
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c2ddfd8-7d50-4ee0-ad93-26100a6aef4a.roa
File: 4c2ddfd8-7d50-4ee0-ad93-26100a6aef4a.roa (raw, json)
Hash identifier: ZeAoiiL/Ce6AEM1xkXoBY92i7sZpaWKHh0rTiN8Zffs=
Subject key identifier: 05:B7:17:6C:6A:03:97:B1:D8:67:86:C5:10:C0:68:2C:65:DD:F0:BF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 69E70D13DAB7AB26F9DDD1E5710AE5B444D679C0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c2ddfd8-7d50-4ee0-ad93-26100a6aef4a.roa
Signing time: Thu 23 Jul 2026 11:41:18 +0000
ROA not before: Thu 23 Jul 2026 11:41:18 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3540::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e7:0d:13:da:b7:ab:26:f9:dd:d1:e5:71:0a:e5:b4:44:d6:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 11:41:18 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=124ba4496bd8a52ed939e5d11f140d5fb560f5f949f37339f461a647e73bedd3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:3f:e0:a5:8d:c3:96:70:d6:f7:94:d6:0a:
22:3b:8b:4a:cf:f2:a5:8e:c5:7f:19:fe:28:e7:fc:
9d:7f:d7:50:9e:76:cc:60:b0:ae:2a:22:45:2c:38:
a0:18:a5:66:52:d2:b9:50:13:ba:da:0d:8a:5e:ff:
30:c9:ca:be:20:e0:08:d2:e0:04:42:38:57:38:0f:
07:33:cb:9f:a6:b5:87:24:fd:88:3d:ee:fe:c6:0a:
ca:f5:e5:65:70:99:93:4d:58:56:93:f3:9c:47:2d:
fc:58:27:26:1c:d3:27:a0:75:40:67:19:fb:0e:e0:
eb:d4:8b:21:fe:36:13:ae:ae:48:98:37:ae:64:6d:
e7:3f:72:9c:70:6b:dc:a1:4b:93:7f:ef:bb:83:6c:
0c:84:f7:7d:42:68:24:16:95:4b:f2:3d:cc:6e:35:
10:b7:bb:9b:4e:65:7e:4b:80:a3:1e:c6:a8:f9:32:
64:46:82:f4:d8:b3:9f:f3:29:1f:39:4c:42:18:39:
ba:bb:64:54:b5:09:c1:b9:ec:da:97:7b:a3:4a:0a:
0e:b4:d7:7e:71:0c:02:09:3a:19:70:32:be:1d:7b:
ce:ec:3d:8f:57:22:5d:45:15:c8:25:86:d7:42:ed:
73:5d:5d:82:81:cb:46:1c:8f:c5:e9:a3:14:2d:fb:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:17:6C:6A:03:97:B1:D8:67:86:C5:10:C0:68:2C:65:DD:F0:BF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c2ddfd8-7d50-4ee0-ad93-26100a6aef4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3540::/45
Signature Algorithm: sha256WithRSAEncryption
21:d4:92:6d:71:b4:ff:21:0b:5e:30:cf:99:49:dc:11:17:85:
32:9d:44:15:b6:0f:11:52:27:e0:58:0d:54:07:b3:0c:2b:39:
fa:64:91:2e:5a:a7:1d:0f:bb:ad:80:d7:38:ba:7c:fe:1a:12:
f2:04:82:13:15:f2:54:6f:0e:da:09:66:2e:8f:75:43:da:ce:
29:08:cd:97:04:af:7c:23:73:4b:9f:40:20:89:16:da:68:f1:
d7:e5:3b:f3:05:8f:76:ee:dc:6a:55:14:8e:3a:e1:ca:5f:e7:
43:91:04:c1:98:43:53:b5:af:a9:38:f1:06:63:1a:d8:76:c4:
d8:67:d7:f9:b6:3d:c0:6c:2d:bf:d4:dd:59:03:42:0b:b4:3c:
cf:aa:c0:c8:c1:10:fb:b2:b4:2d:04:e5:80:8d:40:23:43:d0:
58:e1:e0:18:e5:27:7f:a4:81:c1:7d:99:28:df:c4:48:c5:3a:
ed:d0:05:8f:39:11:c6:dc:41:27:90:27:c0:9e:2c:3d:5c:e1:
9e:8a:04:d9:3d:58:c0:e5:ea:fb:79:fb:44:d5:08:03:35:0d:
c2:eb:b5:91:cc:81:80:6c:58:70:5e:d8:91:a7:57:8d:3d:d6:
75:e2:84:6b:59:fc:46:dd:c1:2b:af:a9:27:66:8e:58:c1:53:
40:5b:20:d8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUaecNE9q3qyb53dHlcQrltETWecAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTE0MTE4WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMjRiYTQ0OTZiZDhhNTJlZDkzOWU1ZDExZjE0MGQ1ZmI1
NjBmNWY5NDlmMzczMzlmNDYxYTY0N2U3M2JlZGQzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYvj/gpY3DlnDW95TWCiI7i0rP8qWOxX8Z/ijn/J1/11Ce
dsxgsK4qIkUsOKAYpWZS0rlQE7raDYpe/zDJyr4g4AjS4ARCOFc4Dwczy5+mtYck
/Yg97v7GCsr15WVwmZNNWFaT85xHLfxYJyYc0yegdUBnGfsO4OvUiyH+NhOurkiY
N65kbec/cpxwa9yhS5N/77uDbAyE931CaCQWlUvyPcxuNRC3u5tOZX5LgKMexqj5
MmRGgvTYs5/zKR85TEIYObq7ZFS1CcG57NqXe6NKCg60135xDAIJOhlwMr4de87s
PY9XIl1FFcglhtdC7XNdXYKBy0Ycj8XpoxQt+3srAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUBbcXbGoDl7HYZ4bFEMBoLGXd8L8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzRjMmRkZmQ4LTdkNTAtNGVlMC1hZDkzLTI2MTAwYTZhZWY0YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAANUAwDQYJKoZIhvcNAQELBQADggEBACHUkm1xtP8hC14wz5lJ3BEX
hTKdRBW2DxFSJ+BYDVQHswwrOfpkkS5apx0Pu62A1zi6fP4aEvIEghMV8lRvDtoJ
Zi6PdUPazikIzZcEr3wjc0ufQCCJFtpo8dflO/MFj3bu3GpVFI464cpf50ORBMGY
Q1O1r6k48QZjGth2xNhn1/m2PcBsLb/U3VkDQgu0PM+qwMjBEPuytC0E5YCNQCND
0Fjh4BjlJ3+kgcF9mSjfxEjFOu3QBY85EcbcQSeQJ8CeLD1c4Z6KBNk9WMDl6vt5
+0TVCAM1DcLrtZHMgYBsWHBe2JGnV4091nXihGtZ/EbdwSuvqSdmjljBU0BbINg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:27 2026 by rpki-client