
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9be02593-00a7-45c2-91dd-104767f9324b.roa
File: 9be02593-00a7-45c2-91dd-104767f9324b.roa (raw, json)
Hash identifier: C6ABRwY4demaXz4wirh/9xozxlUboSm6HLGcwJAuQ/E=
Subject key identifier: F6:C3:5C:72:B2:E7:CC:72:E1:C2:C1:0E:C8:1B:77:72:AE:F0:E9:AA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 62DA81D13BAE55A9B492C16633DB8C84981197BF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9be02593-00a7-45c2-91dd-104767f9324b.roa
Signing time: Sat 28 Feb 2026 02:21:12 +0000
ROA not before: Sat 28 Feb 2026 02:21:12 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.242.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:da:81:d1:3b:ae:55:a9:b4:92:c1:66:33:db:8c:84:98:11:97:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 02:21:12 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=a52b4809d87485b635d4e51e856c1e5b29051e007c6b8324332f2f993aaa3cc9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:c3:f5:2a:b3:25:d4:49:f3:f6:20:2d:b8:
ac:d2:05:eb:e2:74:60:e3:50:90:36:61:98:72:b8:
cb:e3:2f:df:b7:4b:b8:e5:c6:56:81:de:1f:b5:cd:
b4:58:29:e2:5e:61:89:db:a7:e9:6a:90:e3:aa:05:
33:75:84:81:64:6d:c8:c5:62:3e:96:b4:ed:6f:f3:
31:ae:15:f4:a1:0a:b2:a6:ab:0e:44:41:34:e7:7f:
64:cf:b1:1f:cb:86:f2:94:a1:b7:35:40:62:18:46:
b3:44:61:a6:8b:74:1a:29:12:fa:6a:d6:f8:b5:b0:
48:f2:8f:2a:2d:7a:cf:40:f3:fe:20:d7:4e:61:a8:
8b:32:85:b6:49:cb:88:43:ef:f8:f4:28:de:8e:d6:
cc:bb:4c:b6:d3:6b:75:0b:20:63:01:93:ac:c2:22:
27:17:74:ff:07:a7:3a:15:33:9a:26:2b:43:57:a2:
ac:3a:d6:ca:a1:c0:22:0e:09:76:d0:e5:51:fd:e6:
91:17:33:42:40:d2:60:d2:08:c8:3d:0e:42:8b:26:
c4:12:a4:f2:75:94:23:5e:89:5a:5b:98:7f:8c:57:
a5:34:6e:f0:49:38:ea:c3:51:da:2f:44:40:a8:28:
a0:e2:79:0b:d0:af:2c:07:4d:89:dd:ca:3e:ea:04:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C3:5C:72:B2:E7:CC:72:E1:C2:C1:0E:C8:1B:77:72:AE:F0:E9:AA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9be02593-00a7-45c2-91dd-104767f9324b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:f8:55:7b:8d:76:de:8d:bd:41:c8:8d:21:31:bc:6c:32:3a:
6c:23:fe:14:81:3c:08:21:37:05:47:b3:83:52:7e:c3:e7:ea:
47:e4:dd:56:96:2e:26:db:d1:83:37:36:ae:d9:03:d4:2a:b5:
fe:96:7b:be:ad:ed:9c:d7:87:3f:f7:57:e5:2e:7a:45:3e:ae:
c2:af:ce:85:12:ee:39:58:31:3e:90:ed:e0:8b:f4:87:ff:1c:
e9:92:fd:15:c7:4d:46:c1:f8:4c:25:9a:c0:1e:f8:38:ed:2d:
ef:93:78:99:38:bb:bf:d6:36:8a:1b:98:a9:b8:03:c5:b9:8b:
6f:65:3e:ab:21:22:bd:23:e5:83:a1:04:16:ae:74:77:c0:df:
8f:ad:ee:10:a1:45:2c:ab:5c:df:46:1f:71:b4:e1:26:56:4f:
6f:30:65:c4:e2:c9:02:a2:27:c3:89:eb:ef:bd:ad:4e:30:5a:
36:d9:f1:40:b7:5e:f9:a8:08:fd:62:4f:c4:95:a7:f4:ea:96:
c1:71:cd:ba:77:40:2a:ed:31:5c:4f:c3:33:22:41:e5:e7:b3:
09:a6:69:4a:7b:e0:27:c7:9e:4a:1e:5a:6c:0d:45:e3:32:ac:
6f:9e:0a:30:aa:10:b4:ce:0d:99:26:78:34:32:65:d5:11:fa:
ee:b8:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:40:42 2026 by rpki-client