
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/892d8f96-62eb-4803-bfe4-1f245858e633.roa
File: 892d8f96-62eb-4803-bfe4-1f245858e633.roa (raw, json)
Hash identifier: LmxuQOcKjTTZxUZKcyR3EHnL9mAaXHUC1J+aIYjOW80=
Subject key identifier: F4:1D:B1:91:B9:D5:30:A4:35:B5:CD:2D:DC:62:E7:BA:83:23:A8:EE
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 66CD1E271098537C4EBDBDEEF8C3629DBDE1A234
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/892d8f96-62eb-4803-bfe4-1f245858e633.roa
Signing time: Fri 20 Feb 2026 00:50:08 +0000
ROA not before: Fri 20 Feb 2026 00:50:08 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 204.246.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cd:1e:27:10:98:53:7c:4e:bd:bd:ee:f8:c3:62:9d:bd:e1:a2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Feb 20 00:50:08 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=f0e94eb144709333eb5877a74f69aaaa1723557f1a4d67ac7356ac7753882e27, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:88:5f:69:cd:d1:e1:3d:52:2d:22:20:88:
61:59:aa:54:93:e4:19:01:2d:f0:90:ce:b3:be:7b:
5e:ac:f4:6a:43:a7:a8:e0:71:30:12:bd:4e:6c:95:
d3:b7:c0:a7:2f:84:13:8f:c5:9b:7f:ce:cb:40:04:
4e:55:14:fc:f7:72:7d:1f:32:7c:60:86:50:09:3d:
14:37:ac:76:8f:97:28:b6:3a:3f:d9:a3:a3:b6:92:
75:f6:e3:67:10:77:24:67:91:7f:74:41:d7:1f:c0:
d6:7e:4d:fc:61:45:ec:db:6e:99:6f:f3:42:fd:bd:
26:90:a8:82:06:9f:b7:2f:91:b5:94:b0:02:a6:89:
89:60:f3:4b:6f:0f:1e:bf:11:55:52:f4:18:52:6b:
24:9d:49:b3:ce:6b:bd:18:ca:5b:e7:26:de:95:9c:
96:7b:f3:d2:1b:a4:82:5f:5e:a1:4b:22:58:fd:b0:
49:09:7e:43:6b:dc:d4:f2:8b:c5:4d:7e:2b:72:4c:
80:02:7c:be:c8:b9:a5:b1:88:32:e0:62:59:79:7f:
13:9b:d8:be:52:e3:96:fc:ae:41:1d:c2:24:45:47:
1d:0f:27:d1:21:11:72:88:73:ac:9e:b1:b9:43:85:
a8:3d:25:aa:ff:9b:cd:80:81:44:52:20:79:db:36:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:B1:91:B9:D5:30:A4:35:B5:CD:2D:DC:62:E7:BA:83:23:A8:EE
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/892d8f96-62eb-4803-bfe4-1f245858e633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.246.178.0/23
Signature Algorithm: sha256WithRSAEncryption
25:65:e0:34:5a:a0:97:9a:c8:b0:88:6e:14:15:a4:85:d3:66:
19:13:d5:56:5c:18:bb:f6:66:35:59:9d:31:d1:e3:b0:21:7e:
b7:20:44:ae:03:b6:6d:4b:55:30:bb:36:01:a1:ab:69:cb:2a:
b9:1c:bc:21:ca:ed:0f:b4:9a:0a:4e:a3:b6:1f:62:76:aa:23:
6c:a0:9c:ba:05:e7:b3:15:84:45:00:c0:1a:3f:8e:1c:54:06:
58:21:77:22:4b:58:49:d4:25:f1:03:f8:b9:6c:89:8a:7b:14:
da:37:0b:f9:eb:a4:e4:4d:6a:3a:4e:1d:cc:ee:3e:12:9f:b6:
8b:fe:62:92:47:4a:03:4d:28:cd:92:e7:1b:95:5b:be:6a:e3:
08:ba:c8:75:3b:f8:22:9b:c9:d2:1e:8d:bd:b2:f6:8b:f5:fd:
b9:d1:9b:b3:b2:9a:bb:fb:df:34:be:f9:0b:ea:24:77:98:d9:
39:23:c3:34:f5:7d:04:21:41:bc:cb:af:0c:52:91:4b:0c:4c:
d3:84:f7:86:20:70:1b:b3:f8:60:bd:a4:20:dc:3e:fc:24:07:
12:93:23:65:f5:fa:8e:38:27:d5:c0:d0:92:0b:f2:43:b3:18:
0b:e1:a5:c3:5a:c5:6d:02:1d:39:8f:31:30:25:bf:32:b2:83:
23:2f:a8:4b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZs0eJxCYU3xOvb3u+MNinb3hojQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjIwMDA1MDA4WhcNMjYwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmMGU5NGViMTQ0NzA5MzMzZWI1ODc3YTc0ZjY5YWFhYTE3
MjM1NTdmMWE0ZDY3YWM3MzU2YWM3NzUzODgyZTI3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3/ohfac3R4T1SLSIgiGFZqlST5BkBLfCQzrO+e16s9GpD
p6jgcTASvU5sldO3wKcvhBOPxZt/zstABE5VFPz3cn0fMnxghlAJPRQ3rHaPlyi2
Oj/Zo6O2knX242cQdyRnkX90QdcfwNZ+TfxhRezbbplv80L9vSaQqIIGn7cvkbWU
sAKmiYlg80tvDx6/EVVS9BhSaySdSbPOa70YylvnJt6VnJZ789IbpIJfXqFLIlj9
sEkJfkNr3NTyi8VNfityTIACfL7IuaWxiDLgYll5fxOb2L5S45b8rkEdwiRFRx0P
J9EhEXKIc6yesblDhag9Jar/m82AgURSIHnbNvcJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9B2xkbnVMKQ1tc0t3GLnuoMjqO4wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1Lzg5MmQ4Zjk2LTYyZWItNDgwMy1iZmU0LTFmMjQ1ODU4ZTYzMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHM9rIwDQYJKoZIhvcNAQELBQADggEBACVl4DRaoJeayLCIbhQVpIXTZhkT
1VZcGLv2ZjVZnTHR47AhfrcgRK4Dtm1LVTC7NgGhq2nLKrkcvCHK7Q+0mgpOo7Yf
YnaqI2ygnLoF57MVhEUAwBo/jhxUBlghdyJLWEnUJfED+LlsiYp7FNo3C/nrpORN
ajpOHczuPhKftov+YpJHSgNNKM2S5xuVW75q4wi6yHU7+CKbydIejb2y9ov1/bnR
m7Oymrv73zS++QvqJHeY2TkjwzT1fQQhQbzLrwxSkUsMTNOE94YgcBuz+GC9pCDc
PvwkBxKTI2X1+o44J9XA0JIL8kOzGAvhpcNaxW0CHTmPMTAlvzKygyMvqEs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:50 2026 by rpki-client