
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8440e612-c7f4-4d97-9c60-0b39407f5145.roa
File: 8440e612-c7f4-4d97-9c60-0b39407f5145.roa (raw, json)
Hash identifier: qoj2kQL1sEe4dVnam9WW7TCkd5UsemIVGmSgQ/8srGw=
Subject key identifier: 29:B2:7C:14:2A:2E:D4:DC:4C:F9:7D:E5:EA:AF:50:37:A3:F8:00:C8
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 5D2625F22276B06D9BA57A02973CD148259DD702
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8440e612-c7f4-4d97-9c60-0b39407f5145.roa
Signing time: Wed 22 Jul 2026 03:31:56 +0000
ROA not before: Wed 22 Jul 2026 03:31:56 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2ee4::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:26:25:f2:22:76:b0:6d:9b:a5:7a:02:97:3c:d1:48:25:9d:d7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 03:31:56 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=17fd7472ab68596416109c798ee810a7a464f9b3dc53ec4177e1081c00d393fa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:32:31:b0:e1:a1:b8:d6:9f:91:a1:63:7f:4b:
22:f6:83:f1:69:5f:bb:90:6e:d8:86:0c:e2:9a:6a:
e7:c7:5c:12:c4:da:b4:ac:47:10:b7:20:bd:d7:9f:
af:47:1a:b6:14:3a:0a:e4:19:b3:74:e1:77:9c:6d:
46:68:d3:4c:08:fd:54:30:d2:d0:83:07:de:0f:87:
85:a4:8d:ab:a1:7f:e5:7c:c9:63:58:da:0b:90:88:
29:96:88:0b:81:58:f5:16:56:60:78:db:41:0d:8d:
89:ee:32:d4:a5:e6:45:7e:ba:6c:43:be:3b:43:72:
7a:d2:e6:c3:32:79:46:dc:7c:12:83:c2:3c:31:fb:
b6:1d:b8:e7:cf:c9:45:fa:fe:50:8e:81:e6:80:78:
84:36:38:d3:03:c0:ec:13:d4:9f:6f:5e:ff:ae:bb:
28:97:74:20:00:85:89:be:15:da:9b:a3:ad:16:fc:
04:ea:e6:ea:a0:fb:e1:e7:6f:0b:31:fd:15:dd:28:
78:d2:44:89:fe:4c:96:3b:54:3a:81:38:9e:be:76:
a6:01:0c:1b:32:ef:29:9d:a8:29:75:e5:5a:44:e4:
aa:b2:a6:ee:8d:7b:06:bb:9f:d4:5d:e0:7b:3c:ca:
c7:2e:0d:e9:77:46:1e:1d:f1:8f:e9:7c:0b:a4:2a:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B2:7C:14:2A:2E:D4:DC:4C:F9:7D:E5:EA:AF:50:37:A3:F8:00:C8
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8440e612-c7f4-4d97-9c60-0b39407f5145.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2ee4::/47
Signature Algorithm: sha256WithRSAEncryption
3e:d9:78:2d:68:96:d2:1f:eb:48:62:ca:31:c7:55:72:7d:db:
77:70:2c:84:f3:d0:fd:64:09:65:33:e5:53:0b:1a:01:fb:d9:
50:2d:a4:87:eb:f5:bd:34:ab:46:42:10:a9:f7:2b:bc:4d:18:
e3:10:70:d0:b4:d9:09:b8:72:67:8c:93:d2:11:40:09:f9:6d:
ad:fa:31:aa:e9:14:96:8f:57:b5:df:d8:71:b8:de:7f:60:20:
51:53:79:2d:a4:f5:80:52:e6:a1:d3:70:2d:6e:c0:b3:fe:16:
7a:e2:85:3f:d2:89:36:5a:03:70:cb:94:77:e7:06:01:5b:d5:
a3:4b:45:7b:b9:4d:36:d3:3e:9c:43:aa:08:1d:f8:bd:18:7a:
8d:91:b4:08:98:eb:c1:6d:fd:59:97:a3:1f:a3:9a:92:0a:7a:
04:53:76:84:aa:a0:5f:d2:26:cf:26:32:cc:01:9d:5f:f7:0a:
2e:84:4d:ac:84:b9:6c:aa:b0:7c:ee:19:cb:4d:ba:e3:d9:9c:
82:74:94:89:58:e1:0b:56:92:59:00:4d:85:59:2f:86:c4:27:
1b:38:78:d2:26:b7:61:77:6e:de:34:ff:a3:13:52:d1:da:8f:
62:c8:9f:05:0c:05:7b:70:ff:51:40:d1:06:2d:d7:bd:3c:73:
38:2f:8f:31
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXSYl8iJ2sG2bpXoClzzRSCWd1wIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDMzMTU2WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AxN2ZkNzQ3MmFiNjg1OTY0MTYxMDljNzk4ZWU4MTBhN2E0
NjRmOWIzZGM1M2VjNDE3N2UxMDgxYzAwZDM5M2ZhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCJMjGw4aG41p+RoWN/SyL2g/FpX7uQbtiGDOKaaufHXBLE
2rSsRxC3IL3Xn69HGrYUOgrkGbN04XecbUZo00wI/VQw0tCDB94Ph4Wkjauhf+V8
yWNY2guQiCmWiAuBWPUWVmB420ENjYnuMtSl5kV+umxDvjtDcnrS5sMyeUbcfBKD
wjwx+7YduOfPyUX6/lCOgeaAeIQ2ONMDwOwT1J9vXv+uuyiXdCAAhYm+Fdqbo60W
/ATq5uqg++Hnbwsx/RXdKHjSRIn+TJY7VDqBOJ6+dqYBDBsy7ymdqCl15VpE5Kqy
pu6Newa7n9Rd4Hs8yscuDel3Rh4d8Y/pfAukKot1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKbJ8FCou1NxM+X3l6q9QN6P4AMgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzg0NDBlNjEyLWM3ZjQtNGQ5Ny05YzYwLTBiMzk0MDdmNTE0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAALuQwDQYJKoZIhvcNAQELBQADggEBAD7ZeC1oltIf60hiyjHHVXJ9
23dwLITz0P1kCWUz5VMLGgH72VAtpIfr9b00q0ZCEKn3K7xNGOMQcNC02Qm4cmeM
k9IRQAn5ba36MarpFJaPV7Xf2HG43n9gIFFTeS2k9YBS5qHTcC1uwLP+FnrihT/S
iTZaA3DLlHfnBgFb1aNLRXu5TTbTPpxDqggd+L0Yeo2RtAiY68Ft/VmXox+jmpIK
egRTdoSqoF/SJs8mMswBnV/3Ci6ETayEuWyqsHzuGctNuuPZnIJ0lIlY4QtWklkA
TYVZL4bEJxs4eNImt2F3bt40/6MTUtHaj2LInwUMBXtw/1FA0QYt1708czgvjzE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:53 2026 by rpki-client