
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a616b5-11a8-4007-a74f-4ee63ccfe0fb.roa
File: 98a616b5-11a8-4007-a74f-4ee63ccfe0fb.roa (raw, json)
Hash identifier: 6DiF7tXJ7nPjNu+yNXXCduXBsrJdA9Hp/rNeZp4LLik=
Subject key identifier: DF:A9:E0:A9:2D:56:99:94:82:3E:9C:EC:4F:F1:CC:E9:79:50:8A:E7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 384C4231C02D52F4CBBBEBC435D68BA39A9E10C7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a616b5-11a8-4007-a74f-4ee63ccfe0fb.roa
Signing time: Mon 23 Feb 2026 00:00:35 +0000
ROA not before: Mon 23 Feb 2026 00:00:35 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:4c:42:31:c0:2d:52:f4:cb:bb:eb:c4:35:d6:8b:a3:9a:9e:10:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 00:00:35 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=dcc0eb59ab823f9ea96c7b8eebc64a05085821a640a830c6512b5f859637998f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:54:55:dd:30:b5:20:d4:cd:1d:f0:1a:2d:
24:3e:0e:99:d6:cd:2d:42:c4:8e:7a:2e:0c:96:90:
f4:71:c9:29:26:cb:72:79:14:8c:66:e2:90:40:84:
38:e9:00:81:1e:a7:10:3b:d2:e2:b5:30:18:d8:73:
20:7e:98:b1:12:e3:d4:49:7e:8b:73:73:06:06:2f:
1f:4b:2e:e2:f3:8a:03:91:60:ee:d6:df:4c:2d:8f:
09:59:1e:2a:82:d6:96:5d:c8:a3:c3:1d:1c:aa:a9:
95:e5:35:a6:92:f5:4b:80:40:3e:3f:4d:0b:55:ca:
01:49:55:d3:86:7e:3f:94:a0:a5:27:da:af:a9:68:
f8:6e:e3:f2:ee:ec:a8:aa:f6:a1:cf:a1:cd:ca:06:
1c:a3:fd:98:ad:b1:3e:1f:50:eb:38:b7:ce:df:a4:
69:92:40:a8:60:69:28:dd:ea:18:a3:bf:a6:4e:b2:
d9:46:75:1a:41:24:58:06:96:ee:37:ed:6a:8d:9d:
43:29:a0:a9:59:55:35:56:ca:47:13:6f:a3:36:b9:
82:0b:00:19:38:4d:5e:dc:54:2b:a3:58:ab:95:bd:
18:95:33:e6:ad:6a:c5:43:85:7b:f1:0d:d7:d4:a8:
1b:8f:16:3e:f3:b8:6d:25:79:54:26:46:7d:e8:a7:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:E0:A9:2D:56:99:94:82:3E:9C:EC:4F:F1:CC:E9:79:50:8A:E7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98a616b5-11a8-4007-a74f-4ee63ccfe0fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.169.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5d:d7:1f:83:c5:fb:04:94:01:28:79:59:93:04:c4:a7:d2:
ee:22:5e:28:2a:02:17:3c:28:1b:8b:7d:de:c5:7d:f0:16:9f:
59:2e:02:cd:fb:8f:0d:86:ff:54:a4:25:92:0d:2f:94:3c:00:
6a:e3:ea:21:ef:8c:84:1f:8e:e7:15:c0:2d:27:7f:bd:b1:94:
8d:c1:1b:eb:18:c1:31:35:ff:f2:ce:c0:74:ed:e4:b9:e8:d7:
36:ab:13:f0:20:b8:1d:e4:c5:c8:51:33:6e:48:4b:81:4c:66:
b2:c0:f9:3e:b2:ce:35:22:f3:a4:73:7c:b6:27:07:8c:5a:2b:
d7:7a:0f:d0:df:1c:a6:bb:2d:2d:9d:d4:a5:92:c5:86:8d:18:
8e:04:c4:33:61:f4:8b:f2:5b:17:e7:22:fe:38:cc:b5:85:03:
ac:62:f5:6c:f5:95:0e:4f:de:15:06:2b:7a:f5:44:04:4e:7d:
19:f7:ea:ff:72:26:3b:ff:a1:38:84:da:25:c8:78:8e:9f:f0:
6b:2e:f6:3b:0c:01:a3:df:e2:15:5d:95:3f:65:16:39:2f:75:
12:91:8a:88:8a:79:62:85:ba:f3:dc:13:f5:fb:bf:46:f5:a3:
f5:d9:a1:5a:b3:c0:f8:d8:e0:07:d7:f4:95:f8:00:9e:a2:84:
04:6a:15:db
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOExCMcAtUvTLu+vENdaLo5qeEMcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDAwMDM1WhcNMjYwNTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkY2MwZWI1OWFiODIzZjllYTk2YzdiOGVlYmM2NGEwNTA4
NTgyMWE2NDBhODMwYzY1MTJiNWY4NTk2Mzc5OThmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzA1RV3TC1INTNHfAaLSQ+DpnWzS1CxI56LgyWkPRxySkm
y3J5FIxm4pBAhDjpAIEepxA70uK1MBjYcyB+mLES49RJfotzcwYGLx9LLuLzigOR
YO7W30wtjwlZHiqC1pZdyKPDHRyqqZXlNaaS9UuAQD4/TQtVygFJVdOGfj+UoKUn
2q+paPhu4/Lu7Kiq9qHPoc3KBhyj/ZitsT4fUOs4t87fpGmSQKhgaSjd6hijv6ZO
stlGdRpBJFgGlu437WqNnUMpoKlZVTVWykcTb6M2uYILABk4TV7cVCujWKuVvRiV
M+atasVDhXvxDdfUqBuPFj7zuG0leVQmRn3op7rdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU36ngqS1WmZSCPpzsT/HM6XlQiucwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzk4YTYxNmI1LTExYTgtNDAwNy1hNzRmLTRlZTYzY2NmZTBmYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0fKkwDQYJKoZIhvcNAQELBQADggEBAJtd1x+DxfsElAEoeVmTBMSn0u4i
XigqAhc8KBuLfd7FffAWn1kuAs37jw2G/1SkJZINL5Q8AGrj6iHvjIQfjucVwC0n
f72xlI3BG+sYwTE1//LOwHTt5Lno1zarE/AguB3kxchRM25IS4FMZrLA+T6yzjUi
86RzfLYnB4xaK9d6D9DfHKa7LS2d1KWSxYaNGI4ExDNh9IvyWxfnIv44zLWFA6xi
9Wz1lQ5P3hUGK3r1RAROfRn36v9yJjv/oTiE2iXIeI6f8Gsu9jsMAaPf4hVdlT9l
FjkvdRKRioiKeWKFuvPcE/X7v0b1o/XZoVqzwPjY4AfX9JX4AJ6ihARqFds=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:07:21 2026 by rpki-client