
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa
File: f0f08d8e-64f4-4e2b-8f33-26427783e662.roa (raw, json)
Hash identifier: GjzkS0g4TgP5ZPrwcAtpI3JgX5+Wk3PUkRg+MKn9TRs=
Subject key identifier: FA:8F:B5:FE:E0:98:7A:53:63:DD:AF:89:60:2F:53:28:4C:4C:B2:7F
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 1020ED467AA7EA03788CA058EC7642AB609EECDB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa
Signing time: Mon 26 Oct 2026 03:50:29 +0000
ROA not before: Mon 26 Oct 2026 03:50:29 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:54a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:20:ed:46:7a:a7:ea:03:78:8c:a0:58:ec:76:42:ab:60:9e:ec:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 26 03:50:29 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=4212f1677b44acd1345c3ab400243c5febb46f7dd3f933b76f8f5111cbd10b17, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:2c:d3:7b:ba:d9:8d:0f:18:8b:82:3c:39:
21:9e:c6:a9:a1:93:32:63:3c:9f:f4:be:d8:38:3d:
2e:5b:90:b2:91:67:e5:61:2b:71:68:bf:ea:d0:4e:
f6:e7:4e:fc:a4:52:b5:41:c8:3b:fb:0c:47:0d:85:
45:43:e0:03:56:13:bf:1a:11:cb:f6:5c:6c:01:79:
ec:03:a0:bf:1a:db:7c:1c:01:08:aa:7a:31:f0:53:
38:79:e3:8e:0a:fd:e5:91:6e:cc:86:0a:87:d9:a7:
74:7e:07:ea:8b:64:75:dd:1b:c0:dd:0f:57:58:37:
57:d5:76:9f:aa:4f:b8:71:3f:e7:aa:bf:0e:a8:36:
1e:4e:5b:f5:96:5a:42:9b:89:17:cc:0d:50:39:42:
fc:6f:84:2f:a2:c5:30:d4:54:2e:3f:9d:44:53:d5:
43:51:3e:5c:ea:db:0f:7d:c3:f6:52:56:4a:6d:c5:
2a:fc:68:89:6b:22:20:0c:98:0b:92:62:96:0c:06:
4d:47:fc:86:0b:76:ac:d7:70:8f:83:c8:0f:bd:a6:
b5:d6:c7:6a:e5:ba:a8:04:3d:04:09:17:6f:34:09:
0d:c6:61:07:bd:ca:ef:a3:9d:e6:70:64:66:75:98:
95:f8:69:a4:a4:ba:d3:94:97:2d:48:0a:3f:10:45:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:B5:FE:E0:98:7A:53:63:DD:AF:89:60:2F:53:28:4C:4C:B2:7F
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f0f08d8e-64f4-4e2b-8f33-26427783e662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:54a::/48
Signature Algorithm: sha256WithRSAEncryption
a9:cb:0f:cb:3a:1f:0e:c1:b9:09:03:8a:19:da:d9:c0:5c:1e:
09:03:9b:8b:68:e6:b8:7b:cf:90:6e:84:d2:19:35:e8:b0:e3:
bc:f3:d7:95:43:5e:2f:4b:9f:5f:3f:5f:0d:b7:f1:03:2a:1a:
a2:fb:97:fb:c1:58:fb:1e:3d:af:79:c9:d1:9b:f7:61:78:2c:
89:d4:fa:ab:c0:e1:52:03:06:ca:ef:3d:ff:8b:11:0f:4a:d4:
93:57:7c:11:ec:fb:fb:f1:46:c5:c3:ff:9d:e1:75:bb:c4:40:
cb:35:bb:af:2d:cc:69:94:74:89:90:64:4d:0b:ff:32:20:2b:
4e:4b:95:21:8d:1e:92:da:50:87:a0:5c:65:f3:5b:f8:c7:cc:
ee:19:22:df:38:3c:76:ca:09:94:0b:ac:2c:28:bb:a6:24:70:
01:ad:1f:1e:f5:9a:6a:cb:27:cd:f1:22:cf:bb:66:8e:3f:df:
3e:b7:8a:1a:12:ca:0f:ff:b6:cc:a4:6f:27:fa:0c:ad:2a:28:
13:fb:5d:a4:83:1c:c5:93:ec:87:35:3d:7b:37:08:76:0c:63:
0d:81:8e:80:af:e5:ad:b9:bd:05:85:1a:28:cd:0d:36:8b:ae:
2d:fa:4a:1b:68:ee:bd:05:d3:de:1e:10:16:69:1c:49:0d:64:
35:be:03:dd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUECDtRnqn6gN4jKBY7HZCq2Ce7NswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDM1MDI5WhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MjEyZjE2NzdiNDRhY2QxMzQ1YzNhYjQwMDI0M2M1ZmVi
YjQ2ZjdkZDNmOTMzYjc2ZjhmNTExMWNiZDEwYjE3MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDlrCzTe7rZjQ8Yi4I8OSGexqmhkzJjPJ/0vtg4PS5bkLKR
Z+VhK3Fov+rQTvbnTvykUrVByDv7DEcNhUVD4ANWE78aEcv2XGwBeewDoL8a23wc
AQiqejHwUzh5444K/eWRbsyGCofZp3R+B+qLZHXdG8DdD1dYN1fVdp+qT7hxP+eq
vw6oNh5OW/WWWkKbiRfMDVA5QvxvhC+ixTDUVC4/nURT1UNRPlzq2w99w/ZSVkpt
xSr8aIlrIiAMmAuSYpYMBk1H/IYLdqzXcI+DyA+9prXWx2rluqgEPQQJF280CQ3G
YQe9yu+jneZwZGZ1mJX4aaSkutOUly1ICj8QRVazAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU+o+1/uCYelNj3a+JYC9TKExMsn8wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2YwZjA4ZDhlLTY0ZjQtNGUyYi04ZjMzLTI2NDI3NzgzZTY2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABUowDQYJKoZIhvcNAQELBQADggEBAKnLD8s6Hw7BuQkDihna2cBc
HgkDm4to5rh7z5BuhNIZNeiw47zz15VDXi9Ln18/Xw238QMqGqL7l/vBWPsePa95
ydGb92F4LInU+qvA4VIDBsrvPf+LEQ9K1JNXfBHs+/vxRsXD/53hdbvEQMs1u68t
zGmUdImQZE0L/zIgK05LlSGNHpLaUIegXGXzW/jHzO4ZIt84PHbKCZQLrCwou6Yk
cAGtHx71mmrLJ83xIs+7Zo4/3z63ihoSyg//tsykbyf6DK0qKBP7XaSDHMWT7Ic1
PXs3CHYMYw2BjoCv5a25vQWFGijNDTaLri36Shto7r0F094eEBZpHEkNZDW+A90=
-----END CERTIFICATE-----
Generated at Sun Nov 8 04:16:13 2026 by rpki-client