
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/854cdc18-0507-4635-a2a7-cad1690f9b8b.roa
File: 854cdc18-0507-4635-a2a7-cad1690f9b8b.roa (raw, json)
Hash identifier: sYs7Xt4nnSMup6IcLRDqnNkg6jZYWShZjZ11yuTBIp0=
Subject key identifier: 58:64:97:C8:9C:48:82:75:7A:C2:5E:80:03:67:D4:82:AC:05:34:69
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 749847250B0F40BD711A0F8C126C9D72CC668AB6
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/854cdc18-0507-4635-a2a7-cad1690f9b8b.roa
Signing time: Tue 17 Feb 2026 02:40:14 +0000
ROA not before: Tue 17 Feb 2026 02:40:14 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 40045
IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:98:47:25:0b:0f:40:bd:71:1a:0f:8c:12:6c:9d:72:cc:66:8a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Feb 17 02:40:14 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=a372f67a631cb8c4a411b661cf9c383bf8f013d46c8bc1c1d874e2381ea86507, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:82:8c:ae:31:76:b7:61:5e:12:90:17:eb:
a8:41:53:87:b8:54:c6:21:3c:e5:10:d3:4f:cf:7c:
20:3a:01:c5:6c:1d:b8:e4:0c:f4:e8:0d:1f:0b:43:
a8:d7:12:15:c5:c2:04:b0:7c:87:4e:ae:45:cd:8e:
15:14:0e:78:e1:02:a0:c7:b0:b3:63:8d:6e:c5:01:
7b:2d:a8:a6:99:a6:78:9c:8b:6b:c1:4c:a2:4e:27:
e2:bc:ff:50:63:cc:a9:b5:b8:11:3a:e9:49:e9:4a:
dc:48:61:06:97:6b:e7:e3:85:58:0d:81:50:af:a4:
44:f5:ff:ce:6c:dd:7f:1b:48:71:c3:f9:a9:1f:3b:
e8:3b:57:3f:f0:a5:3f:c0:f7:6c:f1:08:84:61:53:
3b:4f:33:01:39:96:23:f2:18:52:c4:d3:8d:86:7c:
27:6f:f4:85:c8:12:6b:13:f7:28:96:6d:02:dd:e0:
a8:a7:47:d9:32:ba:d1:f3:db:2d:fd:a1:6f:1d:dd:
17:9d:35:3f:79:89:60:36:23:f5:e5:ae:d9:45:c2:
2c:5a:e4:71:89:32:08:f1:11:b6:ee:e2:51:0e:42:
c1:c1:7b:c5:9d:ff:c1:71:c1:bb:7c:7b:f1:96:40:
71:28:bd:eb:1f:88:39:fe:73:73:7e:90:e7:16:50:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:64:97:C8:9C:48:82:75:7A:C2:5E:80:03:67:D4:82:AC:05:34:69
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/854cdc18-0507-4635-a2a7-cad1690f9b8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0c::/48
Signature Algorithm: sha256WithRSAEncryption
58:37:22:ec:a8:2b:7c:97:2c:22:9f:70:83:80:4e:08:79:31:
76:32:42:aa:20:cf:d5:0d:cf:57:00:06:88:04:6a:3b:83:b5:
c6:07:51:9b:28:84:95:32:55:36:31:5a:ec:34:1a:45:b5:b1:
6f:21:ea:6d:51:96:df:f2:16:31:1e:74:46:ec:29:88:28:bf:
19:1a:df:57:a8:95:05:dc:94:e1:35:46:c0:83:5b:fc:fa:f3:
00:47:79:cb:7a:eb:04:d3:2f:52:19:b6:e8:8e:62:48:7c:df:
7e:99:5c:0b:8b:de:dd:2b:9c:a3:9a:b4:86:1c:04:b4:bc:33:
61:4e:8d:2b:11:a4:22:d4:74:a9:5c:b8:43:71:8d:a5:0f:d0:
01:ae:8d:08:c9:31:2d:b9:72:3e:a5:b4:cc:d6:70:ea:f6:e6:
a7:3c:3f:e7:70:0b:a4:59:01:0b:a3:d2:32:d1:67:e4:e6:c1:
bc:68:9e:c8:a2:74:3d:ec:ae:60:e8:ed:d5:2a:11:38:27:e8:
e1:01:06:bc:ec:49:3c:fd:a2:81:04:84:a6:98:f7:a3:90:ac:
de:d5:81:34:7e:ce:b2:9f:57:aa:e2:21:4e:8e:c4:58:97:ae:
a2:b1:31:99:6f:0d:1c:ed:1f:cd:48:b9:84:16:5a:18:36:b2:
e7:db:70:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:09:57 2026 by rpki-client