
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa
File: 403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa (raw, json)
Hash identifier: LTI0MPrBrkx9LCKh6JodKgEdVfoqP4eOouCyu+zoqLY=
Subject key identifier: EF:D5:9A:EC:B0:DA:47:2C:06:E9:D5:27:8E:6C:F0:92:DE:EA:E6:BB
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 3CDA0A6D3AB4E76B9CDB47FDF31A949CC1F0AD18
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa
Signing time: Fri 13 Feb 2026 14:50:12 +0000
ROA not before: Fri 13 Feb 2026 14:50:12 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c0b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:da:0a:6d:3a:b4:e7:6b:9c:db:47:fd:f3:1a:94:9c:c1:f0:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Feb 13 14:50:12 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=f87820d541e60ed91ae8ae31165cb90d7e8295ba2c42d72dba469cc95cc49c0c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:19:79:b4:90:d6:62:0f:8d:7f:15:86:9e:
2f:1e:cc:ed:61:f1:68:68:4e:73:93:38:90:de:a1:
40:6d:6b:e1:e9:6d:62:f4:9e:c3:38:d9:f3:ed:5c:
13:0a:cf:8d:e0:96:28:09:d3:1a:34:94:8a:5d:fb:
3f:9a:cf:40:fb:9f:ce:5a:7f:6e:ae:a8:ba:2b:b7:
99:35:d5:a0:d6:ec:5b:77:86:7e:70:4c:73:f7:b3:
78:27:51:72:67:e3:f0:90:00:7e:10:79:59:49:13:
04:71:6a:d9:82:ea:c8:0d:63:46:47:73:fd:bd:f8:
5f:9c:eb:cd:e3:4a:e9:4a:ae:a8:b1:d1:a2:98:a3:
14:6d:dd:80:57:a7:11:c4:b9:1c:5e:ff:61:f1:59:
dd:65:09:f1:cb:33:b8:a8:23:40:fa:a3:4f:eb:ee:
47:35:39:94:6d:6e:e5:82:18:ce:bb:d5:17:1b:f8:
3b:fa:e7:03:e9:ff:8e:c5:55:c0:ee:1d:f8:3f:53:
45:e5:4e:fd:09:64:d7:fd:96:27:41:95:ce:59:13:
e9:ad:a0:53:f0:b0:92:c4:7c:3c:e2:11:f3:80:60:
b9:af:b5:93:b9:b8:d5:fd:1e:7b:de:8a:87:3d:b3:
c9:3b:73:23:ae:9b:a9:17:eb:9e:8f:f9:8c:31:11:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D5:9A:EC:B0:DA:47:2C:06:E9:D5:27:8E:6C:F0:92:DE:EA:E6:BB
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/403622d9-a664-4a85-8a9f-5e0ce4cd4726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0b::/48
Signature Algorithm: sha256WithRSAEncryption
67:8a:fb:ed:50:5d:64:3d:b1:ac:c9:a8:55:d9:7f:25:48:ce:
86:7d:46:3b:6c:90:db:59:3d:72:06:61:cc:3e:d7:3c:3f:18:
9e:be:d7:5e:a8:c1:b1:91:7c:f7:09:7e:cb:46:26:22:c9:a2:
88:f2:f6:1f:00:36:c3:0a:25:9c:d7:58:b2:a7:41:d8:b6:31:
1d:78:6f:bc:6c:1e:e1:b0:f8:a6:06:fb:68:8a:09:ee:99:7b:
18:b6:ed:b6:8f:6d:07:91:37:85:05:00:a3:af:f7:dc:c4:87:
f5:1a:93:58:ea:e3:b6:ac:47:ae:99:4a:75:f5:20:68:76:8c:
d6:9b:ad:74:49:45:52:31:aa:67:85:e1:79:ba:ea:f9:f3:08:
4f:7f:f5:df:4d:24:6f:4f:80:42:1a:e3:28:be:2e:6f:fb:64:
36:b9:f0:71:14:4a:5b:c3:57:b2:d2:b1:50:1f:a4:95:ce:e4:
4c:7f:c5:0b:62:29:5b:27:ee:e6:ca:f0:fb:72:49:94:f8:ac:
22:de:07:c5:dc:15:77:c0:44:0f:50:fc:29:19:ed:40:e1:0c:
b3:9c:a1:b4:7e:d3:1c:dd:93:1b:b8:bc:44:68:4e:42:57:df:
a3:fd:46:8c:f4:ec:2d:fe:22:43:cf:a5:55:48:39:20:c1:f9:
c9:27:47:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:25:19 2026 by rpki-client