
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/85ea2f4d-ed79-46fd-adfb-501df4d3311a.roa
File: 85ea2f4d-ed79-46fd-adfb-501df4d3311a.roa (raw, json)
Hash identifier: qC7GqnlL8DQeG9ek+Q6/P9Jo1+Rpwa1JVo8iZ8+hP7g=
Subject key identifier: 71:C3:1F:D7:40:C2:81:2A:30:49:61:9E:8A:E7:B8:F6:40:8C:30:C1
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 27CF3C93629A0EBB1F32037D3A5034B734518082
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/85ea2f4d-ed79-46fd-adfb-501df4d3311a.roa
Signing time: Thu 14 May 2026 21:47:24 +0000
ROA not before: Thu 14 May 2026 21:47:24 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:8380:2300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 24 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cf:3c:93:62:9a:0e:bb:1f:32:03:7d:3a:50:34:b7:34:51:80:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: May 14 21:47:24 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=5fed46d16c4fe453cef8ec91ef03ef3c61221a7f5763a8df2b18c2e8b2d3c2a4, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:65:8d:39:b4:22:78:f7:56:2f:f8:2f:44:
eb:58:71:5f:23:70:9b:de:1a:be:de:d5:ec:09:74:
bf:dc:4b:51:50:df:cf:d8:0d:44:32:d6:2f:6e:c6:
8c:cc:9e:fd:c1:0b:db:6a:3f:a5:d1:8f:a6:7c:f9:
51:e2:b8:ca:c2:91:8a:7d:e4:7a:90:3b:38:17:67:
00:d1:22:ea:4d:2b:44:3f:52:96:a2:05:94:1e:a7:
26:be:68:7e:ab:33:ce:b9:65:3c:b6:81:83:d3:7e:
26:03:87:b1:f7:4e:3e:05:2e:83:75:fc:34:b8:5b:
4c:b2:d6:62:2b:54:f9:b3:8a:b7:96:9b:74:6d:0b:
f6:67:ac:a9:11:39:ae:b7:af:c4:75:f5:88:81:cc:
d2:07:7a:0b:c4:56:4c:0a:8c:d7:00:4d:f6:7e:57:
24:36:ca:06:1d:40:5d:fc:44:49:28:95:67:dc:55:
e5:90:96:b3:55:74:05:05:bb:03:69:e4:c3:d0:c6:
7a:b7:79:8a:a1:c9:6e:a9:11:18:b0:5e:c7:22:2b:
c6:4c:11:26:7c:18:b8:fb:12:c7:7e:43:b7:f7:23:
d2:6c:87:1c:8d:fa:f5:79:e4:a5:f6:61:18:b8:30:
18:f3:30:a4:46:f8:c6:2a:02:e7:3f:78:d2:8d:04:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:1F:D7:40:C2:81:2A:30:49:61:9E:8A:E7:B8:F6:40:8C:30:C1
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/85ea2f4d-ed79-46fd-adfb-501df4d3311a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:8380:2300::/40
Signature Algorithm: sha256WithRSAEncryption
cf:91:8c:a0:3b:3f:77:b9:09:90:cc:7e:a3:b2:c9:7d:c7:a6:
24:82:19:13:d4:ef:55:f7:6a:02:37:0f:da:08:24:9e:ae:7a:
39:71:7e:8f:10:91:df:cd:fa:0b:44:ba:86:3f:91:92:c9:71:
37:01:6b:45:7b:52:bf:74:bc:b5:13:f3:5b:ef:98:22:10:60:
ba:c4:7d:e4:0c:c0:11:59:9a:a2:82:1a:e7:2e:75:62:a6:ba:
e2:d0:d9:4e:4a:02:e1:28:2f:ed:ae:71:44:ec:86:14:7e:8f:
67:bc:1f:06:68:77:d3:7d:3c:3f:4a:a5:f1:d1:ab:83:45:ad:
7e:9b:6c:a2:ed:53:64:27:67:42:26:42:3c:9d:a9:f1:fa:63:
e8:98:d8:94:a4:f6:34:73:bc:13:b5:29:57:e5:4e:57:3d:73:
5d:92:d1:38:5a:b3:35:95:12:9c:3a:0e:b3:72:bf:97:f2:2a:
6e:4f:87:3b:bf:f6:be:0d:74:f4:2d:37:c3:ea:d8:2a:3a:ed:
eb:1b:8e:4b:ed:82:d0:bd:bb:44:16:58:16:84:10:1b:46:a4:
03:92:dc:ad:36:3c:94:6d:cd:a5:6c:7b:d2:4d:29:af:af:35:
9d:ac:36:4c:bd:e6:f3:c3:64:cb:08:5c:1c:65:e8:ed:be:16:
65:de:03:a8
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUJ888k2KaDrsfMgN9OlA0tzRRgIIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4
NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzI0WhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZmVkNDZkMTZjNGZlNDUzY2VmOGVjOTFlZjAzZWYzYzYx
MjIxYTdmNTc2M2E4ZGYyYjE4YzJlOGIyZDNjMmE0MS0wKwYDVQQDEyQ4Zjk1ZTRk
MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJ92WNObQiePdWL/gvROtYcV8jcJveGr7e1ewJdL/cS1FQ
38/YDUQy1i9uxozMnv3BC9tqP6XRj6Z8+VHiuMrCkYp95HqQOzgXZwDRIupNK0Q/
UpaiBZQepya+aH6rM865ZTy2gYPTfiYDh7H3Tj4FLoN1/DS4W0yy1mIrVPmzireW
m3RtC/ZnrKkROa63r8R19YiBzNIHegvEVkwKjNcATfZ+VyQ2ygYdQF38REkolWfc
VeWQlrNVdAUFuwNp5MPQxnq3eYqhyW6pERiwXsciK8ZMESZ8GLj7Esd+Q7f3I9Js
hxyN+vV55KX2YRi4MBjzMKRG+MYqAuc/eNKNBHHfAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUccMf10DCgSowSWGeiue49kCMMMEwHwYDVR0jBBgwFoAUHl8tYvha0oTU
0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05
Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm
NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh
MzhjMzJmZDRjLzg1ZWEyZjRkLWVkNzktNDZmZC1hZGZiLTUwMWRmNGQzMzExYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl
LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBYOAIzANBgkqhkiG9w0BAQsFAAOCAQEAz5GMoDs/d7kJkMx+o7LJfcem
JIIZE9TvVfdqAjcP2ggknq56OXF+jxCR3836C0S6hj+RkslxNwFrRXtSv3S8tRPz
W++YIhBgusR95AzAEVmaooIa5y51Yqa64tDZTkoC4Sgv7a5xROyGFH6PZ7wfBmh3
0308P0ql8dGrg0Wtfptsou1TZCdnQiZCPJ2p8fpj6JjYlKT2NHO8E7UpV+VOVz1z
XZLROFqzNZUSnDoOs3K/l/Iqbk+HO7/2vg109C03w+rYKjrt6xuOS+2C0L27RBZY
FoQQG0akA5LcrTY8lG3NpWx70k0pr681naw2TL3m88NkywhcHGXo7b4WZd4DqA==
-----END CERTIFICATE-----
Generated at Fri May 22 16:04:32 2026 by rpki-client