
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa
File: 4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa (raw, json)
Hash identifier: M+c8x/D0KDbKwUZPQU0zpjG/JM1sjKESJK//Qi2nl2Y=
Subject key identifier: 97:F6:1C:B0:73:13:1D:A1:06:87:55:55:15:BA:B4:D3:54:C1:C2:19
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 7C5D94DEEB4D8B95CF96A2FB351B422ED7479F9C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa
Signing time: Tue 17 Feb 2026 02:40:07 +0000
ROA not before: Tue 17 Feb 2026 02:40:07 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:c09::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:5d:94:de:eb:4d:8b:95:cf:96:a2:fb:35:1b:42:2e:d7:47:9f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Feb 17 02:40:07 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=8ef4d9ceff19789fc88473f3eeb3fe6d056cf96aa1335025f8b10363ee66c653, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:6a:bc:f2:8f:82:98:b2:d6:bc:99:ec:31:
ea:7c:53:1b:06:82:6c:42:2d:7e:ae:fc:1a:eb:29:
fa:a7:72:41:1c:22:52:7d:18:02:a2:22:1c:37:18:
10:fd:ff:26:f3:3c:39:45:12:f3:23:b8:78:fb:b7:
9d:17:ee:fd:17:ad:8a:46:d3:f3:5c:9f:64:85:2b:
e3:fb:37:c3:4f:f8:32:56:f3:7d:f9:8b:93:01:e9:
b1:a9:0b:88:8a:2d:d8:ec:57:13:36:01:2e:44:74:
e5:31:d3:e3:c1:c2:b3:3b:de:7a:b7:20:9f:22:26:
18:0e:c5:c2:78:d9:c1:c1:ea:63:b3:ad:0d:ec:4c:
66:ae:31:e7:3d:63:24:dd:80:35:d5:45:2c:69:64:
d9:06:68:0d:5b:df:06:92:6e:9a:eb:a8:26:05:2b:
be:37:e8:8d:cd:16:02:e0:25:d2:db:bb:a4:4f:8b:
1e:dd:cc:8a:b7:e4:0d:c3:da:06:39:bc:40:51:72:
a1:40:b9:52:19:d5:0e:e3:eb:c9:34:a3:5a:24:db:
13:a7:d4:e0:ad:94:d7:94:e0:c9:5d:60:45:65:36:
3c:df:35:59:21:ea:52:d3:c1:42:a7:ee:82:0b:1d:
71:2b:94:fa:7a:55:ee:7d:3c:a3:a7:64:1c:23:49:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:1C:B0:73:13:1D:A1:06:87:55:55:15:BA:B4:D3:54:C1:C2:19
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4c8e1a8b-ac2f-4ef3-bb84-e54f47be56a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c09::/48
Signature Algorithm: sha256WithRSAEncryption
66:0b:87:f6:c2:f9:ed:d4:b8:00:ec:65:31:7b:21:28:79:bb:
b3:fc:a1:db:af:f9:ed:c0:cf:06:9f:6d:02:d7:93:6f:73:ee:
67:09:e0:60:16:a5:5a:51:34:2b:46:7c:8b:7f:42:f6:89:2e:
39:fe:e5:3e:c0:18:5a:06:86:00:78:99:c4:2b:e7:53:13:9c:
f4:6b:19:82:49:da:f3:7c:c2:e3:04:bb:57:5e:8f:a8:19:62:
08:14:1e:5f:7d:15:bc:af:1b:f7:e8:a3:c6:06:2b:7a:23:b1:
5f:6e:b2:fb:8f:84:46:fc:a8:3b:59:23:33:4d:db:b3:33:68:
49:c7:65:80:fc:62:6b:06:ff:a8:71:a3:4d:11:04:35:6c:8f:
1a:5d:55:70:72:81:81:20:e8:d6:d8:d3:d3:ce:ef:e1:ee:1e:
00:ae:eb:85:a5:1e:19:c3:bf:e3:05:34:41:83:e3:c7:31:63:
70:c9:2d:25:d2:b7:14:59:b9:64:08:8d:db:8f:05:9c:49:38:
78:8d:5e:b3:af:a1:33:a2:52:46:13:1f:fc:18:34:85:13:aa:
aa:23:40:cb:27:ea:06:db:71:50:de:9e:e8:74:9a:7b:7a:d5:
68:ca:ac:db:5b:92:72:65:9e:64:f9:4e:b2:bc:a4:d6:2d:3a:
e6:c2:8f:3e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfF2U3utNi5XPlqL7NRtCLtdHn5wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjE3MDI0MDA3WhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZWY0ZDljZWZmMTk3ODlmYzg4NDczZjNlZWIzZmU2ZDA1
NmNmOTZhYTEzMzUwMjVmOGIxMDM2M2VlNjZjNjUzMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+t2q88o+CmLLWvJnsMep8UxsGgmxCLX6u/BrrKfqnckEc
IlJ9GAKiIhw3GBD9/ybzPDlFEvMjuHj7t50X7v0XrYpG0/Ncn2SFK+P7N8NP+DJW
8335i5MB6bGpC4iKLdjsVxM2AS5EdOUx0+PBwrM73nq3IJ8iJhgOxcJ42cHB6mOz
rQ3sTGauMec9YyTdgDXVRSxpZNkGaA1b3waSbprrqCYFK7436I3NFgLgJdLbu6RP
ix7dzIq35A3D2gY5vEBRcqFAuVIZ1Q7j68k0o1ok2xOn1OCtlNeU4MldYEVlNjzf
NVkh6lLTwUKn7oILHXErlPp6Ve59PKOnZBwjSdr/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUl/YcsHMTHaEGh1VVFbq001TBwhkwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzRjOGUxYThiLWFjMmYtNGVmMy1iYjg0LWU1NGY0N2JlNTZhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBAGYLh/bC+e3UuADsZTF7ISh5
u7P8oduv+e3AzwafbQLXk29z7mcJ4GAWpVpRNCtGfIt/QvaJLjn+5T7AGFoGhgB4
mcQr51MTnPRrGYJJ2vN8wuMEu1dej6gZYggUHl99FbyvG/foo8YGK3ojsV9usvuP
hEb8qDtZIzNN27MzaEnHZYD8YmsG/6hxo00RBDVsjxpdVXBygYEg6NbY09PO7+Hu
HgCu64WlHhnDv+MFNEGD48cxY3DJLSXStxRZuWQIjduPBZxJOHiNXrOvoTOiUkYT
H/wYNIUTqqojQMsn6gbbcVDenuh0mnt61WjKrNtbknJlnmT5TrK8pNYtOubCjz4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:33 2026 by rpki-client