
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59e3e73c-e9e9-4f2a-a57c-a742f077f13e.roa
File: 59e3e73c-e9e9-4f2a-a57c-a742f077f13e.roa (raw, json)
Hash identifier: tqGZbLqgZ8bvmrxYks4CEkb+yBsO4KW3hKdPghig2A8=
Subject key identifier: 9C:17:FF:0E:F6:B7:2A:61:CE:40:7D:18:B6:57:A4:4C:79:03:A0:ED
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 74A028EFBF72724042FE03C593AC2CD74F508733
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59e3e73c-e9e9-4f2a-a57c-a742f077f13e.roa
Signing time: Thu 23 Jul 2026 08:31:53 +0000
ROA not before: Thu 23 Jul 2026 08:31:53 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3748::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a0:28:ef:bf:72:72:40:42:fe:03:c5:93:ac:2c:d7:4f:50:87:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 08:31:53 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=153e3189be122c8f0b845fc64e586071a5e99fe8d5d3e939f5e6ceb8c285c23d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:ab:9b:ff:c7:9c:49:41:f0:71:cc:01:0f:
7d:c9:27:5b:0f:33:3f:de:1f:05:36:54:3d:13:f9:
f0:df:6f:7d:39:e0:61:67:bd:ff:b4:34:5d:14:f2:
eb:94:7e:09:b9:d5:2a:d2:03:4f:fa:62:7f:6f:ed:
29:77:50:d3:8c:8a:b9:ea:97:31:ee:d4:20:9d:a6:
bc:29:82:67:14:76:47:f0:6c:95:84:c7:21:82:0e:
73:67:5e:99:13:54:f3:33:e3:c2:32:8d:86:25:9c:
e7:f2:85:c0:b0:ab:d3:a8:3a:46:96:d6:0c:8c:54:
53:d7:92:ab:19:27:66:79:35:9a:fb:9b:13:0b:a3:
01:12:69:31:50:9d:36:13:ea:9c:e0:f8:4d:ce:83:
c0:e0:37:de:93:cd:50:33:96:4c:b4:1f:8f:e7:e7:
09:e3:92:4b:bc:18:a2:34:fa:91:9a:73:10:f2:7b:
01:c5:be:11:f0:64:13:e3:f0:e5:11:ca:0b:fb:58:
8b:54:44:5e:0b:e2:ff:8e:24:fb:1a:05:d1:c9:58:
62:54:c9:eb:e4:30:3f:73:8b:c5:4b:5f:6c:bb:97:
51:6a:c1:68:9e:71:d7:93:5d:80:69:ce:02:30:27:
4c:f2:3a:4c:0a:da:32:a5:45:6c:41:d6:4f:27:b8:
86:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:17:FF:0E:F6:B7:2A:61:CE:40:7D:18:B6:57:A4:4C:79:03:A0:ED
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59e3e73c-e9e9-4f2a-a57c-a742f077f13e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3748::/46
Signature Algorithm: sha256WithRSAEncryption
85:72:bb:f9:74:94:8d:3d:5a:12:d3:ac:6b:ea:22:cb:f5:0f:
90:fa:d8:7a:b8:bd:c1:8a:b2:92:61:16:0f:8e:11:22:39:df:
f7:52:45:c4:fc:7e:c2:7c:c3:a2:02:b4:de:b4:af:a1:9a:8f:
6d:ad:2a:3f:5e:41:43:9b:6c:66:81:b7:61:69:0a:7b:6b:cc:
c4:7f:59:98:70:e0:cb:d4:ca:dd:e6:7c:6f:c6:08:8d:e0:d1:
fc:55:63:9a:08:f9:25:de:8f:aa:e9:ac:8c:7d:fa:cd:f2:3e:
e3:b8:c6:b9:11:95:48:0f:32:50:79:01:ad:ca:a5:69:75:e5:
74:e0:9e:51:f6:43:40:28:7d:db:fe:b6:86:e4:ee:ea:41:f4:
58:8e:bd:7b:0b:74:33:b6:4f:f3:c6:a8:b0:d8:d4:bf:97:a9:
95:17:cd:2d:bd:5e:7e:23:39:1c:23:d6:e2:97:6f:5f:f8:df:
ec:9c:51:fb:8c:ec:af:05:3a:a8:74:87:de:16:87:75:fb:63:
29:7a:72:a2:3d:82:38:3f:6a:92:4d:15:46:dc:99:9d:79:ed:
be:85:5c:76:1e:09:68:0c:b3:15:54:fb:6b:6c:e9:e0:2d:f8:
c6:c5:9a:fa:dd:09:e7:83:be:2e:a7:0a:d4:5c:ef:ef:6a:73:
91:8a:14:de
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdKAo779yckBC/gPFk6ws109QhzMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDgzMTUzWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNTNlMzE4OWJlMTIyYzhmMGI4NDVmYzY0ZTU4NjA3MWE1
ZTk5ZmU4ZDVkM2U5MzlmNWU2Y2ViOGMyODVjMjNkMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvw6ub/8ecSUHwccwBD33JJ1sPMz/eHwU2VD0T+fDfb305
4GFnvf+0NF0U8uuUfgm51SrSA0/6Yn9v7Sl3UNOMirnqlzHu1CCdprwpgmcUdkfw
bJWExyGCDnNnXpkTVPMz48IyjYYlnOfyhcCwq9OoOkaW1gyMVFPXkqsZJ2Z5NZr7
mxMLowESaTFQnTYT6pzg+E3Og8DgN96TzVAzlky0H4/n5wnjkku8GKI0+pGacxDy
ewHFvhHwZBPj8OURygv7WItURF4L4v+OJPsaBdHJWGJUyevkMD9zi8VLX2y7l1Fq
wWiecdeTXYBpzgIwJ0zyOkwK2jKlRWxB1k8nuIaxAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUnBf/Dva3KmHOQH0YtlekTHkDoO0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzU5ZTNlNzNjLWU5ZTktNGYyYS1hNTdjLWE3NDJmMDc3ZjEzZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAN0gwDQYJKoZIhvcNAQELBQADggEBAIVyu/l0lI09WhLTrGvqIsv1
D5D62Hq4vcGKspJhFg+OESI53/dSRcT8fsJ8w6ICtN60r6Gaj22tKj9eQUObbGaB
t2FpCntrzMR/WZhw4MvUyt3mfG/GCI3g0fxVY5oI+SXej6rprIx9+s3yPuO4xrkR
lUgPMlB5Aa3KpWl15XTgnlH2Q0Aofdv+tobk7upB9FiOvXsLdDO2T/PGqLDY1L+X
qZUXzS29Xn4jORwj1uKXb1/43+ycUfuM7K8FOqh0h94Wh3X7Yyl6cqI9gjg/apJN
FUbcmZ157b6FXHYeCWgMsxVU+2ts6eAt+MbFmvrdCeeDvi6nCtRc7+9qc5GKFN4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:13:19 2026 by rpki-client