
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cfea97c-4f0b-4873-b298-cc83e1092e96.roa
File: 2cfea97c-4f0b-4873-b298-cc83e1092e96.roa (raw, json)
Hash identifier: 9T+dniILaJns70CjH/eDaoZBZUWC9ENMu2Qyju9N0WQ=
Subject key identifier: 80:D6:A8:39:71:9B:7B:A1:72:5A:F9:48:C0:7A:6A:24:ED:DA:89:2D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 06EB87605AF1768EADD7DB75D77855CB11D2D5BB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cfea97c-4f0b-4873-b298-cc83e1092e96.roa
Signing time: Mon 04 May 2026 06:50:43 +0000
ROA not before: Mon 04 May 2026 06:50:43 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:32bc::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:eb:87:60:5a:f1:76:8e:ad:d7:db:75:d7:78:55:cb:11:d2:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 06:50:43 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=bb8a0fea7d5600146bfa8eda69e44e61cf40ce7a76a3ab838fe259b2c92e39da, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:28:0d:9e:45:a7:35:a9:7f:8c:65:92:25:
83:c7:a0:81:00:f1:99:c8:64:a9:7f:3f:4c:90:39:
99:b2:e1:05:45:b4:c1:96:25:2d:29:86:c2:1f:f9:
20:e6:40:18:4a:90:9e:2c:39:12:40:c0:73:53:42:
be:5a:63:3a:10:07:ae:4f:73:62:17:db:4c:a6:09:
ad:e8:61:60:86:36:42:48:a2:4b:f3:52:39:bd:c9:
e0:13:55:b2:00:ee:f4:8c:4c:bd:7b:d0:93:be:5b:
a0:f2:31:60:92:a8:87:7c:d1:8c:41:cb:6f:81:b0:
14:7f:8d:87:7c:f1:dd:55:b0:1f:63:84:d9:05:dd:
a8:e4:b4:b2:22:44:af:60:28:55:12:d3:32:7a:25:
3a:a0:4d:0d:73:06:c6:eb:0f:02:10:b4:7f:9a:90:
87:73:ac:cb:54:44:f9:53:68:bf:1d:08:e6:7f:30:
03:a9:2a:e7:0c:f6:1d:8d:7f:36:4e:df:bb:93:ae:
e7:47:da:00:97:0e:f5:a4:d3:9e:3a:8f:74:1b:88:
d1:1c:05:d4:b1:3d:61:1e:25:ed:4a:40:b9:b6:11:
67:3d:a7:05:69:ca:02:8d:71:ca:8e:9b:82:92:35:
7e:c4:99:85:b8:f8:9c:be:eb:40:74:46:3f:ec:31:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D6:A8:39:71:9B:7B:A1:72:5A:F9:48:C0:7A:6A:24:ED:DA:89:2D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cfea97c-4f0b-4873-b298-cc83e1092e96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:32bc::/46
Signature Algorithm: sha256WithRSAEncryption
55:8a:46:5a:b3:e3:a9:18:4f:8d:ab:36:54:a9:a7:93:c5:26:
2f:cc:85:e3:7b:a9:65:18:64:65:05:fb:cc:59:e4:89:48:cd:
92:3a:67:13:21:40:b7:66:7a:42:04:22:fb:7a:e1:bf:77:ed:
2b:3d:9f:47:c9:88:f4:e0:22:8e:5c:2e:11:75:70:0c:f3:73:
09:26:05:a3:c1:c8:3c:39:c5:b1:da:dd:be:f9:c8:31:91:5a:
3b:da:71:25:f7:01:08:48:ed:bb:7e:49:07:8a:a3:b5:1f:c3:
53:92:5b:52:c2:49:5c:3c:59:22:b8:95:66:9e:22:74:64:b9:
42:12:48:a9:9d:4b:8f:b5:55:28:9d:b3:c2:27:fd:72:ad:04:
c7:48:72:ea:f9:3e:3b:ca:5f:47:13:1b:fd:4f:8b:92:39:72:
be:7f:31:fa:59:7f:fb:aa:9f:08:a4:6d:e0:e2:1e:8c:cc:88:
cc:57:59:f0:2d:13:e2:3c:d9:0b:b8:5f:62:0f:02:75:fd:b3:
c0:04:d5:c3:a9:fb:27:de:ea:f7:46:45:d0:36:54:3e:07:61:
b1:59:d8:49:f3:2f:80:c6:95:8d:c4:e2:7e:a0:b4:05:31:f2:
fa:b9:ef:8e:0a:72:65:c3:fe:2a:0c:ff:a3:43:e8:57:32:02:
11:86:bf:9d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBuuHYFrxdo6t19t113hVyxHS1bswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDY1MDQzWhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYjhhMGZlYTdkNTYwMDE0NmJmYThlZGE2OWU0NGU2MWNm
NDBjZTdhNzZhM2FiODM4ZmUyNTliMmM5MmUzOWRhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCbygNnkWnNal/jGWSJYPHoIEA8ZnIZKl/P0yQOZmy4QVF
tMGWJS0phsIf+SDmQBhKkJ4sORJAwHNTQr5aYzoQB65Pc2IX20ymCa3oYWCGNkJI
okvzUjm9yeATVbIA7vSMTL170JO+W6DyMWCSqId80YxBy2+BsBR/jYd88d1VsB9j
hNkF3ajktLIiRK9gKFUS0zJ6JTqgTQ1zBsbrDwIQtH+akIdzrMtURPlTaL8dCOZ/
MAOpKucM9h2NfzZO37uTrudH2gCXDvWk0546j3QbiNEcBdSxPWEeJe1KQLm2EWc9
pwVpygKNccqOm4KSNX7EmYW4+Jy+60B0Rj/sMdw9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUgNaoOXGbe6FyWvlIwHpqJO3aiS0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzJjZmVhOTdjLTRmMGItNDg3My1iMjk4LWNjODNlMTA5MmU5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAMrwwDQYJKoZIhvcNAQELBQADggEBAFWKRlqz46kYT42rNlSpp5PF
Ji/MheN7qWUYZGUF+8xZ5IlIzZI6ZxMhQLdmekIEIvt64b937Ss9n0fJiPTgIo5c
LhF1cAzzcwkmBaPByDw5xbHa3b75yDGRWjvacSX3AQhI7bt+SQeKo7Ufw1OSW1LC
SVw8WSK4lWaeInRkuUISSKmdS4+1VSids8In/XKtBMdIcur5PjvKX0cTG/1Pi5I5
cr5/MfpZf/uqnwikbeDiHozMiMxXWfAtE+I82Qu4X2IPAnX9s8AE1cOp+yfe6vdG
RdA2VD4HYbFZ2EnzL4DGlY3E4n6gtAUx8vq5744KcmXD/ioM/6ND6FcyAhGGv50=
-----END CERTIFICATE-----
Generated at Wed May 13 02:23:21 2026 by rpki-client