
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa
File: 5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa (raw, json)
Hash identifier: xfhBZVROR0o/doELN3iDfoEpvS0sOjMGGs0Oog7rZPA=
Subject key identifier: A5:BA:25:DC:36:CB:28:CF:E1:65:6B:6D:EF:48:6F:2A:F3:41:38:14
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 22C99765619E043908FF333EDD3FD62BA06AFBFF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa
Signing time: Thu 23 Jul 2026 07:50:52 +0000
ROA not before: Thu 23 Jul 2026 07:50:52 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3878::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c9:97:65:61:9e:04:39:08:ff:33:3e:dd:3f:d6:2b:a0:6a:fb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 07:50:52 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=9661de03218121e8d071d80fe14b9ec68e0219a91b61a148b411e6bb2552c103, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cb:4e:e5:81:30:6f:ac:70:bc:32:e2:fc:0e:
af:94:49:a2:29:2f:6a:7a:d3:e0:38:4c:91:09:1e:
8e:7b:ae:12:5c:a8:6e:8c:28:eb:67:f6:0b:25:22:
ed:40:5b:fc:da:b5:52:7e:14:0d:9b:9a:94:50:c6:
e4:29:da:36:d8:f3:ff:ab:bb:be:48:69:98:95:bf:
aa:83:bb:14:51:b3:13:72:28:19:fa:9a:6d:ba:e0:
31:41:c9:ee:d4:a2:df:55:97:ab:f8:56:39:5f:fb:
db:55:0e:f1:5b:ea:aa:a5:02:87:9b:e9:49:12:15:
95:e9:ab:0e:d0:3e:55:58:00:50:ef:0d:2f:15:10:
48:bb:5b:54:bb:ef:df:68:2b:97:e6:8f:a5:64:91:
9e:76:01:31:a1:ff:ab:1a:2b:7b:30:53:ed:ff:68:
2c:e2:5f:ef:14:c6:26:ba:cd:e9:1d:48:27:ce:28:
15:61:39:6d:bd:81:64:cb:dc:ca:33:20:30:3a:15:
ba:e9:e7:31:ef:0a:4b:01:68:ed:c6:8c:b0:f7:df:
60:c1:bd:bf:b2:ee:e1:ff:b4:19:f5:fd:49:fa:30:
f4:d3:f5:93:a3:81:75:92:87:66:45:50:eb:ad:85:
77:7b:9b:86:4e:07:70:91:c0:b6:4c:01:42:45:01:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BA:25:DC:36:CB:28:CF:E1:65:6B:6D:EF:48:6F:2A:F3:41:38:14
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c8d5db5-daaf-4c46-af01-df0a2bc190c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3878::/45
Signature Algorithm: sha256WithRSAEncryption
50:90:13:67:7f:3b:0b:9f:1f:09:98:9c:46:01:1a:d1:02:63:
ee:44:96:f2:0a:00:f0:9d:fe:9b:4d:2d:94:58:bf:09:73:f4:
52:6e:b7:21:81:ce:4f:2a:80:2b:d3:ee:9f:65:27:c6:c5:cd:
88:f8:e1:1c:8e:aa:54:4a:1b:8f:38:4c:66:f8:46:6c:75:ef:
7e:15:47:dc:4a:32:4d:31:5a:16:63:c7:ac:d4:b3:c9:ac:fb:
bf:d4:4f:11:5d:47:91:9d:c7:91:59:7a:62:78:7e:c7:d1:e6:
68:90:12:2b:af:1c:9d:f1:27:a0:3d:fc:07:56:6d:88:c6:c5:
37:30:3c:2c:c4:41:a0:56:11:44:0d:ed:8f:59:40:a0:8b:d3:
31:08:5d:b0:70:12:e2:0d:f3:1f:dd:22:f0:b0:55:01:e7:11:
d1:74:73:0b:f9:a7:65:49:cd:e9:bf:21:e4:0b:87:46:ad:16:
3a:7a:13:88:f2:b4:54:9b:24:e1:80:6b:e2:84:07:c5:fc:e2:
c6:b4:f8:c0:34:09:c0:be:60:e4:32:3a:4e:eb:7a:c5:6f:11:
12:a0:69:16:9e:3e:48:78:98:8e:16:3f:58:9a:57:af:4c:09:
f9:be:0c:94:ec:c1:81:53:6a:10:63:21:d6:b5:ed:35:8b:f0:
99:88:15:e4
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIsmXZWGeBDkI/zM+3T/WK6Bq+/8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDc1MDUyWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NjYxZGUwMzIxODEyMWU4ZDA3MWQ4MGZlMTRiOWVjNjhl
MDIxOWE5MWI2MWExNDhiNDExZTZiYjI1NTJjMTAzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWy07lgTBvrHC8MuL8Dq+USaIpL2p60+A4TJEJHo57rhJc
qG6MKOtn9gslIu1AW/zatVJ+FA2bmpRQxuQp2jbY8/+ru75IaZiVv6qDuxRRsxNy
KBn6mm264DFBye7Uot9Vl6v4Vjlf+9tVDvFb6qqlAoeb6UkSFZXpqw7QPlVYAFDv
DS8VEEi7W1S7799oK5fmj6VkkZ52ATGh/6saK3swU+3/aCziX+8Uxia6zekdSCfO
KBVhOW29gWTL3MozIDA6Fbrp5zHvCksBaO3GjLD332DBvb+y7uH/tBn1/Un6MPTT
9ZOjgXWSh2ZFUOuthXd7m4ZOB3CRwLZMAUJFAdmHAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUpbol3DbLKM/hZWtt70hvKvNBOBQwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzVjOGQ1ZGI1LWRhYWYtNGM0Ni1hZjAxLWRmMGEyYmMxOTBjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwMmAJAAOHgwDQYJKoZIhvcNAQELBQADggEBAFCQE2d/OwufHwmYnEYBGtEC
Y+5ElvIKAPCd/ptNLZRYvwlz9FJutyGBzk8qgCvT7p9lJ8bFzYj44RyOqlRKG484
TGb4Rmx1734VR9xKMk0xWhZjx6zUs8ms+7/UTxFdR5Gdx5FZemJ4fsfR5miQEiuv
HJ3xJ6A9/AdWbYjGxTcwPCzEQaBWEUQN7Y9ZQKCL0zEIXbBwEuIN8x/dIvCwVQHn
EdF0cwv5p2VJzem/IeQLh0atFjp6E4jytFSbJOGAa+KEB8X84sa0+MA0CcC+YOQy
Ok7resVvERKgaRaePkh4mI4WP1iaV69MCfm+DJTswYFTahBjIda17TWL8JmIFeQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:53 2026 by rpki-client