
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa
File: 431a515b-07a5-4778-abb4-267624108e41.roa (raw, json)
Hash identifier: sd5eFkshM3rHN41QPnncCq3tipRaiXFpPfEoClZev78=
Subject key identifier: 32:B3:C0:E2:00:D5:7D:51:87:CF:90:5C:0D:85:52:E4:9F:26:3B:7C
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 0F40E3BF22199CE679AB57C310F402F165D391DC
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa
Signing time: Sat 28 Feb 2026 04:50:04 +0000
ROA not before: Sat 28 Feb 2026 04:50:04 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:30d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:40:e3:bf:22:19:9c:e6:79:ab:57:c3:10:f4:02:f1:65:d3:91:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Feb 28 04:50:04 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=f3c71011d35c6168678ffae026aa9c34c5f7c8c25fc93754623e7b18f9164893, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:65:23:a2:74:fc:8c:39:5f:73:79:43:0b:
f2:b7:50:57:84:f1:db:12:a4:ff:6f:f8:e9:db:cd:
7e:c7:ad:9c:7d:7b:88:d4:0b:9b:39:99:a3:0d:ed:
21:fe:2f:0e:ad:9a:f8:e9:ba:c4:83:a9:29:e0:82:
6c:ff:8e:b6:d0:37:0f:d0:58:37:7a:3d:44:39:df:
b2:3d:ba:ec:1a:f0:9f:d6:ef:bc:08:e9:51:9f:d6:
19:85:a5:b0:28:ef:8e:50:44:f6:15:93:65:39:ea:
37:bb:0e:67:e5:33:e2:10:72:84:e2:71:76:98:ec:
43:fd:05:00:45:69:16:2b:39:14:5a:0b:e9:54:ff:
cb:33:47:e9:e3:54:e7:af:d0:3f:28:f8:45:c1:58:
56:9a:f0:e4:10:74:86:67:da:6a:9d:7a:44:9e:60:
e2:72:be:79:d7:ef:9c:7d:c4:dd:df:f6:85:7f:42:
36:13:f9:1e:e8:6d:97:0b:b8:7b:72:65:a4:8f:a6:
77:92:68:32:36:48:5a:8f:60:41:01:96:e3:fc:b3:
e9:0d:ab:4f:f1:85:db:ac:8b:70:bb:e0:be:b2:99:
bc:fb:54:14:b6:eb:b5:27:18:98:f6:de:ae:f0:34:
82:42:5b:5f:db:29:3c:1e:fb:ad:b8:d3:eb:7b:eb:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B3:C0:E2:00:D5:7D:51:87:CF:90:5C:0D:85:52:E4:9F:26:3B:7C
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:30d::/48
Signature Algorithm: sha256WithRSAEncryption
74:84:e0:c0:8d:ba:23:04:15:56:45:93:4d:a9:44:6d:53:71:
bb:66:4d:c6:22:18:61:5d:0d:2a:79:95:7f:87:f4:34:d6:f0:
02:62:20:bf:d0:11:af:25:bc:47:31:ba:c4:f6:43:fa:9d:03:
2b:ee:ee:86:f6:0c:84:53:67:ad:08:a0:d6:4c:69:a4:27:c6:
7e:ed:1b:8c:6c:c4:21:7c:32:81:75:38:7d:99:88:3e:ff:69:
ef:7a:06:82:c3:e5:f8:65:5d:c7:b3:85:78:96:d3:3b:1a:dc:
cb:26:5d:ce:f7:de:ed:c9:2e:f0:6e:51:84:26:be:17:39:c2:
0c:a8:ff:93:9b:92:f1:7b:60:ef:68:60:c9:18:a5:98:15:be:
98:88:7a:50:3c:e8:b5:c8:39:1d:9d:00:ca:21:06:99:7c:8e:
f4:58:47:74:1d:c4:f7:cb:12:a3:0b:5a:f4:23:08:aa:7f:f3:
34:f6:26:34:46:0e:88:5b:b7:d3:52:05:1f:e1:e5:2c:d9:eb:
30:d1:a2:c5:cb:5a:41:7b:c8:c0:ae:92:ea:15:db:30:77:54:
76:f3:e2:88:89:b7:5c:ab:64:63:42:e7:71:e1:b9:12:5f:4d:
a6:7a:8a:3a:10:49:96:62:00:ce:6c:86:88:e2:5b:52:48:6b:
e5:44:a4:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:58 2026 by rpki-client