
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e3973a0-6f9e-4d6a-981e-b0146a441803.roa
File: 9e3973a0-6f9e-4d6a-981e-b0146a441803.roa (raw, json)
Hash identifier: cOXF5joN6F4qFjXyxnKDvXLFKLersRdfI0Xve8MrpH4=
Subject key identifier: DB:F0:D0:68:CF:D4:E0:67:72:95:C3:D4:14:FB:C5:A9:E1:8F:8B:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 752B1B989385CC0E2856AD36BD6EFDD84947FA02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e3973a0-6f9e-4d6a-981e-b0146a441803.roa
Signing time: Tue 10 Feb 2026 01:00:08 +0000
ROA not before: Tue 10 Feb 2026 01:00:08 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2b:1b:98:93:85:cc:0e:28:56:ad:36:bd:6e:fd:d8:49:47:fa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 01:00:08 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=60b27182433a9f40ed5455e537b17e9eb47c9cef1c6b4ab8c726ab6dae319e9c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:08:1d:52:94:71:c3:03:7d:34:8c:3a:0b:
26:a8:d5:c4:ac:d3:15:87:98:cd:fc:56:d6:4d:7b:
95:75:ab:8b:1d:4d:c7:c9:a0:33:b8:89:94:a7:bd:
24:49:de:bb:33:a2:44:d1:ed:9a:7c:21:ef:d1:05:
b3:d1:f8:cf:a0:0c:df:86:ea:44:09:b1:8d:d7:8b:
0f:68:e6:9a:54:4e:49:c3:00:89:46:db:e0:fa:2b:
cc:64:e8:d4:4d:2a:2e:18:e4:83:ac:3e:61:7a:f9:
7f:81:73:c2:0f:07:72:69:e4:ab:62:ae:47:35:8f:
fe:df:48:5a:f1:ec:61:91:95:e7:dd:a4:21:d0:d4:
d4:8d:b1:40:98:d4:99:80:f6:dc:8f:fa:73:2c:1b:
f3:d3:3c:8e:52:20:a1:66:77:7c:4f:af:e6:a5:47:
ae:e4:e9:55:3c:09:b8:c6:4a:8d:39:be:7b:18:f8:
39:18:58:b2:59:d0:4d:5e:6a:33:d3:98:04:61:af:
5e:bc:ab:b2:78:ac:53:15:2e:fc:be:5d:82:a5:73:
97:1f:06:1a:e9:d3:89:cd:1e:75:75:f6:da:95:96:
77:e5:36:71:53:e3:ab:8e:71:24:a8:04:25:23:e2:
ad:59:c8:34:10:90:01:ed:8e:ae:2b:75:aa:39:0c:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F0:D0:68:CF:D4:E0:67:72:95:C3:D4:14:FB:C5:A9:E1:8F:8B:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e3973a0-6f9e-4d6a-981e-b0146a441803.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.236.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6c:dc:68:86:42:24:91:70:c0:1b:75:3d:61:9a:28:d9:d0:
e8:56:91:70:ca:cf:29:87:d9:32:cc:26:59:9e:06:46:b6:a0:
e5:b5:d6:c7:7a:d3:b0:c9:0a:34:4d:64:71:e9:6e:a4:a7:b8:
0f:b0:6b:b9:cf:b0:54:9d:fd:2f:03:7b:de:cc:a9:e0:b2:e3:
b4:87:ea:28:eb:9c:08:ea:7c:c7:db:6f:e7:55:64:d2:a4:41:
92:a6:ad:81:4e:cd:52:39:67:51:a7:44:3c:7b:3e:3e:eb:79:
fb:b9:a0:65:ae:03:62:13:8c:88:40:ac:f6:91:3c:ae:73:cc:
6c:ef:32:7e:d5:15:0c:0f:a4:32:8d:1b:6a:d2:f5:17:79:3f:
fe:e6:0c:1b:05:97:5e:2f:98:87:5e:9b:9c:c8:18:04:68:a6:
c1:7a:e3:30:b0:11:13:f3:a0:3d:1a:13:7f:10:b5:21:46:d8:
c6:3e:9d:5f:93:9e:2e:88:8c:81:90:f3:98:56:74:c2:0c:10:
52:b2:b2:11:ee:97:ca:c1:1c:9c:b3:48:80:7a:3a:4a:40:fd:
5d:a2:5b:d0:46:7e:80:69:1f:62:62:4d:ce:c0:f7:e5:70:6e:
43:f1:ec:1e:31:2f:ae:c4:9b:8d:f3:23:06:eb:34:70:d8:1a:
9c:38:33:84
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdSsbmJOFzA4oVq02vW792ElH+gIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDEwMDA4WhcNMjYwNTExMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MGIyNzE4MjQzM2E5ZjQwZWQ1NDU1ZTUzN2IxN2U5ZWI0
N2M5Y2VmMWM2YjRhYjhjNzI2YWI2ZGFlMzE5ZTljMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwVQgdUpRxwwN9NIw6Cyao1cSs0xWHmM38VtZNe5V1q4sd
TcfJoDO4iZSnvSRJ3rszokTR7Zp8Ie/RBbPR+M+gDN+G6kQJsY3Xiw9o5ppUTknD
AIlG2+D6K8xk6NRNKi4Y5IOsPmF6+X+Bc8IPB3Jp5Ktirkc1j/7fSFrx7GGRlefd
pCHQ1NSNsUCY1JmA9tyP+nMsG/PTPI5SIKFmd3xPr+alR67k6VU8CbjGSo05vnsY
+DkYWLJZ0E1eajPTmARhr168q7J4rFMVLvy+XYKlc5cfBhrp04nNHnV19tqVlnfl
NnFT46uOcSSoBCUj4q1ZyDQQkAHtjq4rdao5DP/5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2/DQaM/U4GdylcPUFPvFqeGPi18wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzllMzk3M2EwLTZmOWUtNGQ2YS05ODFlLWIwMTQ2YTQ0MTgwMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTewwDQYJKoZIhvcNAQELBQADggEBAEJs3GiGQiSRcMAbdT1hmijZ0OhW
kXDKzymH2TLMJlmeBka2oOW11sd607DJCjRNZHHpbqSnuA+wa7nPsFSd/S8De97M
qeCy47SH6ijrnAjqfMfbb+dVZNKkQZKmrYFOzVI5Z1GnRDx7Pj7refu5oGWuA2IT
jIhArPaRPK5zzGzvMn7VFQwPpDKNG2rS9Rd5P/7mDBsFl14vmIdem5zIGARopsF6
4zCwERPzoD0aE38QtSFG2MY+nV+Tni6IjIGQ85hWdMIMEFKyshHul8rBHJyzSIB6
OkpA/V2iW9BGfoBpH2JiTc7A9+VwbkPx7B4xL67Em43zIwbrNHDYGpw4M4Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:42 2026 by rpki-client