
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/943a9812-f488-4c98-b7e0-2ca3035f5670.roa
File: 943a9812-f488-4c98-b7e0-2ca3035f5670.roa (raw, json)
Hash identifier: VkTI0bz1Bh/ZUYDu7lV4roo39BtRkQwmvaL6HdcMTSo=
Subject key identifier: 83:11:19:47:97:B5:CE:EC:6D:B2:6A:96:7C:5B:B0:2A:94:BB:53:69
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 611A09B67717344F409334241B023492A573BFFC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/943a9812-f488-4c98-b7e0-2ca3035f5670.roa
Signing time: Wed 22 Jul 2026 03:31:57 +0000
ROA not before: Wed 22 Jul 2026 03:31:57 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:29d2::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:1a:09:b6:77:17:34:4f:40:93:34:24:1b:02:34:92:a5:73:bf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jul 22 03:31:57 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=6fc1d9cb5ac185cbb9e7de786cf20f5ed453f04b1e5268c917d744cefb34913c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:27:62:0a:05:59:ff:3a:75:b0:ce:45:13:
d5:02:da:1a:01:11:c6:e3:5b:4a:53:5e:e2:d3:a3:
4a:ad:a3:74:62:94:f0:b0:87:b9:35:4f:5d:0e:be:
e7:99:a4:66:f2:9e:22:40:97:be:1b:46:c5:50:2b:
37:1c:37:9d:d3:59:73:28:71:df:9f:46:a5:6b:53:
49:24:b1:6b:04:7c:68:8f:ed:67:0c:45:21:84:0f:
1e:98:3c:fa:1d:c8:7e:ef:b1:7d:1f:2b:a6:de:57:
b7:50:80:6c:4a:6c:3b:cf:23:3c:9a:8b:d1:66:d9:
4d:7e:4c:48:8d:d3:d7:c6:4b:73:68:39:87:ac:01:
73:dd:47:a4:50:5c:d4:60:26:5a:5d:9d:b2:0a:22:
00:c7:8b:74:38:3c:31:90:1f:e5:2e:1b:75:1b:a3:
61:46:dd:ca:d5:a4:88:48:2e:71:97:cd:6b:de:59:
69:f1:1a:43:86:2e:b9:8f:c9:b2:3e:f6:d7:d2:69:
7d:12:26:33:e6:8e:14:dc:31:68:e9:f1:78:73:37:
b0:cf:ec:f2:ab:a5:9e:c5:fa:ca:1a:ca:ab:eb:3f:
a7:a9:01:f7:13:55:0d:10:7e:09:c1:f7:50:b2:ea:
bd:5e:bc:65:18:46:ea:3f:e6:bd:37:2d:12:55:f2:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:19:47:97:B5:CE:EC:6D:B2:6A:96:7C:5B:B0:2A:94:BB:53:69
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/943a9812-f488-4c98-b7e0-2ca3035f5670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:29d2::/47
Signature Algorithm: sha256WithRSAEncryption
68:b0:fc:85:a7:7f:5b:c3:c5:38:ac:a9:62:1f:51:9e:91:82:
2b:21:fa:da:67:39:bf:9d:d9:92:7b:c9:2d:16:ab:a9:d5:af:
81:ae:2d:ce:cd:3e:c4:4d:57:47:9d:85:ac:53:77:d8:25:ea:
b8:9b:a0:69:97:80:96:1d:3c:44:b3:ca:61:1a:eb:c9:7d:cf:
f3:ea:a7:ae:6d:fb:86:d8:bc:3f:87:e7:bb:fa:d8:5e:85:b1:
24:60:ca:df:c7:b3:11:05:72:13:b7:6e:e4:58:c2:f3:2c:b2:
c8:c1:cd:13:fe:43:ed:8c:df:12:f1:fa:0f:fe:61:43:6b:49:
ad:61:89:4e:72:3e:70:f0:6e:df:f4:3d:fc:eb:a8:ea:fe:db:
43:e2:7a:f1:2b:d5:26:70:59:3a:9d:05:6c:ab:be:13:08:94:
eb:32:11:7d:9b:4b:47:88:fd:51:1c:1c:96:95:b6:df:75:af:
57:1b:92:7b:10:8b:06:80:d2:00:ee:1a:95:d6:7a:ad:a2:3d:
d4:c5:83:f2:f0:41:42:35:46:b9:0d:c1:b5:00:44:a3:11:81:
59:22:14:9d:68:c1:a9:bd:fa:ee:02:13:5a:a0:06:44:f7:d9:
7e:37:e1:70:b5:73:be:7d:77:d1:6a:75:48:44:7c:62:e7:25:
df:22:c8:be
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYRoJtncXNE9AkzQkGwI0kqVzv/wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDMzMTU3WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZmMxZDljYjVhYzE4NWNiYjllN2RlNzg2Y2YyMGY1ZWQ0
NTNmMDRiMWU1MjY4YzkxN2Q3NDRjZWZiMzQ5MTNjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+GydiCgVZ/zp1sM5FE9UC2hoBEcbjW0pTXuLTo0qto3Ri
lPCwh7k1T10OvueZpGbyniJAl74bRsVQKzccN53TWXMocd+fRqVrU0kksWsEfGiP
7WcMRSGEDx6YPPodyH7vsX0fK6beV7dQgGxKbDvPIzyai9Fm2U1+TEiN09fGS3No
OYesAXPdR6RQXNRgJlpdnbIKIgDHi3Q4PDGQH+UuG3Ubo2FG3crVpIhILnGXzWve
WWnxGkOGLrmPybI+9tfSaX0SJjPmjhTcMWjp8XhzN7DP7PKrpZ7F+soayqvrP6ep
AfcTVQ0QfgnB91Cy6r1evGUYRuo/5r03LRJV8sz7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUgxEZR5e1zuxtsmqWfFuwKpS7U2kwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzk0M2E5ODEyLWY0ODgtNGM5OC1iN2UwLTJjYTMwMzVmNTY3MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAKdIwDQYJKoZIhvcNAQELBQADggEBAGiw/IWnf1vDxTisqWIfUZ6R
gish+tpnOb+d2ZJ7yS0Wq6nVr4GuLc7NPsRNV0edhaxTd9gl6riboGmXgJYdPESz
ymEa68l9z/Pqp65t+4bYvD+H57v62F6FsSRgyt/HsxEFchO3buRYwvMsssjBzRP+
Q+2M3xLx+g/+YUNrSa1hiU5yPnDwbt/0PfzrqOr+20PievEr1SZwWTqdBWyrvhMI
lOsyEX2bS0eI/VEcHJaVtt91r1cbknsQiwaA0gDuGpXWeq2iPdTFg/LwQUI1RrkN
wbUARKMRgVkiFJ1owam9+u4CE1qgBkT32X434XC1c759d9FqdUhEfGLnJd8iyL4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:52 2026 by rpki-client