
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55672699-b45b-4880-8b07-1208c0aaba75.roa
File: 55672699-b45b-4880-8b07-1208c0aaba75.roa (raw, json)
Hash identifier: FKDk0WWShmBsUr+6glA6C+cNGDHRPBGu2LtTm2MfeMU=
Subject key identifier: 25:24:B0:C1:AB:1D:F6:88:20:05:81:80:30:C2:2D:F3:31:DA:DD:5D
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 68F9614EFE53C38738BB8E3D44CA92661DDF2762
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55672699-b45b-4880-8b07-1208c0aaba75.roa
Signing time: Thu 23 Jul 2026 10:11:21 +0000
ROA not before: Thu 23 Jul 2026 10:11:21 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3200::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f9:61:4e:fe:53:c3:87:38:bb:8e:3d:44:ca:92:66:1d:df:27:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 10:11:21 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=20e5bcbf0c90e2b1acc1706f55e29e6916c177414c145d5ebd588fdddd0580e4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:8b:48:5d:b8:a0:26:47:87:6b:51:df:7a:
3c:f8:cd:e7:9f:12:47:3e:dc:97:fe:26:bb:43:ab:
c0:79:ec:a5:0a:6b:50:2a:f7:71:ca:ef:6a:fa:af:
59:cb:3e:f2:c7:c4:ac:ad:45:d9:f8:37:4f:a6:9d:
df:1a:52:1f:da:b5:12:c3:e8:e4:e4:df:89:fb:ed:
86:81:6f:b7:54:f7:f8:30:ac:2a:e2:8c:e8:84:ba:
bc:2b:dd:22:ff:09:62:a7:8e:10:82:68:46:21:c0:
29:1f:11:93:bd:f2:e7:9e:b3:bb:87:38:46:89:54:
2b:54:ff:9b:40:b3:14:ff:2f:a4:cb:4e:42:54:0c:
31:1e:95:7e:88:1d:9e:58:a3:b8:c9:50:9f:2c:cd:
e6:78:96:36:a8:50:89:b0:d4:fc:ba:81:9c:c2:72:
08:3e:54:92:32:1c:e7:fa:cb:0b:5a:33:c8:1a:f0:
6b:61:80:e3:57:e4:9e:f9:4e:7e:93:54:77:41:3a:
e7:61:d8:47:15:02:06:32:99:e0:5e:9d:b9:51:ca:
31:24:3e:4d:7c:d8:a0:4e:9f:4e:25:7d:da:45:71:
5f:d5:56:8c:3f:0c:f3:a6:8c:83:11:b5:9f:69:e1:
c7:8f:9e:21:b7:13:b6:f4:4f:ac:9e:25:53:1e:ee:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:24:B0:C1:AB:1D:F6:88:20:05:81:80:30:C2:2D:F3:31:DA:DD:5D
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55672699-b45b-4880-8b07-1208c0aaba75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3200::/39
Signature Algorithm: sha256WithRSAEncryption
66:9c:4a:03:68:56:43:69:5d:04:39:f3:a1:b7:12:70:19:d1:
bc:68:8e:1d:32:cd:4c:a3:00:40:f3:98:8c:95:29:30:13:a8:
36:09:b0:f2:d4:e4:d7:34:68:06:0c:09:a4:e4:bd:2f:e2:09:
e1:47:27:dc:a9:18:be:17:e3:c4:1b:e1:72:bf:90:87:11:36:
ca:a1:be:a6:91:23:0f:d2:cf:1a:99:89:72:84:9a:f1:63:c5:
59:7b:6a:ab:1c:17:ef:71:35:2e:f6:f0:9d:a8:ec:6e:8a:01:
2e:1c:0e:4b:45:a6:09:bd:6a:f3:e5:65:99:9d:88:87:b3:47:
5b:bb:20:b6:37:74:5d:7f:44:a8:53:16:19:33:8d:93:d3:ec:
51:77:98:fe:21:10:5d:e4:9f:67:37:c1:29:79:98:69:3c:f7:
69:0b:60:a4:c7:22:7d:58:6b:69:07:f9:e8:0f:e5:51:ed:5d:
94:1f:c0:3c:33:4b:78:72:c2:35:58:44:6b:a1:74:02:e1:e7:
d1:0d:71:94:c3:29:71:5b:89:22:2d:f5:e3:87:70:77:5d:ce:
38:3c:e2:70:d1:07:9f:97:b7:71:4f:01:5b:48:4f:c1:f0:03:
5f:69:4c:b2:53:8a:66:62:38:bd:71:e4:70:fe:a1:66:1e:b4:
c7:e0:23:dc
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUaPlhTv5Tw4c4u449RMqSZh3fJ2IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTAxMTIxWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMGU1YmNiZjBjOTBlMmIxYWNjMTcwNmY1NWUyOWU2OTE2
YzE3NzQxNGMxNDVkNWViZDU4OGZkZGRkMDU4MGU0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcmotIXbigJkeHa1Hfejz4zeefEkc+3Jf+JrtDq8B57KUK
a1Aq93HK72r6r1nLPvLHxKytRdn4N0+mnd8aUh/atRLD6OTk34n77YaBb7dU9/gw
rCrijOiEurwr3SL/CWKnjhCCaEYhwCkfEZO98uees7uHOEaJVCtU/5tAsxT/L6TL
TkJUDDEelX6IHZ5Yo7jJUJ8szeZ4ljaoUImw1Py6gZzCcgg+VJIyHOf6ywtaM8ga
8GthgONX5J75Tn6TVHdBOudh2EcVAgYymeBenblRyjEkPk182KBOn04lfdpFcV/V
Vow/DPOmjIMRtZ9p4cePniG3E7b0T6yeJVMe7rJfAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUJSSwwasd9oggBYGAMMIt8zHa3V0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU1NjcyNjk5LWI0NWItNDg4MC04YjA3LTEyMDhjMGFhYmE3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAJAAMjANBgkqhkiG9w0BAQsFAAOCAQEAZpxKA2hWQ2ldBDnzobcScBnR
vGiOHTLNTKMAQPOYjJUpMBOoNgmw8tTk1zRoBgwJpOS9L+IJ4Ucn3KkYvhfjxBvh
cr+QhxE2yqG+ppEjD9LPGpmJcoSa8WPFWXtqqxwX73E1LvbwnajsbooBLhwOS0Wm
Cb1q8+VlmZ2Ih7NHW7sgtjd0XX9EqFMWGTONk9PsUXeY/iEQXeSfZzfBKXmYaTz3
aQtgpMcifVhraQf56A/lUe1dlB/APDNLeHLCNVhEa6F0AuHn0Q1xlMMpcVuJIi31
44dwd13OODzicNEHn5e3cU8BW0hPwfADX2lMslOKZmI4vXHkcP6hZh60x+Aj3A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:53 2026 by rpki-client