
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8317c013-1a64-4a11-ae08-8b880654e6a6.roa
File: 8317c013-1a64-4a11-ae08-8b880654e6a6.roa (raw, json)
Hash identifier: 9otP4i8h8Sr3E0JT01pMDYlmxWI1t4F5TnxeGKQKJZg=
Subject key identifier: 76:D7:82:01:42:4F:2A:62:42:76:DB:E4:28:DA:8B:21:F3:E6:BF:1F
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 40BAD9935CEA323E32890A90AC55E4BBC48FE844
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8317c013-1a64-4a11-ae08-8b880654e6a6.roa
Signing time: Mon 04 May 2026 12:42:00 +0000
ROA not before: Mon 04 May 2026 12:42:00 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3626::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ba:d9:93:5c:ea:32:3e:32:89:0a:90:ac:55:e4:bb:c4:8f:e8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 12:42:00 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=a50ff82a919c255e57c271d6f69836d13844884ac91bff3c3ec2ac4316a273c3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:5c:59:ee:cc:6a:e3:7b:7d:7c:ed:7a:0b:
27:bc:39:55:f0:29:e6:27:46:11:1c:ea:8c:c0:a5:
df:ef:3e:7e:e2:24:2f:06:39:38:73:94:b6:d2:44:
d4:f1:c6:c9:83:2b:71:43:93:1f:9d:ae:21:01:e6:
e3:01:c8:89:bb:c4:99:52:b2:4f:6d:d3:ba:94:66:
f1:a0:f8:12:b9:e8:96:86:29:a7:d1:7c:62:ba:bb:
fb:cb:13:bf:a3:03:31:ee:18:26:47:e6:00:0d:33:
63:a2:21:9a:59:70:0b:73:e7:51:12:5f:4b:a8:c5:
76:3b:47:4f:54:1a:d5:4b:84:80:37:2e:a6:e0:37:
c8:b1:94:9c:bd:87:1d:d3:15:f6:5d:cb:bd:80:e4:
9f:5d:46:92:ad:e9:55:71:9b:94:ce:73:5c:9a:8f:
32:17:ec:7d:75:96:10:99:ca:72:c7:f6:1b:ee:ad:
ca:20:e2:7c:2b:3b:61:7c:b1:51:0b:a1:91:fb:72:
be:a4:4c:52:a2:d5:4e:be:07:3a:13:e7:80:44:9f:
48:85:99:a6:1a:9f:5b:ac:31:3e:4f:06:07:7b:37:
40:c2:f9:c2:a0:4e:c5:ea:c5:6a:8d:06:b2:b5:81:
80:6b:57:10:e7:5f:c9:17:4c:4d:ef:5e:e1:b0:8d:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D7:82:01:42:4F:2A:62:42:76:DB:E4:28:DA:8B:21:F3:E6:BF:1F
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8317c013-1a64-4a11-ae08-8b880654e6a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3626::/47
Signature Algorithm: sha256WithRSAEncryption
4d:40:6b:e9:aa:a8:67:3f:50:f8:33:92:19:f4:f7:f4:2b:3d:
22:93:92:ab:33:d1:82:08:21:33:53:f0:1d:9c:2d:3a:ca:6f:
3c:89:0c:0b:51:54:5f:69:54:24:ba:41:c2:22:a3:8d:5e:a1:
4d:ba:63:4c:b5:ca:9f:34:8e:af:9a:34:7e:7e:29:b3:5f:17:
53:3b:61:0f:27:49:d2:c3:d5:e2:cb:54:87:bd:84:4e:8e:e0:
50:6f:86:6f:5e:5d:3f:00:61:23:65:9e:64:09:63:23:c4:83:
71:0c:44:08:e1:b4:4c:b6:d8:bd:00:27:a3:6c:e4:a5:4e:7e:
ba:25:43:91:87:23:71:1a:6b:cd:4e:eb:71:0b:98:7e:71:b0:
ff:0f:94:65:31:e6:13:ce:79:38:34:1b:b8:38:d1:71:dd:00:
9e:4b:0a:09:99:7c:73:ef:a3:31:12:53:ab:a4:0d:64:9e:11:
c5:fd:27:be:af:ed:ef:3c:41:54:d4:aa:fd:4a:79:95:9b:5a:
69:ee:1f:73:16:0e:ac:a6:2d:11:27:74:92:ca:cb:0b:c4:ef:
54:0c:d0:ea:f0:3c:b5:41:4d:6c:48:74:42:55:23:e6:bc:d2:
97:4a:4c:1d:08:52:8c:41:3f:d0:8f:bc:5e:5b:93:3c:8c:c1:
f8:8e:be:e2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQLrZk1zqMj4yiQqQrFXku8SP6EQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTI0MjAwWhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNTBmZjgyYTkxOWMyNTVlNTdjMjcxZDZmNjk4MzZkMTM4
NDQ4ODRhYzkxYmZmM2MzZWMyYWM0MzE2YTI3M2MzMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8q1xZ7sxq43t9fO16Cye8OVXwKeYnRhEc6ozApd/vPn7i
JC8GOThzlLbSRNTxxsmDK3FDkx+driEB5uMByIm7xJlSsk9t07qUZvGg+BK56JaG
KafRfGK6u/vLE7+jAzHuGCZH5gANM2OiIZpZcAtz51ESX0uoxXY7R09UGtVLhIA3
LqbgN8ixlJy9hx3TFfZdy72A5J9dRpKt6VVxm5TOc1yajzIX7H11lhCZynLH9hvu
rcog4nwrO2F8sVELoZH7cr6kTFKi1U6+BzoT54BEn0iFmaYan1usMT5PBgd7N0DC
+cKgTsXqxWqNBrK1gYBrVxDnX8kXTE3vXuGwjVqFAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUdteCAUJPKmJCdtvkKNqLIfPmvx8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzgzMTdjMDEzLTFhNjQtNGExMS1hZTA4LThiODgwNjU0ZTZhNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAANiYwDQYJKoZIhvcNAQELBQADggEBAE1Aa+mqqGc/UPgzkhn09/Qr
PSKTkqsz0YIIITNT8B2cLTrKbzyJDAtRVF9pVCS6QcIio41eoU26Y0y1yp80jq+a
NH5+KbNfF1M7YQ8nSdLD1eLLVIe9hE6O4FBvhm9eXT8AYSNlnmQJYyPEg3EMRAjh
tEy22L0AJ6Ns5KVOfrolQ5GHI3Eaa81O63ELmH5xsP8PlGUx5hPOeTg0G7g40XHd
AJ5LCgmZfHPvozESU6ukDWSeEcX9J76v7e88QVTUqv1KeZWbWmnuH3MWDqymLREn
dJLKywvE71QM0OrwPLVBTWxIdEJVI+a80pdKTB0IUoxBP9CPvF5bkzyMwfiOvuI=
-----END CERTIFICATE-----
Generated at Wed May 13 02:23:10 2026 by rpki-client