
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28d60310-4c85-43db-859e-eea82c334ee6.roa
File: 28d60310-4c85-43db-859e-eea82c334ee6.roa (raw, json)
Hash identifier: iiQJHuUF0IABYNopyYCQUq/t3rOgu8SwrecGN6E4YY4=
Subject key identifier: 30:02:88:CB:BD:C2:46:E4:49:E3:CC:01:1A:DB:2C:C5:ED:FD:6F:EA
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 68155695C2C1F288AC8169C2D1E7126C801B6728
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28d60310-4c85-43db-859e-eea82c334ee6.roa
Signing time: Wed 22 Jul 2026 01:21:12 +0000
ROA not before: Wed 22 Jul 2026 01:21:12 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2aae::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:15:56:95:c2:c1:f2:88:ac:81:69:c2:d1:e7:12:6c:80:1b:67:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 01:21:12 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=bc3851048f527d11881e1b53203bedabda23ea4fd7365a083bab0b7133b0f0ca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:40:ee:dc:a3:77:aa:b9:cf:83:b3:27:d8:
22:ab:3b:cf:16:15:e3:48:84:44:f1:bc:06:02:76:
97:60:1d:95:bb:bf:7d:00:1a:2c:de:ea:cb:cc:d1:
7c:20:76:cb:b8:72:66:8c:7b:95:c9:28:fc:13:94:
d0:29:88:29:4c:31:e4:94:19:2d:33:b2:5b:7f:a3:
c8:6a:3b:07:2a:93:ba:68:87:eb:6b:50:db:ab:8e:
a6:6d:e5:98:56:d0:25:4c:38:b2:08:47:2e:76:ce:
48:f3:78:e6:1e:dd:59:3f:95:13:ee:ad:40:4a:26:
23:4f:a6:b8:d4:60:91:f3:fb:5e:92:12:45:8d:09:
72:f7:d8:42:14:29:62:2f:8c:f0:b8:34:5c:36:eb:
02:18:81:42:7d:9b:88:58:fd:89:06:2e:a7:d4:50:
68:50:0a:ba:df:af:da:09:a8:16:91:23:13:a3:fa:
0d:0b:17:d5:a7:95:c5:37:88:f3:28:69:6d:ba:a8:
0a:5e:a8:eb:95:6c:7c:54:22:3b:28:19:0e:eb:56:
e3:f3:25:60:c0:11:d5:79:36:76:a4:75:4d:48:72:
3e:42:ac:6a:f6:16:b0:c0:9d:0d:98:44:b7:8f:c9:
42:8b:e7:27:aa:0c:fb:c9:73:6d:3a:93:bd:0f:e9:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:02:88:CB:BD:C2:46:E4:49:E3:CC:01:1A:DB:2C:C5:ED:FD:6F:EA
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28d60310-4c85-43db-859e-eea82c334ee6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2aae::/47
Signature Algorithm: sha256WithRSAEncryption
9c:d2:29:30:4e:d5:6b:d8:01:78:3e:dd:eb:dd:53:5d:72:31:
e7:61:a7:dc:0f:d0:8d:36:9f:1d:9a:88:a7:24:6d:4b:6c:90:
a2:5e:8a:56:fd:2c:17:7a:44:38:1b:2f:ea:1c:15:bb:07:64:
76:ec:0e:b2:b3:c9:8e:00:4c:de:f5:8d:03:b1:06:ea:f4:ce:
56:0c:7f:2d:5f:84:06:37:db:4c:a9:fc:29:51:da:be:cf:3b:
f0:c3:1b:d7:02:70:45:d3:6a:8b:2c:af:72:0d:4c:71:c8:20:
22:6a:5b:5f:1d:d0:dd:5b:86:58:a5:77:ba:80:3a:a0:ed:22:
9b:c7:15:78:40:d0:2f:8e:6c:f8:80:e6:fe:e1:23:ca:c2:1e:
e4:56:fe:b5:43:43:4a:fd:03:e0:a2:96:e1:34:93:85:06:cb:
9b:48:64:14:7d:7e:72:7e:c5:b6:7c:67:10:3b:e8:b5:e8:69:
b6:a0:95:50:f2:92:c0:3b:f9:d0:34:9c:59:fb:f9:9e:4b:83:
22:01:d5:24:ab:53:eb:9b:01:07:21:a3:3c:08:a0:e4:27:b3:
ab:4e:e5:37:66:9e:92:8d:cd:86:29:a8:91:5a:2c:10:f7:24:
c0:82:3c:c4:9b:e7:c1:d8:f1:01:78:de:99:cb:f0:cb:74:f0:
67:f6:d4:b5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUaBVWlcLB8oisgWnC0ecSbIAbZygwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDEyMTEyWhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYzM4NTEwNDhmNTI3ZDExODgxZTFiNTMyMDNiZWRhYmRh
MjNlYTRmZDczNjVhMDgzYmFiMGI3MTMzYjBmMGNhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcR0Du3KN3qrnPg7Mn2CKrO88WFeNIhETxvAYCdpdgHZW7
v30AGize6svM0Xwgdsu4cmaMe5XJKPwTlNApiClMMeSUGS0zslt/o8hqOwcqk7po
h+trUNurjqZt5ZhW0CVMOLIIRy52zkjzeOYe3Vk/lRPurUBKJiNPprjUYJHz+16S
EkWNCXL32EIUKWIvjPC4NFw26wIYgUJ9m4hY/YkGLqfUUGhQCrrfr9oJqBaRIxOj
+g0LF9WnlcU3iPMoaW26qApeqOuVbHxUIjsoGQ7rVuPzJWDAEdV5NnakdU1Icj5C
rGr2FrDAnQ2YRLePyUKL5yeqDPvJc206k70P6eg9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUMAKIy73CRuRJ48wBGtssxe39b+owHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzI4ZDYwMzEwLTRjODUtNDNkYi04NTllLWVlYTgyYzMzNGVlNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKq4wDQYJKoZIhvcNAQELBQADggEBAJzSKTBO1WvYAXg+3evdU11y
Medhp9wP0I02nx2aiKckbUtskKJeilb9LBd6RDgbL+ocFbsHZHbsDrKzyY4ATN71
jQOxBur0zlYMfy1fhAY320yp/ClR2r7PO/DDG9cCcEXTaossr3INTHHIICJqW18d
0N1bhlild7qAOqDtIpvHFXhA0C+ObPiA5v7hI8rCHuRW/rVDQ0r9A+CiluE0k4UG
y5tIZBR9fnJ+xbZ8ZxA76LXoabaglVDyksA7+dA0nFn7+Z5LgyIB1SSrU+ubAQch
ozwIoOQns6tO5TdmnpKNzYYpqJFaLBD3JMCCPMSb58HY8QF43pnL8Mt08Gf21LU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:02 2026 by rpki-client