
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/35046971-cfc3-4c3a-b3a9-33e53687da9b.roa
File: 35046971-cfc3-4c3a-b3a9-33e53687da9b.roa (raw, json)
Hash identifier: vaISn6/do0CLzvWhXR95PJlPU01sUr2nj3M561R5whs=
Subject key identifier: B1:2C:76:63:35:AA:B0:CF:8C:3E:46:8B:E2:23:C5:2A:C6:63:73:03
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 73A6C8DFDBA2D96A122BE13EEE09291CDD38B7E7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/35046971-cfc3-4c3a-b3a9-33e53687da9b.roa
Signing time: Mon 04 May 2026 05:32:01 +0000
ROA not before: Mon 04 May 2026 05:32:01 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3abc::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a6:c8:df:db:a2:d9:6a:12:2b:e1:3e:ee:09:29:1c:dd:38:b7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 05:32:01 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=44bc8f7e614632bf04251f0f5dc8d0810caee9783a78165d1a1617f292839b64, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:e1:04:b4:4f:6e:b1:dc:7c:2b:17:6f:8c:
40:4d:6c:e4:17:0b:20:f8:30:4c:fd:34:06:4f:8f:
94:9e:4a:02:4e:c6:c0:47:72:9e:c3:3e:58:97:f8:
af:d8:58:40:d5:5a:5b:fb:12:c5:16:e9:04:7a:4c:
d6:4c:d2:35:eb:79:c3:d5:b5:29:fe:65:e2:6d:b6:
d3:ad:88:46:a9:37:e7:dd:ad:4c:aa:db:b7:d0:ae:
e0:51:3b:98:ae:0e:c8:7f:c6:03:05:b5:93:36:e4:
04:8b:d7:51:98:c2:9e:23:48:bd:13:53:da:4c:9e:
05:93:c5:8a:ce:1e:64:f1:4c:a7:6b:6f:5f:f3:58:
8c:16:88:06:8c:49:37:13:55:ae:82:61:8c:13:b9:
17:10:14:06:3f:31:03:2c:0c:2b:fd:e5:b7:08:f4:
f4:0e:b5:b1:66:9e:f8:e3:e8:d9:80:9f:00:81:25:
f4:0a:3b:6d:a8:7e:4a:6f:ba:4c:12:98:90:51:44:
6b:87:11:84:2d:7a:47:12:bb:e3:63:62:4f:52:93:
fd:a8:93:e1:15:8d:86:27:3c:6e:25:86:5e:29:a4:
b8:94:ba:f8:5e:14:6e:7c:bf:48:6b:b3:98:09:ba:
ff:b9:1c:9a:6d:97:32:98:58:1c:1d:d7:d8:13:f9:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2C:76:63:35:AA:B0:CF:8C:3E:46:8B:E2:23:C5:2A:C6:63:73:03
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/35046971-cfc3-4c3a-b3a9-33e53687da9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3abc::/47
Signature Algorithm: sha256WithRSAEncryption
03:21:41:b2:fc:71:bc:ba:e6:89:19:2f:24:46:c0:cf:90:d6:
c8:25:35:31:a7:34:d3:e5:a5:60:54:f2:b3:ef:cf:1b:51:67:
ea:f6:f1:fd:9b:00:bd:08:2a:2b:84:96:31:d6:b4:a5:81:58:
40:27:65:72:3f:68:73:bd:fb:a1:d6:77:1d:05:f5:e0:d6:61:
af:70:04:31:5f:da:c7:ab:d8:bd:7e:89:01:9c:36:11:a6:19:
b7:c3:82:1e:4c:b2:1f:76:e8:5c:48:bc:ce:8c:79:ad:6e:86:
64:e6:23:45:e0:c6:6f:9d:c3:fe:2d:e8:89:6b:ec:4e:43:73:
33:19:57:e2:17:9e:95:24:38:dc:e4:b8:35:ff:48:68:f8:d5:
b2:e5:3f:aa:89:6c:5c:94:35:f9:a4:a3:cc:2e:b6:58:cf:14:
e8:da:02:1e:bf:07:8e:87:51:90:b2:b6:3b:b5:22:12:2b:3e:
29:e0:49:37:67:fb:5a:12:a1:5f:73:d3:7e:30:40:d4:f9:1f:
ce:cb:68:b1:06:b1:79:39:ae:dc:19:41:65:67:ed:74:8a:70:
36:b3:9e:5d:6a:7d:3b:d4:0e:24:4f:5d:b5:f6:f1:d8:43:37:
a8:67:26:51:9d:14:67:a0:bf:1a:6b:79:05:07:76:c4:7a:3a:
bf:60:77:22
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUc6bI39ui2WoSK+E+7gkpHN04t+cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDUzMjAxWhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NGJjOGY3ZTYxNDYzMmJmMDQyNTFmMGY1ZGM4ZDA4MTBj
YWVlOTc4M2E3ODE2NWQxYTE2MTdmMjkyODM5YjY0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/YeEEtE9usdx8KxdvjEBNbOQXCyD4MEz9NAZPj5SeSgJO
xsBHcp7DPliX+K/YWEDVWlv7EsUW6QR6TNZM0jXrecPVtSn+ZeJtttOtiEapN+fd
rUyq27fQruBRO5iuDsh/xgMFtZM25ASL11GYwp4jSL0TU9pMngWTxYrOHmTxTKdr
b1/zWIwWiAaMSTcTVa6CYYwTuRcQFAY/MQMsDCv95bcI9PQOtbFmnvjj6NmAnwCB
JfQKO22ofkpvukwSmJBRRGuHEYQtekcSu+NjYk9Sk/2ok+EVjYYnPG4lhl4ppLiU
uvheFG58v0hrs5gJuv+5HJptlzKYWBwd19gT+QilAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUsSx2YzWqsM+MPkaL4iPFKsZjcwMwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzM1MDQ2OTcxLWNmYzMtNGMzYS1iM2E5LTMzZTUzNjg3ZGE5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOrwwDQYJKoZIhvcNAQELBQADggEBAAMhQbL8cby65okZLyRGwM+Q
1sglNTGnNNPlpWBU8rPvzxtRZ+r28f2bAL0IKiuEljHWtKWBWEAnZXI/aHO9+6HW
dx0F9eDWYa9wBDFf2ser2L1+iQGcNhGmGbfDgh5Msh926FxIvM6Mea1uhmTmI0Xg
xm+dw/4t6Ilr7E5DczMZV+IXnpUkONzkuDX/SGj41bLlP6qJbFyUNfmko8wutljP
FOjaAh6/B46HUZCytju1IhIrPingSTdn+1oSoV9z034wQNT5H87LaLEGsXk5rtwZ
QWVn7XSKcDaznl1qfTvUDiRPXbX28dhDN6hnJlGdFGegvxpreQUHdsR6Or9gdyI=
-----END CERTIFICATE-----
Generated at Wed May 13 01:18:48 2026 by rpki-client