
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f7702f0a-fe84-471d-b01f-17abe62bb7a7.roa
File: f7702f0a-fe84-471d-b01f-17abe62bb7a7.roa (raw, json)
Hash identifier: Wt4n+aAmgPA8Z2K8adRUn5Jyoq9wc1pyTKKUcfvpv8k=
Subject key identifier: FC:6D:EA:11:8D:B3:60:5A:ED:0C:3E:CF:9A:D4:89:46:32:B0:90:9E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 469FEA22101F155472834080CA42813BE4500CC1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f7702f0a-fe84-471d-b01f-17abe62bb7a7.roa
Signing time: Fri 13 Feb 2026 10:01:46 +0000
ROA not before: Fri 13 Feb 2026 10:01:46 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:38fa::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9f:ea:22:10:1f:15:54:72:83:40:80:ca:42:81:3b:e4:50:0c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 13 10:01:46 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=fd7e8d1be034947e3c0ff801ec569341da37fa3c2b4374fca451228aa33ac498, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:62:4a:f9:62:5d:b7:65:a1:e6:28:0e:aa:
db:0d:91:2b:96:53:da:63:14:14:50:50:ea:b6:e3:
5a:35:84:d9:db:fe:6c:9d:55:94:a7:cf:57:f4:fa:
83:ab:dc:31:fb:97:e7:75:f8:9c:a1:45:90:1d:cf:
d7:99:41:2f:b0:c7:1e:32:86:49:34:16:58:c3:5e:
2a:96:c0:a3:3f:50:38:a8:56:40:08:0a:88:5c:d5:
4e:c7:4e:2e:8f:59:9f:dc:4f:f9:d2:b8:d1:34:94:
4c:e6:0a:db:f4:b2:5b:96:8a:05:91:07:e4:05:31:
43:1d:96:89:29:03:51:bb:5d:f9:3b:cc:fd:17:f5:
f7:7b:9f:d1:7e:63:43:26:5a:17:f0:f6:70:21:fd:
bc:f5:37:69:e9:f8:8f:a5:0e:79:d2:20:34:f0:2d:
97:39:8f:3a:76:36:60:3c:1a:e5:88:a0:53:5b:8e:
bb:84:7c:ad:9f:7e:e3:80:75:90:43:91:94:a4:2d:
61:3d:84:32:0e:a7:d6:9b:76:a7:8f:82:2d:86:c0:
69:32:12:4d:01:fa:38:8c:a8:1d:22:30:75:3e:f4:
0f:ef:d6:0e:57:c6:af:67:03:b3:56:78:7f:53:81:
23:ea:9f:7b:92:5c:4a:e5:74:74:8c:1d:a6:4a:e0:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:EA:11:8D:B3:60:5A:ED:0C:3E:CF:9A:D4:89:46:32:B0:90:9E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f7702f0a-fe84-471d-b01f-17abe62bb7a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:38fa::/47
Signature Algorithm: sha256WithRSAEncryption
80:0c:d1:16:05:a4:33:eb:81:b9:6b:47:e8:6e:af:00:14:e0:
01:18:11:dc:0c:fc:38:5f:f6:0f:f1:e8:07:bb:8b:86:d9:26:
4d:51:b0:1b:56:ba:f0:5f:d3:bc:8c:41:ee:48:95:88:88:d8:
a6:47:f7:40:8a:34:7b:2b:e4:cb:13:2e:eb:b7:58:c2:75:07:
d5:d6:ad:7c:62:84:ae:28:7c:f7:d5:a5:ca:a5:4e:07:41:ef:
68:5c:9f:38:ca:76:86:30:eb:e7:eb:7c:67:f6:79:66:53:63:
34:80:2a:dd:56:a0:57:1e:ee:69:3e:d2:26:0f:95:ee:b5:63:
07:a1:7f:56:74:b9:d9:e2:36:6a:9b:01:5a:53:65:89:9b:5d:
c7:47:2b:df:d9:37:43:fe:f0:a9:30:4d:4d:59:f6:a8:e6:df:
57:fe:50:db:4c:a9:4a:53:78:bd:f3:6f:a6:12:35:0a:79:82:
58:cc:cc:df:fb:3d:ac:5f:b1:21:9b:ae:14:b3:8a:3f:41:05:
b4:91:39:6d:36:55:23:d9:28:80:61:90:f6:9b:4a:a2:e7:d5:
52:e9:14:48:13:7d:62:fd:69:f9:2e:de:f1:32:35:f6:d4:7c:
52:81:b9:9f:3e:92:0d:fe:d1:e2:12:f0:f2:1e:c9:a6:4b:78:
b4:9d:ed:bb
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURp/qIhAfFVRyg0CAykKBO+RQDMEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTAwMTQ2WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDdlOGQxYmUwMzQ5NDdlM2MwZmY4MDFlYzU2OTM0MWRh
MzdmYTNjMmI0Mzc0ZmNhNDUxMjI4YWEzM2FjNDk4MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrrmJK+WJdt2Wh5igOqtsNkSuWU9pjFBRQUOq241o1hNnb
/mydVZSnz1f0+oOr3DH7l+d1+JyhRZAdz9eZQS+wxx4yhkk0FljDXiqWwKM/UDio
VkAICohc1U7HTi6PWZ/cT/nSuNE0lEzmCtv0sluWigWRB+QFMUMdlokpA1G7Xfk7
zP0X9fd7n9F+Y0MmWhfw9nAh/bz1N2np+I+lDnnSIDTwLZc5jzp2NmA8GuWIoFNb
jruEfK2ffuOAdZBDkZSkLWE9hDIOp9abdqePgi2GwGkyEk0B+jiMqB0iMHU+9A/v
1g5Xxq9nA7NWeH9TgSPqn3uSXErldHSMHaZK4J/9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU/G3qEY2zYFrtDD7PmtSJRjKwkJ4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2Y3NzAyZjBhLWZlODQtNDcxZC1iMDFmLTE3YWJlNjJiYjdhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOPowDQYJKoZIhvcNAQELBQADggEBAIAM0RYFpDPrgblrR+hurwAU
4AEYEdwM/Dhf9g/x6Ae7i4bZJk1RsBtWuvBf07yMQe5IlYiI2KZH90CKNHsr5MsT
Luu3WMJ1B9XWrXxihK4ofPfVpcqlTgdB72hcnzjKdoYw6+frfGf2eWZTYzSAKt1W
oFce7mk+0iYPle61Ywehf1Z0udniNmqbAVpTZYmbXcdHK9/ZN0P+8KkwTU1Z9qjm
31f+UNtMqUpTeL3zb6YSNQp5gljMzN/7PaxfsSGbrhSzij9BBbSROW02VSPZKIBh
kPabSqLn1VLpFEgTfWL9afku3vEyNfbUfFKBuZ8+kg3+0eIS8PIeyaZLeLSd7bs=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:58 2026 by rpki-client