
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1433f75c-c179-4b87-bc70-9b0cbea932be.roa
File: 1433f75c-c179-4b87-bc70-9b0cbea932be.roa (raw, json)
Hash identifier: 0Da3C/5z1SKC53CwFQJlQXYV5pz2BpTXQp+Xc58/8W0=
Subject key identifier: 92:88:D2:09:4B:83:D4:C5:FB:99:50:92:F7:5E:E0:A8:2F:AB:28:42
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 08F8CA10E1EE3CC1A0C56C8737DFD46A96666450
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1433f75c-c179-4b87-bc70-9b0cbea932be.roa
Signing time: Fri 13 Feb 2026 14:50:07 +0000
ROA not before: Fri 13 Feb 2026 14:50:07 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 40045
IP address blocks: 2605:9cc0:c11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f8:ca:10:e1:ee:3c:c1:a0:c5:6c:87:37:df:d4:6a:96:66:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Feb 13 14:50:07 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=ec8a2b94697e78d43e67d8348043319f652265632cd688cdc5cc684d4b9606f8, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:8f:47:0d:f2:0e:02:7f:a8:53:bb:1f:45:
90:f5:16:15:8a:96:0e:fd:44:95:2b:10:8d:9e:e0:
b6:96:d7:43:cd:11:d8:ad:85:de:ba:05:51:a1:b6:
db:b1:35:af:27:94:4f:a8:95:02:9f:81:a3:56:f8:
d2:aa:4d:7f:68:da:30:57:1a:0c:e3:7f:c0:a5:43:
a3:4c:a8:61:ac:f3:e0:41:88:a9:f3:c9:63:fb:fc:
cd:92:ad:af:a1:c7:f4:c1:61:30:6b:2d:1f:9b:ba:
ca:49:85:25:98:e2:68:be:f6:46:49:10:4e:6b:20:
c0:5a:62:a2:9b:76:f1:0b:93:d8:3d:8b:a1:86:05:
92:d6:a0:29:da:94:5b:be:50:0d:3d:e8:37:ea:0c:
2b:e4:4b:28:8e:3b:a0:f4:80:38:6e:6d:24:b3:94:
ef:8a:9c:e2:6b:39:f0:f8:46:07:4c:d5:cb:43:7e:
d2:f9:85:d8:80:c8:d1:c7:bf:f3:58:fc:1b:76:e5:
a1:9b:d4:ee:d0:90:87:35:18:d6:d9:ba:98:9f:4c:
4e:31:49:ab:8f:80:0f:b7:9e:af:9a:84:8a:83:6d:
79:aa:78:1f:a2:4e:b5:f4:2d:9f:40:80:59:1d:e4:
34:d9:3d:d0:cd:36:d5:90:fc:7a:bc:02:5a:6a:7e:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:D2:09:4B:83:D4:C5:FB:99:50:92:F7:5E:E0:A8:2F:AB:28:42
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1433f75c-c179-4b87-bc70-9b0cbea932be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c11::/48
Signature Algorithm: sha256WithRSAEncryption
6d:97:fe:0f:c8:3a:d4:a1:22:b1:c9:74:ca:5e:f7:2f:d6:61:
2d:67:16:e8:df:48:50:6e:6c:b2:c1:4b:ce:46:00:4c:62:e0:
c1:aa:b3:07:c8:37:37:9c:a5:e6:02:4b:66:88:f6:95:6d:40:
25:62:6b:cc:05:eb:c6:81:c4:8a:4d:e9:37:1c:ed:cf:bf:f4:
91:c8:4e:2c:dc:a4:d0:fc:24:2c:09:46:89:f9:b6:b9:bf:42:
c2:1d:7e:83:96:1a:05:8f:84:43:cf:58:9c:6a:ed:60:31:21:
a4:b0:a0:5c:c6:93:32:1d:2a:db:6a:86:62:cd:e3:94:c1:e9:
69:92:8a:68:04:f2:c0:99:c5:b6:d0:22:e7:fc:51:0a:2b:f4:
b9:49:b1:54:88:33:d6:19:28:da:31:3b:99:1c:5e:52:ed:de:
66:26:b6:2c:35:91:8f:b2:3d:68:90:1c:93:6a:74:d9:a4:85:
6a:6f:b7:24:bc:7b:a3:ef:c8:71:70:45:0b:4c:11:07:c3:ac:
8d:27:12:c4:bb:47:83:d2:a0:52:0c:c9:dd:56:09:03:39:dd:
77:84:d7:e6:2a:19:2e:eb:c2:73:ef:02:69:a1:39:0e:27:20:
6b:69:6b:40:b0:e1:76:66:cb:7d:c0:a4:d2:f4:23:d7:af:9f:
43:32:2e:9c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCPjKEOHuPMGgxWyHN9/UapZmZFAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjEzMTQ1MDA3WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzhhMmI5NDY5N2U3OGQ0M2U2N2Q4MzQ4MDQzMzE5ZjY1
MjI2NTYzMmNkNjg4Y2RjNWNjNjg0ZDRiOTYwNmY4MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5cI9HDfIOAn+oU7sfRZD1FhWKlg79RJUrEI2e4LaW10PN
Edithd66BVGhttuxNa8nlE+olQKfgaNW+NKqTX9o2jBXGgzjf8ClQ6NMqGGs8+BB
iKnzyWP7/M2Sra+hx/TBYTBrLR+buspJhSWY4mi+9kZJEE5rIMBaYqKbdvELk9g9
i6GGBZLWoCnalFu+UA096DfqDCvkSyiOO6D0gDhubSSzlO+KnOJrOfD4RgdM1ctD
ftL5hdiAyNHHv/NY/Bt25aGb1O7QkIc1GNbZupifTE4xSauPgA+3nq+ahIqDbXmq
eB+iTrX0LZ9AgFkd5DTZPdDNNtWQ/Hq8AlpqfvlzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUkojSCUuD1MX7mVCS917gqC+rKEIwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzE0MzNmNzVjLWMxNzktNGI4Ny1iYzcwLTliMGNiZWE5MzJiZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADBEwDQYJKoZIhvcNAQELBQADggEBAG2X/g/IOtShIrHJdMpe9y/W
YS1nFujfSFBubLLBS85GAExi4MGqswfINzecpeYCS2aI9pVtQCVia8wF68aBxIpN
6Tcc7c+/9JHITizcpND8JCwJRon5trm/QsIdfoOWGgWPhEPPWJxq7WAxIaSwoFzG
kzIdKttqhmLN45TB6WmSimgE8sCZxbbQIuf8UQor9LlJsVSIM9YZKNoxO5kcXlLt
3mYmtiw1kY+yPWiQHJNqdNmkhWpvtyS8e6PvyHFwRQtMEQfDrI0nEsS7R4PSoFIM
yd1WCQM53XeE1+YqGS7rwnPvAmmhOQ4nIGtpa0Cw4XZmy33ApNL0I9evn0MyLpw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:09:54 2026 by rpki-client