
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ed54b8-28e6-458f-9ab0-bf5493fad6d6.roa
File: 99ed54b8-28e6-458f-9ab0-bf5493fad6d6.roa (raw, json)
Hash identifier: rIF1dZXr+dmQQApPSFPIrrS+C4u5OwRFYF53bwEFg5A=
Subject key identifier: 4B:25:0B:6F:54:80:31:9D:2C:8A:D2:ED:3E:6F:A9:5D:57:7D:47:45
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6926F1ABBCF83410A464621F505DD211B6D0545C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ed54b8-28e6-458f-9ab0-bf5493fad6d6.roa
Signing time: Tue 17 Feb 2026 02:21:12 +0000
ROA not before: Tue 17 Feb 2026 02:21:12 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.146.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:26:f1:ab:bc:f8:34:10:a4:64:62:1f:50:5d:d2:11:b6:d0:54:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 02:21:12 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=23b32a949a997e7e9b949fb940a8fd0388909ed632389dbef550a7ae2ace489f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:0e:0f:5c:7b:11:c0:d2:53:82:23:69:9a:
ca:6c:0c:d3:96:fc:8d:5b:3a:05:67:f8:6b:18:51:
e2:a5:b5:c2:39:70:90:73:d2:9f:10:4a:36:e4:0f:
8d:48:d1:49:cb:68:57:88:a7:6f:e5:39:c4:43:44:
48:61:54:1e:66:a6:93:d1:70:d3:75:83:59:e0:68:
9f:18:37:ae:ce:61:04:70:5e:86:44:42:fe:ff:cd:
da:34:fe:fa:bd:10:1e:f4:f1:8d:2a:16:cb:15:2f:
eb:36:56:b7:e7:15:c7:8a:45:f5:57:22:78:ec:55:
05:55:ed:11:15:16:2f:34:bf:ef:c6:80:1b:8d:1b:
07:e4:78:67:c3:a9:69:cc:ed:6d:c4:c7:e9:1c:b5:
b3:e3:17:6a:a1:07:46:ba:af:4b:c4:c8:0b:73:07:
cf:37:dd:dc:f2:f2:f9:a3:18:ef:82:0b:ef:1d:6f:
2e:94:a4:68:d6:c0:3b:65:6c:ea:63:8b:f5:9a:28:
93:a4:6e:73:bb:3e:d6:39:db:ae:7e:b9:ed:9f:66:
a7:8a:c7:cf:90:de:86:76:45:9a:67:5d:5e:23:54:
37:f9:22:ad:30:42:c8:5b:27:c0:f4:17:51:45:b7:
0f:b2:92:83:57:25:bc:cf:41:bb:07:cc:38:e5:82:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:0B:6F:54:80:31:9D:2C:8A:D2:ED:3E:6F:A9:5D:57:7D:47:45
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ed54b8-28e6-458f-9ab0-bf5493fad6d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.146.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:08:fa:c9:18:1f:11:68:37:43:32:6a:36:70:71:6e:d2:a4:
f2:d8:cf:fd:54:fa:f1:25:c9:1e:57:9c:0b:49:0d:0e:0c:0e:
44:2c:09:81:75:a8:bf:dd:a7:4c:58:5a:0d:06:53:37:f5:5a:
43:b2:a2:5c:af:a3:1d:b1:83:73:71:fd:ae:47:98:36:66:57:
60:bb:ad:7a:77:50:6c:84:5e:4c:d5:3d:c4:b1:5e:be:54:c0:
27:7d:c2:34:6a:0e:ea:86:90:25:9d:15:28:4c:fb:fc:bc:c6:
52:38:08:0e:d2:95:40:e7:b5:4e:f7:86:5d:de:77:95:00:ce:
2e:a2:38:2e:1e:5f:c7:f2:a4:c9:d2:72:f8:47:73:fe:c7:86:
34:e8:6a:10:39:7b:35:41:77:0d:3c:41:68:d4:cd:c6:49:ee:
20:7f:88:d5:75:03:02:68:73:17:0f:6c:1e:9a:aa:78:19:e9:
a4:bf:11:28:20:3e:d2:53:59:22:8e:84:8c:ec:18:66:1e:5c:
4f:90:5b:3a:88:2e:30:88:1a:82:1d:60:60:a9:a4:1c:10:f3:
8d:ba:53:51:62:e8:24:c8:c1:c8:25:6d:b3:98:33:be:a9:4f:
b1:e9:f3:01:30:b2:c9:e3:a3:dd:bb:02:73:0c:0c:69:6c:fc:
12:65:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:51:17 2026 by rpki-client