
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa
File: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (raw, json)
Hash identifier: yPzzw0XNoosucoonpDfbfQUYVkGv2frd4P3V2tA/4sY=
Subject key identifier: 65:41:7B:96:24:14:35:C3:37:46:23:C3:A0:2C:F5:DD:D8:3F:7A:7A
Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial: 4B4997B0434CC37CF4A44D2ED1FCFE94FFF9DD0C
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa
Signing time: Wed 25 Feb 2026 00:10:16 +0000
ROA not before: Wed 25 Feb 2026 00:10:16 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 198.41.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:49:97:b0:43:4c:c3:7c:f4:a4:4d:2e:d1:fc:fe:94:ff:f9:dd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Validity
Not Before: Feb 25 00:10:16 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=f910a550c0f79c2e1514eacf1ddef68e65652edc27522d7ef7c8f5e7f0220ad7, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:0a:01:46:8b:70:52:0d:40:76:98:2c:f3:
7b:d4:5a:70:34:be:3a:65:65:9b:fc:85:e0:42:24:
17:e3:ed:5a:fb:ae:6d:14:1f:88:f4:f4:e2:e1:2f:
d1:1e:4e:7d:b7:98:5e:49:4e:fa:76:89:df:7c:db:
2a:6f:b0:eb:3a:60:6d:6e:d4:51:8c:8e:f1:8e:ee:
4b:72:8a:9c:bc:3f:78:48:53:3b:0a:c4:07:91:d4:
db:2f:5f:f1:e2:d5:d6:83:24:1d:ac:a7:df:22:e2:
e9:f5:de:ea:fa:6a:28:ed:9a:e5:44:35:61:22:bb:
ab:52:26:3e:18:e6:1c:0a:fd:43:3a:37:b3:d4:1a:
a1:93:67:6c:88:3e:8c:41:3d:8a:bd:50:86:2f:33:
2c:fb:fe:2c:25:d5:19:42:3b:79:fb:c9:6d:6b:74:
e7:06:b9:d7:49:47:89:b1:8a:ef:b8:a2:ad:da:aa:
d5:8f:fe:c4:cc:55:5e:fa:dc:4f:32:88:99:fc:07:
01:34:6f:81:25:df:4d:c6:4d:c1:96:f8:24:7c:f4:
a5:8f:3f:ea:2a:c3:d0:b4:93:73:63:1b:65:3c:cb:
03:6e:00:43:b1:e4:68:b7:9f:03:4d:dd:99:cc:8f:
d5:44:89:56:32:40:76:68:ec:ad:df:cd:4f:8e:73:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:7B:96:24:14:35:C3:37:46:23:C3:A0:2C:F5:DD:D8:3F:7A:7A
X509v3 Authority Key Identifier:
keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.41.98.0/24
Signature Algorithm: sha256WithRSAEncryption
27:31:f6:1b:52:b6:13:40:5d:98:27:5f:bf:b4:92:34:72:83:
15:23:28:af:b6:4d:5c:a5:2a:60:99:5f:c7:d4:6d:0f:fe:6c:
e3:43:b4:68:58:b5:4b:5b:aa:2c:98:f9:89:ef:61:58:48:8f:
8e:f4:19:b0:f3:d5:96:82:5c:c1:e9:ff:30:ae:5d:b2:14:7d:
7c:e5:a9:06:80:23:3f:34:0b:ab:67:39:30:22:26:1c:17:1d:
67:66:d2:c3:53:1b:f6:78:46:17:0c:0f:67:c1:7c:ee:e2:a5:
09:d9:53:6a:17:a1:c3:de:ba:4b:15:70:8d:59:9d:74:0e:11:
7d:8c:e4:d5:30:c1:dc:09:a7:ec:4c:eb:3b:d4:50:61:4d:c8:
a1:b5:b1:1d:34:71:b7:b3:47:77:e1:b7:8b:13:11:4a:32:22:
ad:7e:01:5d:07:54:36:57:0d:63:58:77:f1:42:bf:68:30:d2:
2b:67:5d:0e:28:06:61:66:c0:6a:ae:59:ea:dd:f7:ad:4f:59:
44:97:18:27:bc:92:55:05:4f:ba:13:33:5a:b0:1f:e0:e9:d2:
d7:ff:17:2f:3b:ed:77:9a:f7:c1:d5:80:78:b4:cb:f2:c0:95:
3b:d6:37:36:a4:d7:ff:52:08:19:48:50:46:c7:24:c7:b6:d3:
1c:fc:e7:a6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUS0mXsENMw3z0pE0u0fz+lP/53QwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk
MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwMjI1MDAxMDE2WhcNMjYwNTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmOTEwYTU1MGMwZjc5YzJlMTUxNGVhY2YxZGRlZjY4ZTY1
NjUyZWRjMjc1MjJkN2VmN2M4ZjVlN2YwMjIwYWQ3MS0wKwYDVQQDEyQ4OGFmN2I5
NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDiHAoBRotwUg1Adpgs83vUWnA0vjplZZv8heBCJBfj7Vr7
rm0UH4j09OLhL9EeTn23mF5JTvp2id982ypvsOs6YG1u1FGMjvGO7ktyipy8P3hI
UzsKxAeR1NsvX/Hi1daDJB2sp98i4un13ur6aijtmuVENWEiu6tSJj4Y5hwK/UM6
N7PUGqGTZ2yIPoxBPYq9UIYvMyz7/iwl1RlCO3n7yW1rdOcGuddJR4mxiu+4oq3a
qtWP/sTMVV763E8yiJn8BwE0b4El303GTcGW+CR89KWPP+oqw9C0k3NjG2U8ywNu
AEOx5Gi3nwNN3ZnMj9VEiVYyQHZo7K3fzU+Oc7UlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZUF7liQUNcM3RiPDoCz13dg/enowHwYDVR0jBBgwFoAUzBBhJz//dj92
0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i
ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj
NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy
MWQwMWY3ZDkwLzRmOGIzMzJiLWJkOGUtNGY0ZC1iYTVlLWMwZWRkNjRkOTI1MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh
LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADGKWIwDQYJKoZIhvcNAQELBQADggEBACcx9htSthNAXZgnX7+0kjRygxUj
KK+2TVylKmCZX8fUbQ/+bONDtGhYtUtbqiyY+YnvYVhIj470GbDz1ZaCXMHp/zCu
XbIUfXzlqQaAIz80C6tnOTAiJhwXHWdm0sNTG/Z4RhcMD2fBfO7ipQnZU2oXocPe
uksVcI1ZnXQOEX2M5NUwwdwJp+xM6zvUUGFNyKG1sR00cbezR3fht4sTEUoyIq1+
AV0HVDZXDWNYd/FCv2gw0itnXQ4oBmFmwGquWerd961PWUSXGCe8klUFT7oTM1qw
H+Dp0tf/Fy877Xea98HVgHi0y/LAlTvWNzak1/9SCBlIUEbHJMe20xz856Y=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:02 2026 by rpki-client