
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b12f0aa-81b1-43e6-ad49-cdb152f8c09d.roa
File: 8b12f0aa-81b1-43e6-ad49-cdb152f8c09d.roa (raw, json)
Hash identifier: xrj6S5iZa/sc9ty+fgKgveHMHRuBtDQ2KRCMWDdh5HU=
Subject key identifier: 37:E9:13:2F:D4:6F:BD:99:89:93:CA:01:C7:C8:66:E8:AA:BB:F9:28
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 05C5F85FBCF8D78A67BD92FF91A1E00433F6EFD2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b12f0aa-81b1-43e6-ad49-cdb152f8c09d.roa
Signing time: Thu 23 Jul 2026 03:20:12 +0000
ROA not before: Thu 23 Jul 2026 03:20:12 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3b00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:c5:f8:5f:bc:f8:d7:8a:67:bd:92:ff:91:a1:e0:04:33:f6:ef:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 23 03:20:12 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=a64ba9fcae0127c94911e171bb590f0e11f4c22fd077f5a16dfb8ce234ad30a6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:b0:dc:34:06:16:1e:5c:ce:50:c3:c1:3e:
4a:1b:b9:d8:0a:69:81:4c:16:00:ee:30:26:6f:f3:
3f:20:b9:c3:d8:79:c5:9c:e6:67:33:ca:d3:23:be:
9b:07:8f:66:3c:8a:69:6c:9d:68:97:93:17:33:5b:
f6:20:8b:b6:16:eb:c0:ce:20:96:ff:d7:37:34:ce:
d5:a9:ed:37:93:8e:a0:17:8f:ad:7a:b4:fb:7a:17:
41:37:c7:a8:bb:98:ca:db:4d:59:fa:b6:51:8c:d0:
d0:c3:1f:6e:47:88:16:28:9d:68:8b:68:b5:18:ab:
68:72:55:1f:70:3a:56:5e:0a:31:66:dd:8b:35:94:
9d:01:9d:d2:28:a8:0e:ea:be:8f:c9:ed:8d:f5:db:
d4:65:94:7b:34:93:5f:2a:ee:cf:43:50:e2:b0:17:
a9:80:90:a8:8e:cf:85:e5:48:8d:62:16:25:f0:54:
43:f7:8c:df:95:c5:38:e4:e1:83:eb:e8:6c:54:ed:
48:75:0f:9d:71:28:11:f7:93:69:b2:81:ab:0c:97:
6c:84:fb:0f:4c:7b:a1:91:91:dc:98:9c:fd:b9:cf:
06:e9:a6:30:9e:e8:c9:7c:52:56:c6:6e:c4:97:e7:
04:3c:ae:64:ec:87:84:7a:a0:c5:eb:9b:7b:50:a4:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:13:2F:D4:6F:BD:99:89:93:CA:01:C7:C8:66:E8:AA:BB:F9:28
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b12f0aa-81b1-43e6-ad49-cdb152f8c09d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3b00::/41
Signature Algorithm: sha256WithRSAEncryption
41:59:e3:d9:ee:07:db:74:cb:4c:9a:3c:79:6c:ee:30:b5:47:
04:97:51:68:ed:b0:24:4b:ef:25:ea:bd:9f:7b:3e:79:ac:cc:
88:3a:27:b8:4e:26:59:31:94:2b:d4:e7:22:6a:07:2f:58:51:
50:f8:d6:c3:46:be:2b:29:fd:66:70:86:22:41:71:bb:3d:37:
10:94:81:bb:9b:2a:b2:9e:76:40:b9:28:5f:89:16:12:27:ff:
7d:78:45:0c:7b:47:8f:be:25:54:42:31:3c:81:c9:ad:4d:6d:
f6:d2:07:70:93:bd:8a:68:c7:11:40:66:8b:3f:69:05:b7:92:
71:6e:08:0f:3a:6f:76:0d:12:7a:8d:2d:5c:b9:32:fc:4b:21:
6e:91:df:87:bd:bc:3a:40:16:69:43:06:f8:4c:8f:1e:8d:d0:
c7:10:cf:77:17:7c:e4:fc:71:23:8a:93:5c:b4:4b:45:38:92:
99:98:c1:4d:13:91:20:59:05:89:c4:c3:70:39:53:7d:b8:8b:
0a:dd:ae:2f:b7:d7:f9:33:9a:3e:d6:32:1a:48:e7:40:52:ea:
2a:6b:ee:11:68:79:3f:3d:bb:e6:ff:cd:b1:6c:8a:4d:2a:cf:
c9:fd:42:4c:9f:a4:b7:61:99:f8:e7:9a:c4:88:5c:b1:70:e5:
46:4f:90:68
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBcX4X7z414pnvZL/kaHgBDP279IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDMyMDEyWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BhNjRiYTlmY2FlMDEyN2M5NDkxMWUxNzFiYjU5MGYwZTEx
ZjRjMjJmZDA3N2Y1YTE2ZGZiOGNlMjM0YWQzMGE2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgtrDcNAYWHlzOUMPBPkobudgKaYFMFgDuMCZv8z8gucPY
ecWc5mczytMjvpsHj2Y8imlsnWiXkxczW/Ygi7YW68DOIJb/1zc0ztWp7TeTjqAX
j616tPt6F0E3x6i7mMrbTVn6tlGM0NDDH25HiBYonWiLaLUYq2hyVR9wOlZeCjFm
3Ys1lJ0BndIoqA7qvo/J7Y3129RllHs0k18q7s9DUOKwF6mAkKiOz4XlSI1iFiXw
VEP3jN+VxTjk4YPr6GxU7Uh1D51xKBH3k2mygasMl2yE+w9Me6GRkdyYnP25zwbp
pjCe6Ml8UlbGbsSX5wQ8rmTsh4R6oMXrm3tQpNsBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUN+kTL9RvvZmJk8oBx8hm6Kq7+SgwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhiMTJmMGFhLTgxYjEtNDNlNi1hZDQ5LWNkYjE1MmY4YzA5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwcmAJAAOwAwDQYJKoZIhvcNAQELBQADggEBAEFZ49nuB9t0y0yaPHls7jC1
RwSXUWjtsCRL7yXqvZ97PnmszIg6J7hOJlkxlCvU5yJqBy9YUVD41sNGvisp/WZw
hiJBcbs9NxCUgbubKrKedkC5KF+JFhIn/314RQx7R4++JVRCMTyBya1NbfbSB3CT
vYpoxxFAZos/aQW3knFuCA86b3YNEnqNLVy5MvxLIW6R34e9vDpAFmlDBvhMjx6N
0McQz3cXfOT8cSOKk1y0S0U4kpmYwU0TkSBZBYnEw3A5U324iwrdri+31/kzmj7W
MhpI50BS6ipr7hFoeT89u+b/zbFsik0qz8n9QkyfpLdhmfjnmsSIXLFw5UZPkGg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:05 2026 by rpki-client