
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ea2f89a-bdcc-4fd0-b9a2-b5100d82c284.roa
File: 2ea2f89a-bdcc-4fd0-b9a2-b5100d82c284.roa (raw, json)
Hash identifier: OamrQzY9Qh/LCK5DBVJTuUqWvAX2CcDMFPRESqv/OWM=
Subject key identifier: 94:79:9B:60:85:0B:AD:FB:18:EA:B9:E2:42:CB:EB:6A:7D:E9:52:88
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6D5164EFC2C0A65C05BE12E064163E7891429DB8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ea2f89a-bdcc-4fd0-b9a2-b5100d82c284.roa
Signing time: Fri 20 Feb 2026 01:21:49 +0000
ROA not before: Fri 20 Feb 2026 01:21:49 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:51:64:ef:c2:c0:a6:5c:05:be:12:e0:64:16:3e:78:91:42:9d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 20 01:21:49 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=df946e747bf8cf2e7d24171b6ca9782ca13a1389f01d859c2f70137e0a8ac6b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:ab:21:8e:77:09:9e:79:f7:0c:de:34:d8:
38:72:7a:0d:15:18:7a:49:5a:e2:77:85:49:b1:03:
20:1b:22:cd:e6:6f:52:28:b3:3e:05:84:89:a8:ec:
d8:6c:69:ff:a5:08:8d:42:89:71:f8:82:50:c8:8e:
bf:0c:fb:a4:d4:4f:bb:f1:a1:36:8d:f7:c1:e7:29:
a2:8c:b8:ca:93:4d:85:e9:ea:0c:9a:69:01:84:c2:
1b:10:83:5a:a6:24:15:25:fa:09:8e:29:3d:a8:e5:
1c:f7:bc:e0:45:6f:f1:78:61:fc:b4:f6:96:c7:82:
a9:d5:e2:29:18:96:79:1d:c2:52:63:2f:f1:b5:50:
15:89:8c:9e:06:e8:16:97:65:dd:e6:23:49:5b:2a:
b9:f5:92:48:0c:ee:f4:7a:5d:23:a5:5f:75:c2:41:
f3:cf:9a:65:2e:28:c5:a2:5b:24:98:89:2d:8d:6c:
65:2f:c5:22:02:d3:3d:b2:a7:c9:7f:fa:4f:d1:2f:
8c:50:2c:e5:d0:25:b4:97:9c:f2:d6:8c:dd:f0:e1:
94:f9:ec:97:f4:a3:6a:3c:51:b2:42:27:d6:4f:36:
fd:dc:11:f9:62:6f:c2:e3:f8:12:04:e7:9f:af:93:
e1:ca:97:ad:1d:48:57:ed:b0:a8:0e:f1:97:44:04:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:79:9B:60:85:0B:AD:FB:18:EA:B9:E2:42:CB:EB:6A:7D:E9:52:88
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ea2f89a-bdcc-4fd0-b9a2-b5100d82c284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.145.0/24
Signature Algorithm: sha256WithRSAEncryption
90:21:f9:71:86:39:f1:cc:7f:15:d9:91:4a:19:3c:37:a7:bb:
7e:20:61:42:03:ce:ca:c7:2a:25:f2:fc:6e:f7:62:b8:27:9b:
0d:5c:60:6e:4d:e2:4f:f8:f9:a2:4a:1f:a4:5f:ac:c4:b8:e0:
49:2b:f3:13:a4:6b:39:c7:de:fc:83:a5:c7:2e:27:af:65:8c:
63:74:fa:f7:f9:23:36:1d:87:50:ec:bd:15:ee:ae:ce:d8:3d:
93:2f:eb:b2:7a:74:18:39:f9:61:b4:1b:21:40:7e:2a:02:fb:
8b:a9:10:3d:f0:45:55:07:08:92:7c:42:59:50:41:91:82:5f:
0d:b5:a5:0d:0d:df:3b:2a:41:4e:cc:de:f6:bf:d8:04:b5:3c:
91:59:45:a1:d5:a5:02:8d:b1:3d:5b:c3:c8:4d:ad:7a:5a:78:
26:42:30:38:24:0c:d5:ea:c2:e9:c6:62:b1:ca:41:df:a5:fa:
ce:7c:2c:f3:0a:95:23:80:39:fc:a3:14:df:91:b8:d2:09:bf:
6e:0a:d1:c2:1e:19:91:42:05:ff:d8:45:c0:b9:30:60:96:50:
f8:a7:66:6a:4c:d2:46:d7:43:8c:77:0c:b8:8c:21:eb:e2:3c:
ad:f2:b5:89:28:a7:9b:1f:46:e5:80:3d:9d:c9:5c:38:64:9b:
f9:1f:a2:bd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbVFk78LAplwFvhLgZBY+eJFCnbgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIwMDEyMTQ5WhcNMjYwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZjk0NmU3NDdiZjhjZjJlN2QyNDE3MWI2Y2E5NzgyY2Ex
M2ExMzg5ZjAxZDg1OWMyZjcwMTM3ZTBhOGFjNmI5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOM6shjncJnnn3DN402Dhyeg0VGHpJWuJ3hUmxAyAbIs3m
b1Iosz4FhImo7Nhsaf+lCI1CiXH4glDIjr8M+6TUT7vxoTaN98HnKaKMuMqTTYXp
6gyaaQGEwhsQg1qmJBUl+gmOKT2o5Rz3vOBFb/F4Yfy09pbHgqnV4ikYlnkdwlJj
L/G1UBWJjJ4G6BaXZd3mI0lbKrn1kkgM7vR6XSOlX3XCQfPPmmUuKMWiWySYiS2N
bGUvxSIC0z2yp8l/+k/RL4xQLOXQJbSXnPLWjN3w4ZT57Jf0o2o8UbJCJ9ZPNv3c
Eflib8Lj+BIE55+vk+HKl60dSFftsKgO8ZdEBF3dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlHmbYIULrfsY6rniQsvran3pUogwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzJlYTJmODlhLWJkY2MtNGZkMC1iOWEyLWI1MTAwZDgyYzI4NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPnpEwDQYJKoZIhvcNAQELBQADggEBAJAh+XGGOfHMfxXZkUoZPDenu34g
YUIDzsrHKiXy/G73Yrgnmw1cYG5N4k/4+aJKH6RfrMS44Ekr8xOkaznH3vyDpccu
J69ljGN0+vf5IzYdh1DsvRXurs7YPZMv67J6dBg5+WG0GyFAfioC+4upED3wRVUH
CJJ8QllQQZGCXw21pQ0N3zsqQU7M3va/2AS1PJFZRaHVpQKNsT1bw8hNrXpaeCZC
MDgkDNXqwunGYrHKQd+l+s58LPMKlSOAOfyjFN+RuNIJv24K0cIeGZFCBf/YRcC5
MGCWUPinZmpM0kbXQ4x3DLiMIeviPK3ytYkop5sfRuWAPZ3JXDhkm/kfor0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:46:16 2026 by rpki-client