
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66a60edf-0b7c-4a1c-a631-b93582b21d80.roa
File: 66a60edf-0b7c-4a1c-a631-b93582b21d80.roa (raw, json)
Hash identifier: IxJ5wXZwb2XFC7wxqlZTEJTDQzDpzoAFzpfWrtI3bOI=
Subject key identifier: 77:79:5D:14:11:96:C2:D6:52:A6:7B:B1:8E:46:E4:3D:DE:1B:76:CE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 28200AAD744BC1E0C09C8F3338B6E98CEE61AC41
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66a60edf-0b7c-4a1c-a631-b93582b21d80.roa
Signing time: Mon 04 May 2026 05:01:32 +0000
ROA not before: Mon 04 May 2026 05:01:32 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:383a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:20:0a:ad:74:4b:c1:e0:c0:9c:8f:33:38:b6:e9:8c:ee:61:ac:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 05:01:32 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=0cc9a0e6eacd80466b01b727d0d265978f405b1b6614dc925552b98d506fc4db, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:b1:29:ed:0c:1d:f1:ef:1f:a4:80:29:c2:
17:eb:e5:9a:a4:fb:3b:f4:e6:14:48:da:74:db:41:
b0:74:be:e4:9c:2d:ad:50:40:ee:50:9b:7d:3d:43:
3f:ce:8a:18:e4:3a:0b:c0:b6:d9:7f:d5:1c:99:18:
7e:e4:32:af:92:93:cd:a3:99:22:91:9a:5d:8a:57:
23:61:81:62:54:ee:c2:c5:8e:7a:1b:fb:38:31:af:
02:bd:1e:42:42:fd:72:02:b2:bf:38:91:36:1c:de:
53:2b:f9:e6:03:c3:2a:fd:6f:6b:25:1d:a1:50:3c:
d3:ba:f5:ab:eb:77:8a:c3:f8:50:ed:d2:bd:d0:57:
d4:d2:0a:4d:10:03:0b:94:13:5f:dd:fd:0e:9a:9c:
25:84:21:08:eb:33:89:8e:8b:78:9b:1b:db:aa:7e:
e6:5a:5a:5d:23:11:46:5b:aa:74:e4:b3:3b:08:0b:
00:c9:79:d4:1d:fe:2e:44:1a:24:0b:7b:97:6e:42:
49:ff:74:0b:fc:6e:b5:1b:f4:86:13:10:60:11:91:
a1:3f:91:d2:d2:67:44:41:66:67:00:19:2b:a9:71:
c1:c8:c9:f3:f7:b0:10:04:eb:67:82:7a:2f:4c:96:
67:e7:9b:79:67:3b:40:1f:5f:f5:fc:92:78:e0:66:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:79:5D:14:11:96:C2:D6:52:A6:7B:B1:8E:46:E4:3D:DE:1B:76:CE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66a60edf-0b7c-4a1c-a631-b93582b21d80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:383a::/47
Signature Algorithm: sha256WithRSAEncryption
6f:2e:2a:5d:4f:6b:03:91:a5:9a:78:48:98:f0:b2:62:3d:a9:
1f:cc:9b:f2:ae:70:7e:fd:96:99:7b:c5:ad:73:4f:c4:ab:e3:
d8:7e:42:cc:00:a4:e8:5b:ad:1a:9b:73:e6:b5:11:c9:3d:29:
a9:68:23:48:e3:59:e0:6e:32:d8:02:d8:60:ac:e3:05:cd:66:
8f:43:71:4f:90:0e:e7:d8:89:19:5e:70:48:8b:bb:fe:47:2d:
e9:69:c8:7f:0a:9f:98:6b:e5:90:b9:98:03:74:16:52:00:29:
8a:07:18:80:73:95:a5:92:e9:a0:e4:0f:7c:86:ff:cf:68:e9:
e4:f0:f9:24:92:77:88:ac:f1:16:ba:90:27:4d:5b:2a:30:9a:
69:12:df:4e:2e:80:99:f5:63:11:f1:b6:79:e4:ba:ae:10:eb:
f2:cf:b1:ea:05:07:9e:ff:43:95:c0:41:28:20:ea:54:ef:c3:
de:e9:2f:d7:f0:39:7d:e2:bd:6f:ce:5b:4d:9d:07:b0:35:23:
8e:f9:56:dd:6e:1e:63:9b:ca:69:38:67:40:6b:3b:02:f8:2a:
92:87:e6:18:bd:2b:b9:cb:c6:9f:3f:e4:cd:34:08:5e:4a:f2:
7e:90:09:42:50:bc:bd:c4:32:d6:19:04:79:56:c0:f0:0c:f2:
7d:41:31:59
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKCAKrXRLweDAnI8zOLbpjO5hrEEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDUwMTMyWhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwY2M5YTBlNmVhY2Q4MDQ2NmIwMWI3MjdkMGQyNjU5Nzhm
NDA1YjFiNjYxNGRjOTI1NTUyYjk4ZDUwNmZjNGRiMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqFLEp7Qwd8e8fpIApwhfr5Zqk+zv05hRI2nTbQbB0vuSc
La1QQO5Qm309Qz/OihjkOgvAttl/1RyZGH7kMq+Sk82jmSKRml2KVyNhgWJU7sLF
jnob+zgxrwK9HkJC/XICsr84kTYc3lMr+eYDwyr9b2slHaFQPNO69avrd4rD+FDt
0r3QV9TSCk0QAwuUE1/d/Q6anCWEIQjrM4mOi3ibG9uqfuZaWl0jEUZbqnTkszsI
CwDJedQd/i5EGiQLe5duQkn/dAv8brUb9IYTEGARkaE/kdLSZ0RBZmcAGSupccHI
yfP3sBAE62eCei9Mlmfnm3lnO0AfX/X8knjgZiJHAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUd3ldFBGWwtZSpnuxjkbkPd4bds4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzY2YTYwZWRmLTBiN2MtNGExYy1hNjMxLWI5MzU4MmIyMWQ4MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAODowDQYJKoZIhvcNAQELBQADggEBAG8uKl1PawORpZp4SJjwsmI9
qR/Mm/KucH79lpl7xa1zT8Sr49h+QswApOhbrRqbc+a1Eck9KaloI0jjWeBuMtgC
2GCs4wXNZo9DcU+QDufYiRlecEiLu/5HLelpyH8Kn5hr5ZC5mAN0FlIAKYoHGIBz
laWS6aDkD3yG/89o6eTw+SSSd4is8Ra6kCdNWyowmmkS304ugJn1YxHxtnnkuq4Q
6/LPseoFB57/Q5XAQSgg6lTvw97pL9fwOX3ivW/OW02dB7A1I475Vt1uHmObymk4
Z0BrOwL4KpKH5hi9K7nLxp8/5M00CF5K8n6QCUJQvL3EMtYZBHlWwPAM8n1BMVk=
-----END CERTIFICATE-----
Generated at Wed May 13 01:00:26 2026 by rpki-client