
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d7acae61-d193-43e7-bcf6-63157032c42b.roa
File: d7acae61-d193-43e7-bcf6-63157032c42b.roa (raw, json)
Hash identifier: CMv/1JgfOs1soGWtgTNl3HALucy1qxzTXCOekQoibPY=
Subject key identifier: 0F:CD:CE:14:B6:44:EC:3E:38:13:9B:C7:92:CD:41:BD:99:37:B0:85
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1EFAF3D0F331CE6A32CAFE70BA55037025EF3CA0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d7acae61-d193-43e7-bcf6-63157032c42b.roa
Signing time: Fri 13 Feb 2026 09:20:53 +0000
ROA not before: Fri 13 Feb 2026 09:20:53 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:36a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fa:f3:d0:f3:31:ce:6a:32:ca:fe:70:ba:55:03:70:25:ef:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 09:20:53 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=e5b7e83197e093c023fcdf8790e86668d88b79570cd5e91f8d1b8bda31e94b93, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:a0:d5:9f:7a:7b:9d:06:78:e3:25:70:3b:
d1:ec:95:33:9f:49:bb:1a:d3:be:7b:16:2a:12:3b:
96:9c:29:58:94:b4:47:e9:74:82:59:fc:4c:20:18:
9b:8e:a5:c3:2b:b9:6e:4b:64:5e:4d:4e:1d:2a:25:
ca:78:89:13:12:cd:37:7d:91:84:ca:a0:2e:78:62:
9b:19:13:17:e9:e4:d6:c1:b5:09:39:dc:c6:30:2f:
de:fd:19:09:78:51:77:17:71:c3:69:be:df:b6:d6:
f9:43:18:0d:52:cc:48:8e:ef:2d:0f:27:ef:77:c8:
c3:50:be:29:b5:c5:8d:79:64:6c:11:b7:2a:be:fd:
5f:48:50:9b:4e:8d:b9:e1:e3:4b:22:e8:d0:5c:7f:
97:70:b7:dd:85:49:7b:08:7d:18:a9:ad:9d:0c:2f:
9e:59:b9:24:f2:87:1f:09:b0:57:ba:d4:8e:cd:af:
30:1b:f7:70:1a:cd:d6:ab:ba:63:1c:0c:35:47:14:
80:95:d2:02:fc:4b:85:e3:ce:e6:61:90:1b:b9:61:
6f:7e:05:5d:dc:0d:df:82:67:5a:69:81:39:5c:09:
bc:87:7a:ee:b2:d7:c7:49:64:ea:0d:6b:6b:5b:08:
cd:b1:27:e5:1c:96:fc:dd:9d:e8:fd:2a:0b:ca:55:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:CE:14:B6:44:EC:3E:38:13:9B:C7:92:CD:41:BD:99:37:B0:85
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d7acae61-d193-43e7-bcf6-63157032c42b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:36a0::/44
Signature Algorithm: sha256WithRSAEncryption
b2:d7:5c:90:0e:ea:97:fe:61:91:bf:cc:6f:26:db:92:9a:a7:
7c:27:87:e1:07:ee:a0:0f:a6:49:f1:c1:7e:68:a8:d8:7f:ea:
a5:0c:50:36:7b:db:59:1d:d6:fd:95:b5:c0:91:25:6d:08:7c:
59:64:7c:e5:95:e2:35:53:52:ad:e2:05:2f:a8:5e:d0:61:55:
0c:52:83:cc:4f:98:d9:a5:90:1c:2a:b8:b2:23:26:3c:31:ff:
74:d1:98:33:8b:cc:f4:4b:c3:bc:a7:51:b9:d8:90:49:1f:05:
b6:ea:43:c2:c9:06:70:6c:d8:57:04:0e:5c:21:90:45:b4:59:
91:f9:04:40:07:b7:78:46:8d:fe:fd:28:0f:9f:5e:f4:de:b3:
ed:43:56:ae:a6:6f:ee:c2:d8:84:9a:65:95:54:71:70:a0:72:
21:97:ad:75:a1:1b:1a:77:f7:fd:d1:ef:7d:d4:bc:85:85:65:
0a:df:e4:c7:d5:b8:57:6e:ae:d2:55:39:89:50:61:69:18:0f:
55:c8:d3:d1:25:ef:74:d3:df:4c:e2:5a:8a:82:51:64:95:bb:
ab:14:c9:8b:6c:91:eb:d4:bd:14:7f:63:fd:a1:b0:ba:c2:fd:
f0:fd:26:25:e4:84:fe:12:71:66:8d:04:93:26:ff:0a:99:72:
a0:bd:d7:7d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHvrz0PMxzmoyyv5wulUDcCXvPKAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDkyMDUzWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNWI3ZTgzMTk3ZTA5M2MwMjNmY2RmODc5MGU4NjY2OGQ4
OGI3OTU3MGNkNWU5MWY4ZDFiOGJkYTMxZTk0YjkzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEeaDVn3p7nQZ44yVwO9HslTOfSbsa0757FioSO5acKViU
tEfpdIJZ/EwgGJuOpcMruW5LZF5NTh0qJcp4iRMSzTd9kYTKoC54YpsZExfp5NbB
tQk53MYwL979GQl4UXcXccNpvt+21vlDGA1SzEiO7y0PJ+93yMNQvim1xY15ZGwR
tyq+/V9IUJtOjbnh40si6NBcf5dwt92FSXsIfRiprZ0ML55ZuSTyhx8JsFe61I7N
rzAb93AazdarumMcDDVHFICV0gL8S4XjzuZhkBu5YW9+BV3cDd+CZ1ppgTlcCbyH
eu6y18dJZOoNa2tbCM2xJ+Uclvzdnej9KgvKVRcRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUD83OFLZE7D44E5vHks1BvZk3sIUwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Q3YWNhZTYxLWQxOTMtNDNlNy1iY2Y2LTYzMTU3MDMyYzQyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAJAANqAwDQYJKoZIhvcNAQELBQADggEBALLXXJAO6pf+YZG/zG8m25Ka
p3wnh+EH7qAPpknxwX5oqNh/6qUMUDZ721kd1v2VtcCRJW0IfFlkfOWV4jVTUq3i
BS+oXtBhVQxSg8xPmNmlkBwquLIjJjwx/3TRmDOLzPRLw7ynUbnYkEkfBbbqQ8LJ
BnBs2FcEDlwhkEW0WZH5BEAHt3hGjf79KA+fXvTes+1DVq6mb+7C2ISaZZVUcXCg
ciGXrXWhGxp39/3R733UvIWFZQrf5MfVuFdurtJVOYlQYWkYD1XI09El73TT30zi
WoqCUWSVu6sUyYtskevUvRR/Y/2hsLrC/fD9JiXkhP4ScWaNBJMm/wqZcqC9130=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:14 2026 by rpki-client