
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddeb6f7c-8704-4c79-bce7-c5ae62be6015.roa
File: ddeb6f7c-8704-4c79-bce7-c5ae62be6015.roa (raw, json)
Hash identifier: Y7w3DymzY/7zYZ1cBpcqtuXeHMBP0BJZMSdugD/7qNE=
Subject key identifier: 5F:87:5D:6E:CF:6B:05:5E:C2:4D:56:5F:DA:A9:DC:B2:2A:66:71:A9
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 294325A98C4C3BC227D526CDFC64DCE546840EEC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddeb6f7c-8704-4c79-bce7-c5ae62be6015.roa
Signing time: Fri 13 Feb 2026 04:00:08 +0000
ROA not before: Fri 13 Feb 2026 04:00:08 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3b84::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:43:25:a9:8c:4c:3b:c2:27:d5:26:cd:fc:64:dc:e5:46:84:0e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 04:00:08 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=d9119c23078ca5fbe8d9d7f4b6563b721e0f4ab12e7a5e303836157b43cbf66a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:21:d8:fa:52:93:50:20:85:1f:a0:46:12:
53:a8:43:46:c6:2c:44:f4:0c:00:2c:8d:b5:40:b8:
a3:05:38:e1:c2:aa:02:3d:8f:55:bd:ea:ab:9c:73:
43:b1:02:ba:4b:1a:26:e9:2f:44:bc:45:b8:4c:ca:
44:de:e2:92:6f:7c:4c:79:fc:bc:bd:7a:bb:fd:a2:
42:6d:f5:5e:c5:f0:33:99:a2:bf:5e:0a:02:2a:20:
eb:1a:aa:f4:34:e3:f6:88:af:cb:f2:70:2d:eb:fc:
54:19:8d:97:06:98:42:45:6a:72:84:5e:9a:73:48:
bf:e7:2b:9f:43:19:2b:b5:06:09:cf:da:92:db:1d:
7c:8a:63:de:62:99:07:d0:58:04:70:f3:2d:11:5a:
82:80:9d:59:f5:46:8e:d9:d9:9a:8b:8e:09:1c:17:
a8:72:e6:db:c9:95:3e:c7:61:8d:19:7d:3b:40:91:
ec:b6:46:96:58:c9:57:a4:64:f1:d7:cf:38:1a:5d:
df:03:86:55:9e:cd:e9:9a:ff:d3:3c:25:1f:dc:3a:
e7:1d:c2:e6:2b:48:95:ce:0f:de:78:93:e7:1f:32:
53:41:95:46:db:6f:a7:6e:70:44:27:40:4a:5c:9b:
61:83:5f:df:80:86:e9:24:66:92:23:e5:c4:a0:19:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:87:5D:6E:CF:6B:05:5E:C2:4D:56:5F:DA:A9:DC:B2:2A:66:71:A9
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddeb6f7c-8704-4c79-bce7-c5ae62be6015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3b84::/46
Signature Algorithm: sha256WithRSAEncryption
84:a4:7d:0b:a4:e9:ab:4a:88:21:e3:83:cf:4e:ff:ac:95:0e:
26:a5:26:4c:44:93:79:e7:21:f2:01:fe:11:f6:dc:b4:a7:af:
b0:a3:45:54:60:ca:dc:f7:c1:c5:46:5e:f5:4a:6a:0c:b2:8f:
87:65:21:f5:55:a8:fd:83:b0:87:29:eb:e8:3b:17:1c:9a:c7:
e7:c7:e2:0a:9e:bb:d0:de:2b:93:b8:54:de:a9:51:5e:1e:bb:
af:09:c4:d7:2e:9c:c5:22:e9:50:c2:c8:83:77:39:f5:24:68:
07:6a:d0:ca:fb:18:1b:79:41:b0:c7:8d:85:a7:60:f8:cd:7e:
82:c0:ac:ac:3a:c4:07:44:f7:44:66:55:c8:9f:ad:8a:b9:93:
04:b6:d6:8d:1f:c7:b2:c4:7a:f7:ba:3e:ad:fd:6c:76:71:fd:
33:34:e4:d1:3b:2a:62:b2:42:27:a4:96:f0:dd:aa:68:1e:05:
86:d1:85:62:0a:6e:14:7d:b6:d1:34:49:03:38:8f:8e:0e:ec:
96:36:0c:3d:4d:32:b0:9a:2e:5b:6a:2b:99:d0:76:8c:a5:0f:
ae:2b:21:95:76:db:f6:23:d2:3d:d7:a2:ac:cb:e7:ac:9d:f0:
c8:c7:08:d8:2f:06:9a:b9:cb:f6:91:88:2c:90:8e:fc:fe:50:
9a:64:a2:03
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKUMlqYxMO8In1SbN/GTc5UaEDuwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDQwMDA4WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTExOWMyMzA3OGNhNWZiZThkOWQ3ZjRiNjU2M2I3MjFl
MGY0YWIxMmU3YTVlMzAzODM2MTU3YjQzY2JmNjZhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClZSHY+lKTUCCFH6BGElOoQ0bGLET0DAAsjbVAuKMFOOHC
qgI9j1W96qucc0OxArpLGibpL0S8RbhMykTe4pJvfEx5/Ly9erv9okJt9V7F8DOZ
or9eCgIqIOsaqvQ04/aIr8vycC3r/FQZjZcGmEJFanKEXppzSL/nK59DGSu1BgnP
2pLbHXyKY95imQfQWARw8y0RWoKAnVn1Ro7Z2ZqLjgkcF6hy5tvJlT7HYY0ZfTtA
key2RpZYyVekZPHXzzgaXd8DhlWezema/9M8JR/cOucdwuYrSJXOD954k+cfMlNB
lUbbb6ducEQnQEpcm2GDX9+AhukkZpIj5cSgGeKNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUX4ddbs9rBV7CTVZf2qncsipmcakwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2RkZWI2ZjdjLTg3MDQtNGM3OS1iY2U3LWM1YWU2MmJlNjAxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAO4QwDQYJKoZIhvcNAQELBQADggEBAISkfQuk6atKiCHjg89O/6yV
DialJkxEk3nnIfIB/hH23LSnr7CjRVRgytz3wcVGXvVKagyyj4dlIfVVqP2DsIcp
6+g7Fxyax+fH4gqeu9DeK5O4VN6pUV4eu68JxNcunMUi6VDCyIN3OfUkaAdq0Mr7
GBt5QbDHjYWnYPjNfoLArKw6xAdE90RmVcifrYq5kwS21o0fx7LEeve6Pq39bHZx
/TM05NE7KmKyQieklvDdqmgeBYbRhWIKbhR9ttE0SQM4j44O7JY2DD1NMrCaLltq
K5nQdoylD64rIZV22/Yj0j3XoqzL56yd8MjHCNgvBpq5y/aRiCyQjvz+UJpkogM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:25 2026 by rpki-client