
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f29c2281-6e99-422b-9597-7cb2170734bc.roa
File: f29c2281-6e99-422b-9597-7cb2170734bc.roa (raw, json)
Hash identifier: ASMx/T886asslj/wm2wNvuNciGDeWpDYY+jMAjVy7hY=
Subject key identifier: 5A:85:12:BE:27:86:B9:9B:58:8B:9F:9B:99:34:71:2F:5A:DF:DD:56
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5239F24F44B02FADB85FB4BEAE21BA8B84E8028B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f29c2281-6e99-422b-9597-7cb2170734bc.roa
Signing time: Thu 12 Feb 2026 01:10:49 +0000
ROA not before: Thu 12 Feb 2026 01:10:49 +0000
ROA not after: Wed 13 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2886::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:39:f2:4f:44:b0:2f:ad:b8:5f:b4:be:ae:21:ba:8b:84:e8:02:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 12 01:10:49 2026 GMT
Not After : May 13 23:59:59 2026 GMT
Subject: serialNumber=0be52b4b6d4af1e52c011df3d8dd154b218df290e2eb335de8f2302c9da12860, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:e9:c5:21:83:f5:d5:c9:04:1a:92:0e:a3:
82:c2:01:36:b0:4a:7b:55:e6:32:22:1e:19:85:a3:
1b:bb:11:27:7f:f7:bf:cd:82:05:c1:fb:06:8c:bc:
12:10:33:5a:be:59:aa:7c:13:99:92:b7:71:bc:68:
c0:c3:a1:2e:f6:cc:84:a0:fd:cb:11:77:99:8b:c3:
9f:5d:a9:33:73:38:e4:dc:02:6c:6b:1f:47:7b:ca:
ab:e9:2d:d1:9e:09:e9:86:bd:fc:f0:fa:69:2d:40:
7e:89:73:23:45:ec:e6:b8:04:bd:d0:51:9c:dd:a9:
e6:09:ec:57:23:5e:9b:04:27:dd:7e:7a:ae:e5:5c:
ab:45:c2:6b:c0:01:be:99:60:48:67:1a:82:96:c7:
6e:4a:df:ee:7a:0f:3f:cd:1d:d0:a0:9a:1e:77:38:
91:86:1f:4b:bb:88:92:02:a9:52:9d:ba:b8:fe:13:
f2:13:2a:2e:3b:4c:7c:ac:a7:b5:59:94:de:a6:98:
40:12:96:ee:75:70:cb:e8:b9:0a:10:86:73:5a:2b:
30:f5:20:a0:92:ca:72:b8:c3:8d:77:e9:1d:1f:f5:
60:4b:8e:2f:bc:cc:c4:4b:aa:da:e3:7b:e5:8a:31:
2c:28:87:b4:5f:74:66:18:61:7c:73:c9:05:c1:c8:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:12:BE:27:86:B9:9B:58:8B:9F:9B:99:34:71:2F:5A:DF:DD:56
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f29c2281-6e99-422b-9597-7cb2170734bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2886::/48
Signature Algorithm: sha256WithRSAEncryption
83:8b:85:e8:0e:e2:0a:6c:fd:d7:99:57:7a:65:b9:3f:4f:e4:
92:ca:82:df:67:7b:3e:70:4d:1f:ba:43:43:d7:4f:92:0e:9d:
cb:75:0b:7d:99:57:ca:ae:82:29:fb:cd:5a:6f:2e:e2:f2:52:
6c:1e:4e:bc:66:ff:1c:77:b0:96:22:99:aa:ab:54:df:57:14:
a2:9e:57:3f:f1:ee:79:c1:eb:0b:6a:4b:e7:bb:a9:d1:c2:98:
78:2a:bc:f4:10:0f:3c:4a:1d:ad:27:37:90:8d:87:7c:38:85:
81:b8:d9:51:45:3e:e8:3c:8c:f7:05:c1:6a:56:8f:03:d7:ca:
0e:10:e2:20:86:fa:50:e6:c7:0c:8b:e1:7b:82:23:43:db:4d:
b3:c9:78:f6:f1:2e:7b:19:2b:ca:31:b6:4e:69:80:fa:fe:ff:
df:c6:8b:7e:c0:19:bc:a3:80:03:8e:40:06:52:e0:3b:60:1a:
11:af:fc:56:05:dd:04:46:2e:75:90:fa:cf:3b:49:8f:8f:a7:
19:bf:3b:35:f2:48:0d:a6:8f:3a:2f:3e:79:02:46:f1:dd:ce:
8a:02:dd:b0:f8:d5:42:e4:33:46:1c:75:cf:3d:00:34:bb:3e:
0d:d3:e6:d6:52:d6:aa:0d:78:a1:9c:03:22:9e:a9:72:1e:2c:
08:71:81:2f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUjnyT0SwL624X7S+riG6i4ToAoswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDExMDQ5WhcNMjYwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYmU1MmI0YjZkNGFmMWU1MmMwMTFkZjNkOGRkMTU0YjIx
OGRmMjkwZTJlYjMzNWRlOGYyMzAyYzlkYTEyODYwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBjunFIYP11ckEGpIOo4LCATawSntV5jIiHhmFoxu7ESd/
97/NggXB+waMvBIQM1q+Wap8E5mSt3G8aMDDoS72zISg/csRd5mLw59dqTNzOOTc
AmxrH0d7yqvpLdGeCemGvfzw+mktQH6JcyNF7Oa4BL3QUZzdqeYJ7FcjXpsEJ91+
eq7lXKtFwmvAAb6ZYEhnGoKWx25K3+56Dz/NHdCgmh53OJGGH0u7iJICqVKdurj+
E/ITKi47THysp7VZlN6mmEASlu51cMvouQoQhnNaKzD1IKCSynK4w4136R0f9WBL
ji+8zMRLqtrje+WKMSwoh7RfdGYYYXxzyQXByBZDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUWoUSvieGuZtYi5+bmTRxL1rf3VYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2YyOWMyMjgxLTZlOTktNDIyYi05NTk3LTdjYjIxNzA3MzRiYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAKIYwDQYJKoZIhvcNAQELBQADggEBAIOLhegO4gps/deZV3pluT9P
5JLKgt9nez5wTR+6Q0PXT5IOnct1C32ZV8qugin7zVpvLuLyUmweTrxm/xx3sJYi
maqrVN9XFKKeVz/x7nnB6wtqS+e7qdHCmHgqvPQQDzxKHa0nN5CNh3w4hYG42VFF
Pug8jPcFwWpWjwPXyg4Q4iCG+lDmxwyL4XuCI0PbTbPJePbxLnsZK8oxtk5pgPr+
/9/Gi37AGbyjgAOOQAZS4DtgGhGv/FYF3QRGLnWQ+s87SY+Ppxm/OzXySA2mjzov
PnkCRvHdzooC3bD41ULkM0Ycdc89ADS7Pg3T5tZS1qoNeKGcAyKeqXIeLAhxgS8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:02 2026 by rpki-client