
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09f99beb-a1cb-4cc8-a64d-ec391146d13f.roa
File: 09f99beb-a1cb-4cc8-a64d-ec391146d13f.roa (raw, json)
Hash identifier: 5S9nasrMKYnRrbufdWu2xGkgEfVz2m/PKZ7EOAHz53g=
Subject key identifier: 43:18:69:62:36:AB:1C:EC:AC:2A:B6:52:9D:3E:60:68:7C:DC:3E:A1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 3D8EC2A10817D3389C7FAE3F572BEC28C875027B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09f99beb-a1cb-4cc8-a64d-ec391146d13f.roa
Signing time: Thu 23 Jul 2026 02:10:09 +0000
ROA not before: Thu 23 Jul 2026 02:10:09 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ee0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8e:c2:a1:08:17:d3:38:9c:7f:ae:3f:57:2b:ec:28:c8:75:02:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 02:10:09 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=c62b0649f2271b9390ca76bb768d8dc35bfbf743ad54c259db68f8ace7db6521, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:e4:d8:c0:67:70:ae:88:d2:03:12:98:4a:
27:7e:9c:0a:7f:fe:9e:71:7f:23:5c:d1:ef:a4:62:
aa:9e:11:40:72:58:24:f8:fa:c7:d3:13:41:70:e4:
b2:e6:e7:6f:1f:61:58:1d:18:1f:2f:85:9d:d7:b8:
1c:9b:20:c0:38:0f:ab:c3:7d:5f:3a:ee:17:6c:08:
83:92:72:dd:e9:50:ef:f6:10:e2:dd:f1:fb:27:9d:
64:2b:63:7b:16:64:0e:16:c7:19:fb:33:a1:f0:29:
b0:0d:0f:4d:df:fa:5e:8a:be:e4:26:12:93:6e:75:
08:cd:af:18:8a:df:26:db:5e:71:c6:40:2d:4d:f0:
5e:bc:d3:80:cf:59:68:ac:9c:a6:3d:65:28:3f:79:
72:86:9e:3b:fe:ec:cf:f0:6c:ab:f0:0f:26:c2:0e:
4e:cd:31:bb:21:b6:71:0a:93:ce:8b:39:9e:b9:19:
f9:fa:b4:24:d6:ce:a7:2d:8c:61:4b:0c:22:87:d8:
8c:a3:57:23:37:1e:56:49:80:ce:1f:90:de:40:26:
32:21:b4:b9:b9:18:6a:50:74:4d:6f:2c:1a:dd:02:
ac:f4:1a:dd:f2:3b:69:dd:ec:90:ce:cd:37:f2:26:
e6:99:75:b9:5d:f5:4e:14:08:07:85:61:eb:8e:0e:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:69:62:36:AB:1C:EC:AC:2A:B6:52:9D:3E:60:68:7C:DC:3E:A1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09f99beb-a1cb-4cc8-a64d-ec391146d13f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ee0::/45
Signature Algorithm: sha256WithRSAEncryption
70:07:3e:9e:cf:96:db:4c:e9:cd:39:c5:bc:95:e2:20:d6:94:
08:3e:55:8d:6b:f3:9e:66:f3:12:bd:94:79:e1:d0:3a:a0:16:
4e:4a:62:ab:fe:9a:ad:fb:cd:51:b5:b4:3a:f7:43:bd:36:07:
17:05:1c:eb:e2:6b:aa:ea:58:bf:51:a3:a1:e0:33:d5:52:2f:
11:ba:4c:2f:38:cd:74:0c:3a:d7:12:00:80:ab:de:7d:45:b5:
8d:04:a8:de:0b:b5:7c:d9:63:72:c7:96:e8:b8:7e:9d:6d:d4:
b7:35:17:ea:99:bd:03:18:bb:b2:6a:2f:02:17:b9:97:0c:26:
10:0d:82:79:1c:66:86:d9:ec:d4:ad:d3:1d:90:0a:0f:16:7a:
4e:7f:b5:c5:5e:35:95:6e:04:06:62:0e:e7:ca:96:7f:46:9a:
79:c1:5c:60:d6:59:fd:72:33:0a:cb:66:c1:23:fc:c9:97:48:
f9:e4:38:cc:3e:0b:44:50:1b:55:be:6c:c6:54:97:4b:61:ac:
a6:f7:62:2c:6d:28:42:b6:62:74:e8:77:2b:22:f9:2d:7b:2b:
10:14:e2:b5:89:9b:fe:6d:b7:65:da:7b:d9:da:b5:2d:1d:4e:
59:6a:3b:e3:ea:47:e1:a5:8c:08:3a:82:4b:62:e8:b1:82:b5:
76:f5:45:e1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPY7CoQgX0zicf64/VyvsKMh1AnswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDIxMDA5WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNjJiMDY0OWYyMjcxYjkzOTBjYTc2YmI3NjhkOGRjMzVi
ZmJmNzQzYWQ1NGMyNTlkYjY4ZjhhY2U3ZGI2NTIxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDe9uTYwGdwrojSAxKYSid+nAp//p5xfyNc0e+kYqqeEUBy
WCT4+sfTE0Fw5LLm528fYVgdGB8vhZ3XuBybIMA4D6vDfV867hdsCIOSct3pUO/2
EOLd8fsnnWQrY3sWZA4Wxxn7M6HwKbAND03f+l6KvuQmEpNudQjNrxiK3ybbXnHG
QC1N8F6804DPWWisnKY9ZSg/eXKGnjv+7M/wbKvwDybCDk7NMbshtnEKk86LOZ65
Gfn6tCTWzqctjGFLDCKH2IyjVyM3HlZJgM4fkN5AJjIhtLm5GGpQdE1vLBrdAqz0
Gt3yO2nd7JDOzTfyJuaZdbld9U4UCAeFYeuODnkpAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUQxhpYjarHOysKrZSnT5gaHzcPqEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzA5Zjk5YmViLWExY2ItNGNjOC1hNjRkLWVjMzkxMTQ2ZDEzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAALuAwDQYJKoZIhvcNAQELBQADggEBAHAHPp7PlttM6c05xbyV4iDW
lAg+VY1r855m8xK9lHnh0DqgFk5KYqv+mq37zVG1tDr3Q702BxcFHOvia6rqWL9R
o6HgM9VSLxG6TC84zXQMOtcSAICr3n1FtY0EqN4LtXzZY3LHlui4fp1t1Lc1F+qZ
vQMYu7JqLwIXuZcMJhANgnkcZobZ7NSt0x2QCg8Wek5/tcVeNZVuBAZiDufKln9G
mnnBXGDWWf1yMwrLZsEj/MmXSPnkOMw+C0RQG1W+bMZUl0thrKb3YixtKEK2YnTo
dysi+S17KxAU4rWJm/5tt2Xae9natS0dTllqO+PqR+GljAg6gkti6LGCtXb1ReE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:45 2026 by rpki-client