
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/89e8e7de-e3d6-4510-8496-6cb961091475.roa
File: 89e8e7de-e3d6-4510-8496-6cb961091475.roa (raw, json)
Hash identifier: Dn08rynAtOVIg1Q5CPGtG06qUoNssAUTiJE48TzKRlA=
Subject key identifier: F1:E3:EE:A6:30:9A:9D:19:DA:97:4D:A6:91:7E:63:97:90:37:E2:C7
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 57E80CB046F77DC1577DA8B53BB2024EC5EB8E1C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/89e8e7de-e3d6-4510-8496-6cb961091475.roa
Signing time: Thu 23 Jul 2026 13:20:41 +0000
ROA not before: Thu 23 Jul 2026 13:20:41 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3aaa::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e8:0c:b0:46:f7:7d:c1:57:7d:a8:b5:3b:b2:02:4e:c5:eb:8e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 13:20:41 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=e91dde8425e8b7dd41941d24bc53d39081bbefb120b6deab22117cea28aca674, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:b7:db:b7:89:d5:38:b3:ab:14:bc:02:1b:
fd:43:fe:b8:9d:cd:6a:b4:50:bf:8d:59:2b:3f:76:
cb:08:e3:15:6e:62:4b:cd:8e:46:ba:86:66:70:7f:
ff:fa:d9:cf:09:78:4c:0a:75:f6:40:b1:7e:ee:94:
ad:04:bd:f4:35:1d:d7:de:f8:ac:64:8e:55:ed:c9:
4b:2b:37:d4:86:16:92:d2:9f:13:dc:ca:d0:34:32:
33:9a:47:a9:57:a4:41:c3:64:0f:49:fc:d0:52:b1:
2a:af:54:00:95:9c:17:35:1d:af:4b:e4:25:ec:d1:
c6:bb:52:8b:42:25:11:20:34:2c:04:55:34:a7:3e:
02:ba:d6:d2:22:f9:00:ad:58:8a:c4:59:14:68:d8:
17:ff:d0:a0:b1:4e:33:cb:8b:3e:ab:27:bb:f6:08:
2e:99:93:77:55:d9:fd:28:51:ab:ba:a5:5c:76:ad:
cd:77:d8:cf:a4:4a:fd:e1:f6:6c:ec:00:5b:fe:dc:
29:8f:90:ab:cf:42:6e:3b:a6:74:42:0b:27:a7:09:
a3:89:fb:07:13:77:af:0a:75:2a:95:7a:47:f6:28:
08:b8:f5:9d:00:3b:08:be:32:5f:66:96:1a:6f:46:
e4:c5:89:e6:11:c0:71:83:bf:71:9c:f2:9a:9a:ff:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E3:EE:A6:30:9A:9D:19:DA:97:4D:A6:91:7E:63:97:90:37:E2:C7
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/89e8e7de-e3d6-4510-8496-6cb961091475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3aaa::/47
Signature Algorithm: sha256WithRSAEncryption
8d:41:6a:7d:f0:9a:ff:91:e4:5a:b7:f0:8c:4e:6b:ee:f0:01:
f9:4c:ce:cb:44:0a:b6:0b:e0:0b:17:f8:c5:6c:4c:ca:63:57:
b8:e2:13:21:cc:a4:4e:3c:64:c0:4c:1b:36:79:ba:a9:23:98:
ca:c0:31:e5:68:fb:7c:2c:3e:44:f3:8d:79:1f:a0:59:f5:98:
a9:f6:39:93:43:30:7b:21:90:81:0c:8d:09:dd:33:1a:df:f4:
89:03:27:65:15:54:dc:ff:17:db:66:9b:ac:81:18:a1:7f:9c:
d3:9b:46:36:ee:a8:b7:85:76:8d:1e:3a:53:2a:69:8a:0c:c1:
cf:30:54:7e:03:19:2b:c3:d4:9f:b2:44:1e:2f:1c:f5:ff:43:
79:8c:bd:0d:0a:97:07:c8:c9:be:52:8b:9c:db:f0:fe:28:2a:
da:6b:29:b9:4c:5e:74:d2:80:a5:a3:4c:aa:21:05:01:63:02:
ca:bc:a3:99:d9:14:3f:50:ef:cd:27:96:fe:c2:85:31:6d:07:
00:d8:f0:cf:a7:4e:c6:87:10:28:c5:ce:ce:c0:01:28:29:fb:
75:d1:3a:40:e4:97:16:12:5d:0d:76:0b:8c:46:81:99:0d:bc:
cb:77:0d:5f:ed:27:de:36:f7:3d:ae:df:18:b5:a6:12:e6:32:
bd:21:3d:eb
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUV+gMsEb3fcFXfai1O7ICTsXrjhwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTMyMDQxWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTFkZGU4NDI1ZThiN2RkNDE5NDFkMjRiYzUzZDM5MDgx
YmJlZmIxMjBiNmRlYWIyMjExN2NlYTI4YWNhNjc0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1v7fbt4nVOLOrFLwCG/1D/ridzWq0UL+NWSs/dssI4xVu
YkvNjka6hmZwf//62c8JeEwKdfZAsX7ulK0EvfQ1Hdfe+KxkjlXtyUsrN9SGFpLS
nxPcytA0MjOaR6lXpEHDZA9J/NBSsSqvVACVnBc1Ha9L5CXs0ca7UotCJREgNCwE
VTSnPgK61tIi+QCtWIrEWRRo2Bf/0KCxTjPLiz6rJ7v2CC6Zk3dV2f0oUau6pVx2
rc132M+kSv3h9mzsAFv+3CmPkKvPQm47pnRCCyenCaOJ+wcTd68KdSqVekf2KAi4
9Z0AOwi+Ml9mlhpvRuTFieYRwHGDv3Gc8pqa/2N/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU8ePupjCanRnal02mkX5jl5A34scwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzg5ZThlN2RlLWUzZDYtNDUxMC04NDk2LTZjYjk2MTA5MTQ3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAOqowDQYJKoZIhvcNAQELBQADggEBAI1Ban3wmv+R5Fq38IxOa+7w
AflMzstECrYL4AsX+MVsTMpjV7jiEyHMpE48ZMBMGzZ5uqkjmMrAMeVo+3wsPkTz
jXkfoFn1mKn2OZNDMHshkIEMjQndMxrf9IkDJ2UVVNz/F9tmm6yBGKF/nNObRjbu
qLeFdo0eOlMqaYoMwc8wVH4DGSvD1J+yRB4vHPX/Q3mMvQ0KlwfIyb5Si5zb8P4o
KtprKblMXnTSgKWjTKohBQFjAsq8o5nZFD9Q780nlv7ChTFtBwDY8M+nTsaHECjF
zs7AASgp+3XROkDklxYSXQ12C4xGgZkNvMt3DV/tJ9429z2u3xi1phLmMr0hPes=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:18:28 2026 by rpki-client