
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa
File: 198b9983-37de-4318-8190-8930b94cb8e3.roa (raw, json)
Hash identifier: kMQGNvNYitR/wniVwS+VUGN7pTSf8X6gIYkX1n+pp04=
Subject key identifier: 72:EB:A9:71:88:D6:13:A5:70:8E:14:C7:9F:A7:3F:AC:37:84:80:6F
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 03D235AA74C467E20374B8FE9D52587C481EEBA8
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa
Signing time: Tue 17 Feb 2026 02:40:48 +0000
ROA not before: Tue 17 Feb 2026 02:40:48 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d2:35:aa:74:c4:67:e2:03:74:b8:fe:9d:52:58:7c:48:1e:eb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Feb 17 02:40:48 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=2604492d375be5d95cc0b9cbd7a00665bd07d5cadf7ec45fe6e85dfb969cf9de, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:b3:6a:91:45:bc:fd:b4:14:73:a2:b1:36:
5b:ed:b5:4a:44:71:26:e4:5e:9e:d7:aa:65:25:d0:
91:46:f9:5f:67:5f:fa:ad:34:9c:c7:f9:6b:45:e6:
a8:7a:25:75:d5:9c:c9:05:ec:ac:aa:c3:48:f7:56:
5c:d4:74:83:91:37:32:a7:52:fc:43:b7:94:a5:91:
9b:8f:e6:88:a4:92:38:6f:7b:20:2e:c3:62:67:63:
46:bc:07:4c:ce:b3:1a:55:d9:e7:6c:d5:c8:18:da:
67:b5:b3:45:ae:b4:1f:a3:c2:c9:6d:d2:61:d2:26:
d1:c2:b7:89:63:18:c2:54:b0:f5:68:48:36:99:fb:
46:dc:d4:83:c8:57:14:41:c6:fa:fc:d8:c2:63:fb:
b8:fe:43:d9:65:9a:dc:6b:f2:6f:a8:68:66:66:3b:
82:d4:97:76:fe:5c:65:64:13:04:c7:11:50:1f:26:
f7:be:23:6c:92:c1:d0:8b:65:c1:25:43:f3:e8:91:
2b:64:b8:e9:73:8b:19:03:98:42:c4:4f:71:eb:cf:
e9:f2:51:ff:57:7e:27:57:ff:51:a8:44:d4:df:f6:
bb:03:10:69:30:0b:97:54:b2:52:39:ee:ca:79:ba:
67:00:f2:e4:dd:14:46:b9:8b:6f:3f:7d:ac:ee:33:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:A9:71:88:D6:13:A5:70:8E:14:C7:9F:A7:3F:AC:37:84:80:6F
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0d::/48
Signature Algorithm: sha256WithRSAEncryption
18:14:13:ad:c4:66:dc:95:5a:d2:2a:08:d5:33:95:95:e4:7b:
92:72:bb:26:5b:a7:91:fe:f8:55:56:5e:df:71:3c:7c:c0:f9:
57:5d:c5:ce:3e:f3:4f:03:65:f9:e6:0c:73:71:5d:9f:9f:8a:
5b:ff:e2:b2:a6:bd:67:3f:30:9c:5d:29:2e:12:c1:22:b7:1a:
e2:3e:be:0c:eb:73:7b:64:7b:ba:38:45:4e:ba:98:99:8c:8d:
01:58:60:3c:55:7e:25:ac:99:2b:74:7e:11:3d:7d:38:a7:36:
77:54:f5:77:42:0b:01:0f:96:ef:ca:5d:83:e0:b0:b7:fb:35:
51:99:54:1d:70:65:9e:93:b1:1f:e8:9c:46:c0:1d:1a:74:d5:
c5:c0:71:5e:89:a4:99:7e:8d:00:f3:ef:1f:11:f2:6e:78:11:
e5:22:46:ab:2e:85:1f:8e:68:c6:d8:5e:b8:5f:7f:78:63:57:
59:ef:59:36:30:83:0c:b7:36:98:9b:a9:b7:92:06:40:a2:de:
60:a2:70:2b:29:0a:fb:05:a0:4f:1e:a9:13:27:3f:4c:b3:ca:
00:e9:de:e8:ad:cd:92:30:3d:d1:5f:85:24:19:fa:b4:e8:c1:
33:0f:fc:65:de:45:f5:d4:5a:f4:ac:f3:17:1e:be:36:42:0f:
2f:52:73:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:19 2026 by rpki-client