:c3:cd:05:e5:e9:
c6:3c:c0:e3:aa:27:5e:a5:20:3b:85:26:65:3d:ed:71:4f:f1:
62:33:53:f6:ea:d6:08:68:c4:30:19:73:7e:7b:67:b4:3d:82:
65:94:d0:e2:42:b9:60:cd:16:e3:6f:e4:0b:28:e0:b0:e3:c5:
09:18:3a:5c:73:3e:ad:62:6f:2e:f0:21:ad:b6:2e:2a:54:79:
26:58:63:ca
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFnJN5bBTvywo5NyqXPE0yD5kqqIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDIyNzA4WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YmZkM2UwNmZjMTljZTMwNjgzMTYyNTY3NzI1YjQzN2U3
ZmNiNWRiNTVmNjY3YTQ2NmZiZjQwYzliOWJkZDM2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgJd8LRIwZinm8KGe8dYRp2HtFYZk3BSYmpHnuCfjdnJ51
CHtlPqiGbUYK1S+hwTGP/7UkBTGJHYDQiCzmU4dHBZlO1fsOLRB9cEfY2iUG3rfa
2V8J+kdgWVcgRF+e1qOMITQyZocGkTP0hA675BfqP+9vijz+c5aNM1Tzr09wz2Ar
cjoPNT6pT0ejTtaDmvvlOy4DAYNOX1KLYDGdDJ62+JgR/9TyPEBVugYa/UYu7I8O
YsF+XNRK+OHA2TwDBTLcuXt08X+CMgiOenRuAMPFihovbhvZvZZuZnmMLQKH9fEs
o3euX+BSiCxJD/bKARpvN1rNnCUyXUzCE1ZW/zQnAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUP+r4f8Iq3sfdy/xIPfL4bnC1s/cwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2MwMjZjNzkxLTRhNGYtNDI1ZC04ZjUzLWE3MTMxM2E4NzMzMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAFEwwDQYJKoZIhvcNAQELBQADggEBAK5yUiigOClYVsKIntOz1f2D
Ozcfdw22DBBIG2IvFClPVDPdXoC2RgHxPgYgwQLAF7/sfQQwDMm2cFTSW0/lHcyX
ssyqXAWGpETkID7Ra3h+oMv2N5+C4wNX6YtsZ4N0Nc/0zJ32Gza3rTrl9OQOO9Tz
To6OMrJUC9MyTa5Key5N5MxuNEnpHWgGFuuTnxQJpurVZYmahGnVcXYVQ/wrk+kW
DbzvjKOAVm1uAsr7YZ3DzQXl6cY8wOOqJ16lIDuFJmU97XFP8WIzU/bq1ghoxDAZ
c357Z7Q9gmWU0OJCuWDNFuNv5Aso4LDjxQkYOlxzPq1iby7wIa22LipUeSZYY8o=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:54:23 2025 by rpki-client