
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa
File: b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa (raw, json)
Hash identifier: /7N0pCotsBalEfBKlNU0gcL8fmoLUsjv4J2/dwQSr0Q=
Subject key identifier: 75:3F:83:12:75:32:82:0D:59:32:B9:2A:AC:E2:1E:E0:D4:5C:04:4E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4C4791D79503D0DED36F52AA16E59FD37B089274
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa
Signing time: Sat 28 Feb 2026 04:40:59 +0000
ROA not before: Sat 28 Feb 2026 04:40:59 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:385::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:47:91:d7:95:03:d0:de:d3:6f:52:aa:16:e5:9f:d3:7b:08:92:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Feb 28 04:40:59 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=50082fd2799cbb9687eb29306defc0a1e943104c03c206ef95196278e5c0fd22, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:bf:d6:72:75:1f:62:ec:b2:ae:6f:68:03:
83:64:ac:90:69:a0:41:2f:51:da:28:f3:2a:d0:2b:
a7:c0:5c:79:80:ff:79:54:11:04:05:75:34:a9:fe:
12:6a:3d:d0:b4:68:66:49:3c:1b:c0:c3:96:32:0d:
ef:83:60:39:65:fd:26:10:95:77:ce:fa:43:73:83:
3d:d0:32:61:38:0c:2b:b0:8b:61:d4:89:b2:e2:1a:
3f:a2:83:a0:d7:f9:11:dc:af:2b:b0:e1:73:3c:bf:
ce:9b:75:87:67:4e:7a:ca:94:6d:80:94:1c:73:f8:
7c:0b:80:68:ba:ce:a4:f8:a9:c7:77:a8:ed:98:15:
22:55:25:01:16:b7:63:a3:1c:a5:6f:f3:f1:94:91:
ac:f4:85:04:4e:a9:f7:9c:e9:e5:37:a7:67:fd:a0:
dc:df:f2:1e:b1:7c:32:0e:ae:d8:01:61:be:da:ca:
f9:a2:3a:87:dc:0d:27:05:f4:69:c8:27:ac:d0:c5:
39:85:bd:69:a2:d8:2d:a0:b1:1d:54:86:16:b0:c2:
58:95:25:ca:87:4f:31:ab:46:40:fd:fe:fc:01:45:
00:6f:ec:70:c8:ab:4a:c4:19:88:1d:c8:19:fd:73:
07:1e:fe:7e:ff:03:6e:05:61:2f:8d:30:70:d4:b5:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:83:12:75:32:82:0D:59:32:B9:2A:AC:E2:1E:E0:D4:5C:04:4E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:385::/48
Signature Algorithm: sha256WithRSAEncryption
30:f3:3d:5b:7b:ec:fa:41:8a:a2:76:75:80:48:e8:5b:15:2e:
26:84:b3:63:6c:c8:cc:7d:2f:de:a4:fa:38:ab:88:2d:52:21:
ce:1e:a4:9f:86:88:ff:a7:bf:c7:75:dd:58:68:d5:39:29:77:
b1:50:84:0f:7c:e9:24:eb:97:4a:8c:60:40:16:f1:b1:76:02:
f3:1f:2c:35:7d:cb:fa:c6:a4:15:16:38:5f:87:a0:33:ed:2b:
29:b6:6d:84:4e:d1:e6:65:bd:4e:bc:08:65:7a:f1:04:90:48:
10:d0:e4:a4:f1:9b:ad:81:d0:86:a8:c1:2d:1d:30:7f:72:c0:
6c:90:3e:b5:5c:5a:c1:46:56:7a:83:a5:c9:a1:e8:ba:95:76:
d1:d1:42:de:5f:94:bd:1a:84:d1:e4:dc:f4:17:65:69:9e:7b:
7c:ad:4a:f3:ca:b7:73:7c:d3:e4:69:e8:30:dc:12:3e:03:2c:
ae:f8:9b:d9:87:de:4d:64:d1:fe:19:22:31:1e:f2:4d:13:b4:
b2:72:22:26:29:68:ad:d4:f6:a1:e6:66:54:8e:f7:cb:33:5e:
07:47:13:ff:1d:85:ab:cc:3d:ed:0b:99:19:1c:0c:ee:b7:fa:
6d:c7:51:ce:ab:7d:74:77:50:bb:29:e0:da:a8:e2:16:ba:24:
7b:46:e7:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:22 2026 by rpki-client