
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba305e32-6888-4527-aefd-7ab542971786.roa
File: ba305e32-6888-4527-aefd-7ab542971786.roa (raw, json)
Hash identifier: mHRR7UQXx6LikDn7Q+JAKnLxA7llxnijZKibBz7NsYM=
Subject key identifier: FE:FD:7C:B0:66:6A:5D:FE:9D:66:F4:9A:69:18:34:66:97:B3:83:F3
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 19A51BB330C08A2C89C3EEADA7910BC37B5F51
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba305e32-6888-4527-aefd-7ab542971786.roa
Signing time: Mon 04 May 2026 10:02:07 +0000
ROA not before: Mon 04 May 2026 10:02:07 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:31f8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a5:1b:b3:30:c0:8a:2c:89:c3:ee:ad:a7:91:0b:c3:7b:5f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: May 4 10:02:07 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=b02cc36d9ee9717768c86b1a15c84bfa0db9b52290ce1cd6c20b34790ce8f93c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:4b:3c:8e:7d:3d:b5:4f:36:73:04:c3:06:
f4:15:ba:8d:17:50:27:14:d2:eb:fb:b8:73:53:7b:
c5:0e:ef:61:82:c9:7a:78:ed:1e:06:a9:37:97:c4:
6f:de:93:1c:b6:22:4b:99:71:85:43:1e:0d:55:14:
9f:44:97:29:82:c2:9b:cf:e6:99:75:0b:4a:75:a2:
e2:c3:f6:41:94:f3:fd:ec:15:c0:d0:f6:15:c1:2b:
8e:6b:84:e4:94:05:a4:81:b6:cb:61:dd:b8:e8:9f:
75:63:4e:7e:07:55:3b:da:f8:19:4f:94:48:7c:35:
e3:2a:c1:85:b6:4d:3e:e0:c7:9c:d9:07:cd:34:fd:
69:37:a1:df:18:15:1f:ac:7b:56:29:5c:f4:ee:5a:
cc:f5:c0:43:e7:bf:26:8b:fe:5a:b9:b3:60:b6:56:
d7:57:3d:cc:9e:e5:a8:0c:58:1c:42:3e:8f:9e:04:
75:30:ce:05:ad:1a:cd:bd:4b:61:86:5f:b8:8a:fc:
a7:8c:2f:93:a0:81:11:28:9c:24:6a:5d:99:2e:39:
d1:cf:99:cc:64:e0:e8:1e:3c:51:9f:98:0b:a5:de:
d4:3e:44:69:d6:4c:df:a3:c7:bd:0c:31:31:0a:7f:
9b:e0:53:14:58:10:62:f9:75:7b:b5:a2:e1:a4:43:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:7C:B0:66:6A:5D:FE:9D:66:F4:9A:69:18:34:66:97:B3:83:F3
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba305e32-6888-4527-aefd-7ab542971786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:31f8::/45
Signature Algorithm: sha256WithRSAEncryption
3c:cc:31:76:e5:c2:ba:f2:fd:76:84:9d:8a:9d:5f:9a:91:a2:
ad:94:69:1b:c6:79:9a:75:6c:0c:f5:89:5f:f2:55:07:84:d1:
53:20:ad:0f:2a:0f:d5:5c:4a:14:cc:98:50:be:21:68:e4:fa:
97:60:24:74:f4:42:9d:d4:e8:c1:21:d4:f2:57:0c:7a:90:85:
7f:bb:ae:d2:54:66:29:3f:3b:cc:76:da:94:a5:a7:98:81:2c:
95:60:93:7f:26:73:25:43:78:1d:f6:e0:95:74:82:a5:f2:b0:
1e:4a:c4:37:f2:72:73:b8:4b:a0:bf:19:b4:07:7a:ac:5c:03:
3f:67:e5:ed:19:3e:53:6d:1b:f6:11:5d:e8:8b:5b:cf:15:5f:
eb:46:2b:06:06:24:1d:bc:fe:53:2a:b6:37:bb:ed:64:c1:3d:
f0:cc:2c:46:8f:13:9b:02:ae:31:78:8f:84:7c:4b:23:a6:a0:
59:0c:9d:b5:95:9c:0b:05:d7:c9:23:04:b0:01:9c:38:23:90:
95:5e:cf:d6:63:66:e9:03:86:7f:5b:c0:70:c5:94:7a:f1:ff:
97:12:97:5d:55:fd:e0:34:30:93:81:09:91:24:ca:52:36:02:
f1:3d:68:5a:ac:e5:77:8d:34:2b:e5:26:90:c0:b7:50:9e:d6:
91:e2:c7:25
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITGaUbszDAiiyJw+6tp5ELw3tfUTANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjA1MDQxMDAyMDdaFw0yNjA4MDIyMzU5NTla
MHoxSTBHBgNVBAUTQGIwMmNjMzZkOWVlOTcxNzc2OGM4NmIxYTE1Yzg0YmZhMGRi
OWI1MjI5MGNlMWNkNmMyMGIzNDc5MGNlOGY5M2MxLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKchSzyOfT21TzZzBMMG9BW6jRdQJxTS6/u4c1N7xQ7vYYLJ
enjtHgapN5fEb96THLYiS5lxhUMeDVUUn0SXKYLCm8/mmXULSnWi4sP2QZTz/ewV
wND2FcErjmuE5JQFpIG2y2HduOifdWNOfgdVO9r4GU+USHw14yrBhbZNPuDHnNkH
zTT9aTeh3xgVH6x7Vilc9O5azPXAQ+e/Jov+WrmzYLZW11c9zJ7lqAxYHEI+j54E
dTDOBa0azb1LYYZfuIr8p4wvk6CBESicJGpdmS450c+ZzGTg6B48UZ+YC6Xe1D5E
adZM36PHvQwxMQp/m+BTFFgQYvl1e7Wi4aRDuy0CAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBT+/XywZmpd/p1m9JppGDRml7OD8zAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvYmEzMDVlMzItNjg4OC00NTI3LWFlZmQtN2FiNTQyOTcxNzg2LnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHAyYAkAAx+DANBgkqhkiG9w0BAQsFAAOCAQEAPMwxduXCuvL9doSdip1fmpGi
rZRpG8Z5mnVsDPWJX/JVB4TRUyCtDyoP1VxKFMyYUL4haOT6l2AkdPRCndTowSHU
8lcMepCFf7uu0lRmKT87zHbalKWnmIEslWCTfyZzJUN4HfbglXSCpfKwHkrEN/Jy
c7hLoL8ZtAd6rFwDP2fl7Rk+U20b9hFd6ItbzxVf60YrBgYkHbz+Uyq2N7vtZME9
8MwsRo8TmwKuMXiPhHxLI6agWQydtZWcCwXXySMEsAGcOCOQlV7P1mNm6QOGf1vA
cMWUevH/lxKXXVX94DQwk4EJkSTKUjYC8T1oWqzld400K+UmkMC3UJ7WkeLHJQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:21:39 2026 by rpki-client