
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47277fef-8903-4f0b-b6e5-8456b0e0be58.roa
File: 47277fef-8903-4f0b-b6e5-8456b0e0be58.roa (raw, json)
Hash identifier: T5zYUjDu9w4qcz2qByCFCTPeUOX5rvbKwzg+p/vGiNo=
Subject key identifier: C9:34:4D:FD:10:4D:11:AE:62:82:A8:4D:12:9B:D8:21:B1:05:F6:D6
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 46B75BD2B7BD0ACCD79EDCDE9F49D2B8134CF8E4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47277fef-8903-4f0b-b6e5-8456b0e0be58.roa
Signing time: Thu 23 Jul 2026 09:00:03 +0000
ROA not before: Thu 23 Jul 2026 09:00:03 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:334e::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b7:5b:d2:b7:bd:0a:cc:d7:9e:dc:de:9f:49:d2:b8:13:4c:f8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 09:00:03 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=0b649fb651bc239d6337934f29b8ef72ec123f925c9366d2b36e70a4131e7931, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:ef:f3:0c:dd:a2:78:13:e1:60:3e:ef:fe:
53:c9:be:e5:66:11:19:50:6e:5d:15:86:38:e8:eb:
14:0e:35:25:67:18:a0:27:88:5c:f4:a2:cc:21:f7:
a0:1e:6d:0c:1e:e8:8d:07:e0:96:0b:d2:98:b8:3e:
c3:40:47:e6:d6:f5:a8:e4:83:8e:7c:84:67:3b:f4:
66:ef:c5:77:10:c0:7c:4a:ba:4f:96:de:51:0f:b0:
94:df:b4:ed:01:af:5f:e1:cf:91:7d:32:4f:1c:17:
ad:d8:8a:01:cd:eb:9f:b7:c0:db:5a:c8:7f:02:20:
e9:1e:c8:35:9b:3e:a4:00:a2:2f:45:b1:c8:ca:07:
de:49:f1:6b:b2:c4:11:64:04:64:7a:43:16:b1:4a:
93:dc:cf:60:3d:92:32:c1:2a:79:77:e0:e7:ae:d7:
b1:be:aa:5f:e6:a4:a1:f3:35:e3:8a:9b:3e:55:9f:
d4:e3:fd:71:ab:74:d3:3d:96:51:7b:64:b8:05:54:
5e:df:b8:25:73:85:33:85:bc:b2:76:52:b6:cf:8a:
2a:04:50:04:a4:f0:fa:74:eb:8b:e6:65:8f:cc:c2:
2c:91:53:8e:da:37:46:bd:8b:25:7f:88:1c:1b:f2:
cb:24:7a:9e:05:7b:62:fe:72:cd:1b:aa:7c:03:a3:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:4D:FD:10:4D:11:AE:62:82:A8:4D:12:9B:D8:21:B1:05:F6:D6
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/47277fef-8903-4f0b-b6e5-8456b0e0be58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:334e::/47
Signature Algorithm: sha256WithRSAEncryption
b6:92:c2:8a:33:ca:e2:a0:6f:85:6f:85:f6:e2:6c:d8:b5:75:
d4:da:dd:76:40:0d:b4:e8:ff:b7:a3:ec:3b:4b:2c:d6:fa:d5:
60:01:88:1a:35:dc:72:02:d0:00:93:49:e1:8e:f8:67:1c:95:
ca:7e:8d:0f:cf:1a:23:4d:65:ad:2d:0f:0f:58:7b:b9:bd:53:
5b:63:01:ba:42:df:37:fd:89:cb:12:1e:fb:bc:e5:24:82:c6:
9f:50:f5:cb:65:67:c4:1f:d9:ee:52:3e:dc:ac:1b:0e:5f:42:
3e:8f:3f:b2:39:c2:37:c2:c1:1b:d3:a7:91:55:19:c7:fa:01:
ef:be:20:dd:32:a0:9b:2b:8e:97:e6:b8:ba:a6:85:73:27:42:
0a:6e:30:b4:ed:4d:d8:00:26:2f:6d:22:44:86:f4:b7:76:cc:
65:84:cb:30:7e:2c:87:c4:93:26:ed:cf:a8:ee:ea:db:9e:35:
1c:89:0c:c1:60:09:5a:ee:5e:10:2b:8b:0b:a9:25:df:9c:e6:
fc:c0:03:be:fd:7a:4a:ae:af:2c:16:9b:0e:0d:8b:1d:ef:2d:
f2:a7:4d:c5:09:ea:43:00:0e:c0:7a:c0:8e:24:18:26:26:56:
89:da:6d:6a:08:de:90:3b:45:a6:02:81:a0:44:da:df:ca:d1:
44:c6:af:2d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURrdb0re9CszXntzen0nSuBNM+OQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDkwMDAzWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AwYjY0OWZiNjUxYmMyMzlkNjMzNzkzNGYyOWI4ZWY3MmVj
MTIzZjkyNWM5MzY2ZDJiMzZlNzBhNDEzMWU3OTMxMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWlO/zDN2ieBPhYD7v/lPJvuVmERlQbl0Vhjjo6xQONSVn
GKAniFz0oswh96AebQwe6I0H4JYL0pi4PsNAR+bW9ajkg458hGc79GbvxXcQwHxK
uk+W3lEPsJTftO0Br1/hz5F9Mk8cF63YigHN65+3wNtayH8CIOkeyDWbPqQAoi9F
scjKB95J8WuyxBFkBGR6QxaxSpPcz2A9kjLBKnl34Oeu17G+ql/mpKHzNeOKmz5V
n9Tj/XGrdNM9llF7ZLgFVF7fuCVzhTOFvLJ2UrbPiioEUASk8Pp064vmZY/MwiyR
U47aN0a9iyV/iBwb8sskep4Fe2L+cs0bqnwDo503AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUyTRN/RBNEa5igqhNEpvYIbEF9tYwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzQ3Mjc3ZmVmLTg5MDMtNGYwYi1iNmU1LTg0NTZiMGUwYmU1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAM04wDQYJKoZIhvcNAQELBQADggEBALaSwoozyuKgb4VvhfbibNi1
ddTa3XZADbTo/7ej7DtLLNb61WABiBo13HIC0ACTSeGO+Gcclcp+jQ/PGiNNZa0t
Dw9Ye7m9U1tjAbpC3zf9icsSHvu85SSCxp9Q9ctlZ8Qf2e5SPtysGw5fQj6PP7I5
wjfCwRvTp5FVGcf6Ae++IN0yoJsrjpfmuLqmhXMnQgpuMLTtTdgAJi9tIkSG9Ld2
zGWEyzB+LIfEkybtz6ju6tueNRyJDMFgCVruXhAriwupJd+c5vzAA779ekqurywW
mw4Nix3vLfKnTcUJ6kMADsB6wI4kGCYmVonabWoI3pA7RaYCgaBE2t/K0UTGry0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:51 2026 by rpki-client