
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/254b4192-a38e-41eb-a28b-d01a7ee37964.roa
File: 254b4192-a38e-41eb-a28b-d01a7ee37964.roa (raw, json)
Hash identifier: 0jEuxWpp33Ty01joETgjvjeaPTmwe/ZBJjU8trw85UM=
Subject key identifier: 02:54:02:1F:31:D0:31:3C:B3:33:B1:D2:1D:12:DD:C5:71:3C:5D:EE
Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial: 7817C3AED0F354EFBF532E94F5BA05580CB8E215
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/254b4192-a38e-41eb-a28b-d01a7ee37964.roa
Signing time: Sun 15 Feb 2026 00:00:35 +0000
ROA not before: Sun 15 Feb 2026 00:00:35 +0000
ROA not after: Sat 16 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2620:108:d000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:17:c3:ae:d0:f3:54:ef:bf:53:2e:94:f5:ba:05:58:0c:b8:e2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Validity
Not Before: Feb 15 00:00:35 2026 GMT
Not After : May 16 23:59:59 2026 GMT
Subject: serialNumber=d073434d4f6ae59d8b97f121a05e1bc9a8c19d88d225a76755fa10c522ceebf1, CN=0099a7ea-794a-4a28-b164-49547626eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:97:b4:54:db:cc:97:fd:a4:8a:00:69:16:
01:4e:7f:58:6d:60:75:87:5d:b9:4a:99:83:fa:23:
ba:f5:27:56:f7:d1:a3:46:77:02:02:ac:eb:18:90:
25:32:df:05:ae:99:9b:a0:ad:15:31:10:fb:ab:e0:
c5:e3:89:dd:c2:dc:79:05:fc:22:50:3f:59:c1:7d:
7a:7c:11:6f:60:bf:e6:3e:7e:15:46:69:b9:da:84:
41:5c:c0:99:95:4a:a0:5f:21:9f:c0:46:59:b6:17:
23:76:27:d7:a0:c3:f1:a8:c7:8e:39:ef:ac:67:32:
70:e9:90:69:08:79:02:88:45:c8:e3:8c:99:d8:3e:
e9:dd:b4:db:5e:03:f1:d3:98:42:4f:0b:7c:54:d9:
8e:77:6a:86:dc:43:2f:e4:db:8a:fe:21:d7:d4:5e:
63:2f:06:dd:33:3e:5a:63:c3:9f:ed:59:75:99:f7:
f7:18:8b:b1:61:10:37:bf:79:51:6f:fb:42:c4:c2:
5f:55:e0:3e:4c:04:ba:65:85:c6:d3:48:cb:a7:82:
fe:22:38:f9:70:0f:43:fc:56:f8:98:b3:a8:7a:e3:
72:ca:e9:c3:d9:dc:59:0b:15:ac:b8:b5:86:87:f8:
a6:2f:c0:8a:b2:72:b0:78:29:32:5d:16:cf:46:f6:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:02:1F:31:D0:31:3C:B3:33:B1:D2:1D:12:DD:C5:71:3C:5D:EE
X509v3 Authority Key Identifier:
keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/254b4192-a38e-41eb-a28b-d01a7ee37964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:108:d000::/44
Signature Algorithm: sha256WithRSAEncryption
15:01:41:e3:a3:4a:79:99:e4:32:f9:e4:20:03:fb:00:e8:d2:
f0:2e:3c:7a:c4:7d:59:ed:2f:e4:17:07:d4:1d:a6:60:46:07:
66:c6:51:3c:9d:2a:17:1e:e2:9b:df:d4:9a:ef:de:c4:19:8b:
ac:e4:07:26:16:32:e5:ce:85:ca:4e:f8:b2:87:9d:31:c9:32:
f4:6f:1f:3b:d4:97:be:12:86:26:5d:3e:ee:e0:92:72:97:5f:
94:8c:e8:30:8a:dd:58:26:4d:56:99:fa:2c:18:a9:e6:63:c2:
7d:73:bb:15:cb:2e:a9:06:2f:93:35:72:85:7b:39:e9:e1:22:
40:5a:ad:5a:c7:53:63:5c:8c:28:19:d8:56:3e:d5:fc:4d:f5:
53:d3:12:43:3a:e7:46:7d:0f:06:b4:9a:f5:b3:6a:16:f3:f5:
6a:b9:ae:17:8f:7a:97:e2:c8:19:d3:a4:b1:ac:ca:99:3a:46:
00:1c:4f:d8:fa:45:15:98:9b:77:b6:3f:63:8d:43:ce:73:28:
44:57:b1:5d:74:22:db:8a:89:d4:cf:57:68:13:13:57:6c:bb:
99:39:c6:e9:26:55:d4:12:ba:bc:87:3e:c0:f2:fd:57:ff:15:
91:f0:22:b5:07:91:b0:ab:ba:30:16:5b:7a:b5:fb:80:78:83:
4c:b4:6b:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:56:31 2026 by rpki-client