
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c837f86-04f2-42ae-92a7-9f4614369f33.roa
File: 9c837f86-04f2-42ae-92a7-9f4614369f33.roa (raw, json)
Hash identifier: IqCau2KdVKZwTLKEsgbmFinNRHnzt9Ue80y8w3nhJr4=
Subject key identifier: 21:05:44:8F:CD:0A:6C:83:0F:AD:D2:BD:E1:BF:8C:83:2A:BA:7F:89
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 25E5A3B13E598CE9FD565BA0F5DB03FF4E35BE6C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c837f86-04f2-42ae-92a7-9f4614369f33.roa
Signing time: Mon 04 May 2026 05:21:45 +0000
ROA not before: Mon 04 May 2026 05:21:45 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3828::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e5:a3:b1:3e:59:8c:e9:fd:56:5b:a0:f5:db:03:ff:4e:35:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 05:21:45 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=f11cd9f82f0918dcaab563123fee670a4b81878cf33d30810e35866e21966dba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:2c:af:2e:e5:4c:ca:09:91:e2:ee:ef:72:
25:90:99:36:8e:a4:6e:8e:39:45:c9:37:8c:7a:ac:
97:a4:0c:ea:f4:16:5a:97:dd:23:d6:87:c3:52:61:
95:d2:13:c1:13:04:80:5d:17:e6:70:7e:a5:75:d9:
12:b0:39:c8:88:37:cd:02:fa:05:89:e5:62:fe:ca:
5d:f0:ca:7e:db:8f:c7:f4:9f:2e:2f:f1:dd:07:50:
82:59:37:9e:5f:3a:b3:f5:e9:7e:57:8e:13:84:4e:
37:3b:b8:98:05:60:91:a1:e8:28:e2:e6:55:7a:ca:
df:77:c6:c4:a2:b4:9c:ae:23:47:f8:f0:aa:2c:6d:
fa:d5:f4:e2:17:e6:9b:2b:f4:d4:8b:58:62:ba:09:
f0:e0:54:53:be:d6:ae:c5:5f:36:9b:e9:27:ea:34:
4e:64:45:b3:ac:41:02:c1:80:43:19:1f:ae:43:d4:
d3:5e:be:92:48:a7:fe:3f:69:4c:99:65:e1:6b:67:
ed:9c:f2:74:50:33:e7:25:82:a0:77:4e:d9:8a:cc:
f5:02:82:17:82:8c:93:be:aa:a2:91:08:bf:3d:62:
d0:00:df:5e:97:b0:f1:ef:33:1a:35:82:19:9f:c1:
4e:5e:b3:d0:68:d8:4c:f8:fc:37:c6:f7:25:68:35:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:05:44:8F:CD:0A:6C:83:0F:AD:D2:BD:E1:BF:8C:83:2A:BA:7F:89
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c837f86-04f2-42ae-92a7-9f4614369f33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3828::/46
Signature Algorithm: sha256WithRSAEncryption
13:47:4a:fd:72:73:38:a9:61:4c:e7:ef:ce:fb:d7:0e:40:ee:
fb:01:3d:b8:98:0f:5e:2b:66:7a:17:fc:4a:8c:b3:0a:e0:c1:
16:a6:47:0a:83:28:ed:02:63:48:53:1c:6c:6a:c3:01:0a:40:
a2:6d:85:22:e9:48:2b:a2:00:ee:f7:e0:81:1b:c9:d0:6e:d8:
ff:5a:be:ca:e2:dd:59:8d:18:84:60:67:96:31:11:7a:9f:a7:
2c:1c:ee:1e:0a:33:87:89:9e:8b:8f:c9:9c:06:61:b5:43:ed:
cb:7f:7c:69:02:56:2f:a8:a2:36:1a:b1:0d:36:b6:5d:97:a8:
93:83:bb:7e:c1:8c:2a:29:e9:a0:f0:e3:09:18:84:58:86:fb:
33:74:87:22:1b:f9:fe:06:ce:42:eb:6e:6c:9a:87:e8:6e:87:
2b:cc:a5:f3:4f:f7:61:80:24:53:41:53:84:96:55:32:9e:a0:
e3:5b:ae:60:17:e9:49:84:7d:10:c2:8c:90:b0:20:79:e6:09:
eb:65:af:8c:44:e4:64:22:1c:ba:e2:ed:68:39:40:46:de:4a:
77:20:99:62:e5:bc:a3:9f:f9:3c:6c:32:a7:cf:2d:04:64:37:
9f:75:1a:e9:c7:5d:68:96:ed:40:15:e5:10:4b:ba:af:24:42:
c8:6a:bb:7d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUJeWjsT5ZjOn9Vlug9dsD/041vmwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDUyMTQ1WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmMTFjZDlmODJmMDkxOGRjYWFiNTYzMTIzZmVlNjcwYTRi
ODE4NzhjZjMzZDMwODEwZTM1ODY2ZTIxOTY2ZGJhMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcMiyvLuVMygmR4u7vciWQmTaOpG6OOUXJN4x6rJekDOr0
FlqX3SPWh8NSYZXSE8ETBIBdF+ZwfqV12RKwOciIN80C+gWJ5WL+yl3wyn7bj8f0
ny4v8d0HUIJZN55fOrP16X5XjhOETjc7uJgFYJGh6Cji5lV6yt93xsSitJyuI0f4
8KosbfrV9OIX5psr9NSLWGK6CfDgVFO+1q7FXzab6SfqNE5kRbOsQQLBgEMZH65D
1NNevpJIp/4/aUyZZeFrZ+2c8nRQM+clgqB3TtmKzPUCgheCjJO+qqKRCL89YtAA
316XsPHvMxo1ghmfwU5es9Bo2Ez4/DfG9yVoNUNJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUIQVEj80KbIMPrdK94b+Mgyq6f4kwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzljODM3Zjg2LTA0ZjItNDJhZS05MmE3LTlmNDYxNDM2OWYzMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAJAAOCgwDQYJKoZIhvcNAQELBQADggEBABNHSv1yczipYUzn78771w5A
7vsBPbiYD14rZnoX/EqMswrgwRamRwqDKO0CY0hTHGxqwwEKQKJthSLpSCuiAO73
4IEbydBu2P9avsri3VmNGIRgZ5YxEXqfpywc7h4KM4eJnouPyZwGYbVD7ct/fGkC
Vi+oojYasQ02tl2XqJODu37BjCop6aDw4wkYhFiG+zN0hyIb+f4GzkLrbmyah+hu
hyvMpfNP92GAJFNBU4SWVTKeoONbrmAX6UmEfRDCjJCwIHnmCetlr4xE5GQiHLri
7Wg5QEbeSncgmWLlvKOf+TxsMqfPLQRkN591GunHXWiW7UAV5RBLuq8kQshqu30=
-----END CERTIFICATE-----
Generated at Wed May 13 00:40:35 2026 by rpki-client