
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3d895df-b476-41d3-91ff-5218ae6dd9f1.roa
File: d3d895df-b476-41d3-91ff-5218ae6dd9f1.roa (raw, json)
Hash identifier: 1tuNEBJ1PyEneYbtj5I/xcz67GC9DRA2dNLi0s69S70=
Subject key identifier: 59:9B:F4:D7:2A:2B:08:3F:4D:10:3F:EB:1D:4A:12:01:2D:3B:BF:5D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 03C10B55ED5E9E1C6245F696351D3A70E9373C10
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3d895df-b476-41d3-91ff-5218ae6dd9f1.roa
Signing time: Tue 17 Feb 2026 02:01:30 +0000
ROA not before: Tue 17 Feb 2026 02:01:30 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.171.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c1:0b:55:ed:5e:9e:1c:62:45:f6:96:35:1d:3a:70:e9:37:3c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 02:01:30 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=f1294fd0c046eb102eee4b2e578db8970c0a732b09ddf262fe860c73d27c2283, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:b5:94:50:98:bb:d4:e7:c1:ef:93:b9:14:
d7:24:3d:88:83:1b:a1:81:3e:3c:d4:83:0d:c7:d7:
c9:bf:8e:1f:b5:d2:08:1d:24:31:c3:4f:86:6c:19:
6a:26:0c:0e:9e:d8:24:b8:28:77:84:43:eb:53:18:
ec:17:56:2b:3a:0a:b0:8f:3a:a7:df:ae:0a:b0:6b:
aa:a3:fe:e2:17:2f:d8:97:72:81:83:a5:0f:e8:44:
0c:89:a5:65:08:6a:12:8f:23:e8:64:74:70:b7:95:
49:c8:d4:ea:35:a8:60:62:a1:aa:4f:96:d4:89:dc:
10:7e:d5:31:08:e9:e3:f5:29:63:82:82:34:ef:e4:
22:2f:85:25:88:23:a0:94:c1:ac:0d:b3:e0:26:f2:
e1:b3:f3:60:e6:74:0a:2c:b9:20:92:fd:c8:e7:15:
3f:fd:ed:af:7e:5e:65:57:6c:6f:a1:fb:1c:f3:da:
79:e4:e7:1f:22:d4:96:8e:2f:c0:19:e8:24:03:27:
e9:9f:97:26:75:ad:3b:5f:1f:f6:f5:76:b8:04:fc:
05:0f:ae:5b:b7:2a:4a:24:44:9c:6c:56:06:f7:b3:
ec:b5:9a:59:8d:c6:ed:8e:fe:2d:cb:ab:10:4f:23:
89:35:2e:e2:54:c3:5c:a9:fd:da:a8:30:e2:43:97:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:F4:D7:2A:2B:08:3F:4D:10:3F:EB:1D:4A:12:01:2D:3B:BF:5D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3d895df-b476-41d3-91ff-5218ae6dd9f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.171.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:20:26:09:f5:1c:6c:db:a7:5e:9a:69:b8:9f:44:c3:e3:11:
2e:e4:02:04:e0:c7:b1:8f:1e:ab:37:3c:8c:fe:5e:e3:7e:1b:
86:7f:a1:cf:8a:bb:94:e1:6e:a1:9f:8c:b6:76:33:77:c1:17:
03:de:9f:8a:35:a6:08:a2:6b:5f:39:ec:18:89:29:9b:0d:a3:
53:1a:a2:79:be:42:7d:8b:aa:ca:50:c8:17:75:c3:27:96:f8:
0e:4f:60:37:94:17:10:8f:a7:f1:1c:6e:7d:53:86:bf:f4:9f:
69:bc:da:7d:40:20:e1:f2:df:0a:0b:2d:c3:71:87:5e:04:6c:
4a:d6:0b:67:5e:58:bb:41:ee:71:02:98:47:48:77:43:08:75:
1d:80:5e:12:c7:7c:ac:6b:18:c3:01:30:a0:b2:67:35:0d:a7:
1d:d1:73:0d:15:1a:9e:23:57:6c:a9:bb:bd:37:5b:cd:37:53:
57:e0:f8:22:82:3c:6f:b2:2d:5f:b9:8d:c5:c0:4f:a6:6a:bb:
d0:d9:6d:8a:64:5e:e6:36:45:35:a1:77:8e:bd:56:93:e3:11:
65:f1:84:2a:3a:25:ae:d9:00:73:ea:46:84:4c:55:8c:fe:f5:
7f:47:10:8e:eb:d9:45:4f:df:da:10:cd:36:93:59:40:6c:00:
e7:cb:27:d5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUA8ELVe1enhxiRfaWNR06cOk3PBAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDIwMTMwWhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMTI5NGZkMGMwNDZlYjEwMmVlZTRiMmU1NzhkYjg5NzBj
MGE3MzJiMDlkZGYyNjJmZTg2MGM3M2QyN2MyMjgzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjs7WUUJi71OfB75O5FNckPYiDG6GBPjzUgw3H18m/jh+1
0ggdJDHDT4ZsGWomDA6e2CS4KHeEQ+tTGOwXVis6CrCPOqffrgqwa6qj/uIXL9iX
coGDpQ/oRAyJpWUIahKPI+hkdHC3lUnI1Oo1qGBioapPltSJ3BB+1TEI6eP1KWOC
gjTv5CIvhSWII6CUwawNs+Am8uGz82DmdAosuSCS/cjnFT/97a9+XmVXbG+h+xzz
2nnk5x8i1JaOL8AZ6CQDJ+mflyZ1rTtfH/b1drgE/AUPrlu3KkokRJxsVgb3s+y1
mlmNxu2O/i3LqxBPI4k1LuJUw1yp/dqoMOJDl2ejAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUWZv01yorCD9NED/rHUoSAS07v10wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2QzZDg5NWRmLWI0NzYtNDFkMy05MWZmLTUyMThhZTZkZDlmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2qzANBgkqhkiG9w0BAQsFAAOCAQEAdCAmCfUcbNunXpppuJ9Ew+MRLuQC
BODHsY8eqzc8jP5e434bhn+hz4q7lOFuoZ+MtnYzd8EXA96fijWmCKJrXznsGIkp
mw2jUxqieb5CfYuqylDIF3XDJ5b4Dk9gN5QXEI+n8RxufVOGv/SfabzafUAg4fLf
Cgstw3GHXgRsStYLZ15Yu0HucQKYR0h3Qwh1HYBeEsd8rGsYwwEwoLJnNQ2nHdFz
DRUaniNXbKm7vTdbzTdTV+D4IoI8b7ItX7mNxcBPpmq70NltimRe5jZFNaF3jr1W
k+MRZfGEKjolrtkAc+pGhExVjP71f0cQjuvZRU/f2hDNNpNZQGwA58sn1Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:43:29 2026 by rpki-client