
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55911d01-5135-4f84-bba6-d2e37260a53a.roa
File: 55911d01-5135-4f84-bba6-d2e37260a53a.roa (raw, json)
Hash identifier: Wx0zx9zrTclMZRc5/KV+qCM83HnUiOZ+kidStEBMHs8=
Subject key identifier: BE:43:46:78:D8:A5:96:07:E0:FF:EF:28:67:F4:F8:59:14:D0:C8:19
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 197E98EA464A987404B53A875C623924F5443BDD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55911d01-5135-4f84-bba6-d2e37260a53a.roa
Signing time: Mon 04 May 2026 10:21:00 +0000
ROA not before: Mon 04 May 2026 10:21:00 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2af8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:7e:98:ea:46:4a:98:74:04:b5:3a:87:5c:62:39:24:f5:44:3b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 10:21:00 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=3bf5a289bc86c8bd7f488870f12ff25bd0a9df78454bfbbee29e80add8d0a3bd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:c9:a7:3a:35:d7:94:00:ef:2b:57:d9:4b:
6c:10:4b:24:94:4d:9e:d9:77:58:ed:94:8b:08:27:
70:b6:8f:5e:99:ca:cf:7d:83:e8:64:1d:64:15:20:
29:92:6f:06:39:52:be:48:01:d7:6a:00:d0:7a:91:
11:71:4a:83:4b:dd:fa:c2:d5:16:86:1d:3f:49:44:
33:ef:53:9e:bc:2c:de:40:38:83:9b:5a:a1:b2:6e:
3d:11:27:8e:08:3c:e5:00:49:54:a7:45:72:6e:9c:
1b:49:6e:bb:d2:27:1c:3d:84:f7:a9:97:70:e8:dc:
5e:89:87:02:7c:90:ee:f8:02:2b:a1:0b:29:d5:24:
27:e0:cf:40:d1:7a:f4:31:d8:b1:b3:38:ed:64:52:
e7:8f:c4:9a:c0:cd:03:ac:20:32:de:04:b9:66:d7:
7f:d5:c7:77:07:7a:aa:57:70:40:c8:31:ef:ec:f1:
ad:1c:b0:c4:78:bd:22:b5:f8:06:5d:0a:55:53:16:
4b:c6:92:64:8c:77:8a:56:54:b3:9f:41:86:f6:80:
98:95:d8:69:d4:3a:72:25:2b:b8:ad:0d:e9:0a:84:
ee:c8:51:2a:20:d7:09:24:50:8a:51:5e:e0:d8:ab:
2a:4a:bd:f8:56:62:0d:1f:ce:0b:19:9f:ad:66:cb:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:46:78:D8:A5:96:07:E0:FF:EF:28:67:F4:F8:59:14:D0:C8:19
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55911d01-5135-4f84-bba6-d2e37260a53a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2af8::/46
Signature Algorithm: sha256WithRSAEncryption
5a:67:e2:67:4e:44:a5:ef:b9:00:b4:36:73:c0:47:0f:ec:e4:
1a:06:30:ff:dd:e2:2f:8f:cf:5f:d0:d3:c2:5f:76:59:92:79:
0f:ea:53:4c:2f:79:59:23:96:7d:0f:a7:d1:3f:3e:fd:c1:b9:
30:70:58:01:e8:ac:e3:6a:07:c1:b2:a6:30:a9:a3:14:69:71:
37:0f:50:8d:47:21:b5:24:41:7b:f0:37:13:44:7f:1e:1a:11:
03:d2:88:e2:62:86:3c:32:75:6a:01:1e:64:f5:d5:f1:f9:6f:
88:1a:a9:53:78:73:c5:f8:59:45:88:29:f3:19:48:9f:9e:e1:
38:3f:4d:90:fe:e3:a4:d1:0b:4d:f7:fb:fd:01:39:6e:f6:ff:
a1:81:41:8e:67:14:7d:72:26:22:68:e7:0f:32:2d:03:6a:3b:
7a:75:a5:fa:9d:1d:d8:1d:d5:28:97:9d:f6:70:c6:99:30:86:
e5:20:89:58:43:b0:06:76:cf:2b:05:0d:c0:a3:48:05:34:06:
bc:f6:bf:61:53:f3:8b:df:30:c4:48:a1:1f:97:90:85:06:22:
53:8a:13:67:4f:7f:2f:78:a3:57:6c:bb:46:58:71:9a:3d:7c:
4b:f4:43:b1:88:f1:f4:ca:7b:c2:58:47:fd:2e:7d:ca:67:67:
68:03:fc:c2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUGX6Y6kZKmHQEtTqHXGI5JPVEO90wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTAyMTAwWhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYmY1YTI4OWJjODZjOGJkN2Y0ODg4NzBmMTJmZjI1YmQw
YTlkZjc4NDU0YmZiYmVlMjllODBhZGQ4ZDBhM2JkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChCMmnOjXXlADvK1fZS2wQSySUTZ7Zd1jtlIsIJ3C2j16Z
ys99g+hkHWQVICmSbwY5Ur5IAddqANB6kRFxSoNL3frC1RaGHT9JRDPvU568LN5A
OIObWqGybj0RJ44IPOUASVSnRXJunBtJbrvSJxw9hPepl3Do3F6JhwJ8kO74Aiuh
CynVJCfgz0DRevQx2LGzOO1kUuePxJrAzQOsIDLeBLlm13/Vx3cHeqpXcEDIMe/s
8a0csMR4vSK1+AZdClVTFkvGkmSMd4pWVLOfQYb2gJiV2GnUOnIlK7itDekKhO7I
USog1wkkUIpRXuDYqypKvfhWYg0fzgsZn61my2NvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUvkNGeNillgfg/+8oZ/T4WRTQyBkwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU1OTExZDAxLTUxMzUtNGY4NC1iYmE2LWQyZTM3MjYwYTUzYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAKvgwDQYJKoZIhvcNAQELBQADggEBAFpn4mdORKXvuQC0NnPARw/s
5BoGMP/d4i+Pz1/Q08JfdlmSeQ/qU0wveVkjln0Pp9E/Pv3BuTBwWAHorONqB8Gy
pjCpoxRpcTcPUI1HIbUkQXvwNxNEfx4aEQPSiOJihjwydWoBHmT11fH5b4gaqVN4
c8X4WUWIKfMZSJ+e4Tg/TZD+46TRC033+/0BOW72/6GBQY5nFH1yJiJo5w8yLQNq
O3p1pfqdHdgd1SiXnfZwxpkwhuUgiVhDsAZ2zysFDcCjSAU0Brz2v2FT84vfMMRI
oR+XkIUGIlOKE2dPfy94o1dsu0ZYcZo9fEv0Q7GI8fTKe8JYR/0ufcpnZ2gD/MI=
-----END CERTIFICATE-----
Generated at Wed May 13 03:11:08 2026 by rpki-client