
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bee7123b-1846-437e-98e3-0b61cbf8c49b.roa
File: bee7123b-1846-437e-98e3-0b61cbf8c49b.roa (raw, json)
Hash identifier: ivf6o3q52eVUTVKqbJm5xNuCh5Nbz3HRF5fbJqZUAmA=
Subject key identifier: 46:5E:CB:24:A6:9A:39:0B:F1:2D:6B:CF:F3:83:2C:31:1C:81:9D:24
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2A01EAB2247B4835B487DB0EC017221BED21922D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bee7123b-1846-437e-98e3-0b61cbf8c49b.roa
Signing time: Sat 28 Feb 2026 03:00:11 +0000
ROA not before: Sat 28 Feb 2026 03:00:11 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.76.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:01:ea:b2:24:7b:48:35:b4:87:db:0e:c0:17:22:1b:ed:21:92:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 03:00:11 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=ec79816a52ed7127bd71c862ad14ab6c90a7137cf0d731aadfbe26439ca5008b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:42:45:50:57:d0:a9:75:60:02:c8:c0:1a:
1e:04:02:cd:09:2e:a6:c5:e5:89:44:98:00:61:5d:
a1:56:91:67:76:37:9f:5c:3d:7a:0b:9e:f3:c6:44:
3a:ec:79:62:06:4f:29:63:d9:7e:4a:de:dc:ab:28:
96:64:26:c2:5d:bb:3a:e0:98:fd:e3:57:73:d7:6d:
77:25:fb:f7:1a:0f:e6:35:6f:c7:26:ed:fa:04:bc:
f0:e9:62:a3:a8:3e:e1:73:a8:ac:3d:ea:fc:45:47:
e6:3c:c6:d0:b0:f6:2e:3a:26:8b:19:5c:63:04:d8:
7d:ab:47:66:bb:bc:2d:02:c1:43:0a:59:af:8e:ab:
fa:b9:03:b0:f3:dc:4a:c3:e7:89:60:1f:5a:d0:2e:
c4:47:8c:7c:fa:be:06:8b:1b:81:42:92:43:c5:06:
56:fa:24:16:2b:ea:8e:a7:bf:90:72:4c:75:e0:a9:
3e:49:bf:e5:57:82:ee:1a:44:8b:f5:c1:8e:65:b4:
16:6f:26:5b:4b:fd:0b:64:78:d2:58:ed:ce:3e:a6:
d0:96:63:fa:22:f8:a1:80:56:70:a3:79:7f:58:ba:
ed:5d:87:fe:74:67:44:41:6b:22:88:c2:7b:e5:98:
af:3f:8a:93:98:c2:00:36:9c:b2:d9:62:cf:31:bf:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5E:CB:24:A6:9A:39:0B:F1:2D:6B:CF:F3:83:2C:31:1C:81:9D:24
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bee7123b-1846-437e-98e3-0b61cbf8c49b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.76.0.0/15
Signature Algorithm: sha256WithRSAEncryption
57:05:e0:4d:22:27:49:af:eb:8f:96:31:aa:68:1d:fd:ee:8a:
f7:ab:43:1f:26:7e:d3:b2:ef:bb:39:cf:76:a5:5c:0a:d6:8d:
2e:f7:d5:57:80:6e:30:00:1b:f9:4d:75:1d:74:d1:a6:fa:3e:
31:b6:2c:85:d4:11:83:92:73:68:a0:15:39:50:b0:e3:ca:77:
85:c4:00:71:7e:a1:34:a3:71:86:ba:43:61:61:08:a3:c4:bc:
66:16:1b:84:62:bd:b0:4f:df:a0:98:38:fb:98:93:d3:9e:19:
1b:55:fd:f1:65:1d:56:57:4f:be:d6:2a:0f:65:66:c2:04:98:
23:04:59:3e:07:fa:0b:12:8f:8e:21:05:33:28:ea:72:20:96:
e6:f6:d6:3c:a4:e9:81:38:6d:48:0d:3c:6f:0f:f4:d5:9a:62:
f2:e0:e3:bf:93:cc:8f:22:c4:3d:4b:30:69:67:55:b6:e0:73:
6d:b3:78:30:63:b5:d7:d1:10:30:ae:49:2c:d3:31:48:24:4e:
14:a1:62:12:f1:90:69:13:f7:fb:98:b0:dc:78:47:b9:3a:2e:
fd:69:56:00:04:98:bf:64:51:cd:67:ae:a2:71:5d:9f:26:c4:
b2:0e:b5:e1:2a:8b:8b:95:53:6e:bc:d1:b7:bf:53:39:b9:33:
79:07:ea:96
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUKgHqsiR7SDW0h9sOwBciG+0hki0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDMwMDExWhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzc5ODE2YTUyZWQ3MTI3YmQ3MWM4NjJhZDE0YWI2Yzkw
YTcxMzdjZjBkNzMxYWFkZmJlMjY0MzljYTUwMDhiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw00JFUFfQqXVgAsjAGh4EAs0JLqbF5YlEmABhXaFWkWd2
N59cPXoLnvPGRDrseWIGTylj2X5K3tyrKJZkJsJduzrgmP3jV3PXbXcl+/caD+Y1
b8cm7foEvPDpYqOoPuFzqKw96vxFR+Y8xtCw9i46JosZXGME2H2rR2a7vC0CwUMK
Wa+Oq/q5A7Dz3ErD54lgH1rQLsRHjHz6vgaLG4FCkkPFBlb6JBYr6o6nv5ByTHXg
qT5Jv+VXgu4aRIv1wY5ltBZvJltL/QtkeNJY7c4+ptCWY/oi+KGAVnCjeX9Yuu1d
h/50Z0RBayKIwnvlmK8/ipOYwgA2nLLZYs8xv2HhAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQURl7LJKaaOQvxLWvP84MsMRyBnSQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2JlZTcxMjNiLTE4NDYtNDM3ZS05OGUzLTBiNjFjYmY4YzQ5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE2TDANBgkqhkiG9w0BAQsFAAOCAQEAVwXgTSInSa/rj5Yxqmgd/e6K96tD
HyZ+07LvuznPdqVcCtaNLvfVV4BuMAAb+U11HXTRpvo+MbYshdQRg5JzaKAVOVCw
48p3hcQAcX6hNKNxhrpDYWEIo8S8ZhYbhGK9sE/foJg4+5iT054ZG1X98WUdVldP
vtYqD2VmwgSYIwRZPgf6CxKPjiEFMyjqciCW5vbWPKTpgThtSA08bw/01Zpi8uDj
v5PMjyLEPUswaWdVtuBzbbN4MGO119EQMK5JLNMxSCROFKFiEvGQaRP3+5iw3HhH
uTou/WlWAASYv2RRzWeuonFdnybEsg614SqLi5VTbrzRt79TObkzeQfqlg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:25:59 2026 by rpki-client