
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3db0876d-51d3-4a1b-88a1-55f2d73023c1.roa
File: 3db0876d-51d3-4a1b-88a1-55f2d73023c1.roa (raw, json)
Hash identifier: L7x5vU2BxNIua+qj49kEk/1SdFxBaU2Z2dUxcGL9PBM=
Subject key identifier: DB:E9:21:3C:82:FA:CE:10:A1:6E:08:E8:0D:8A:13:F7:A9:C9:02:CB
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 24E5AA310C2F044F3C6ADC4428A42291149632FF
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3db0876d-51d3-4a1b-88a1-55f2d73023c1.roa
Signing time: Wed 18 Feb 2026 00:36:38 +0000
ROA not before: Wed 18 Feb 2026 00:36:38 +0000
ROA not after: Tue 19 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f2:7000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e5:aa:31:0c:2f:04:4f:3c:6a:dc:44:28:a4:22:91:14:96:32:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Feb 18 00:36:38 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: serialNumber=c9582960017030dd2a6b7451f6546684693c97de121705ef8ff42588f301570b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:43:3e:e4:38:68:14:6c:c1:aa:1c:7e:33:
ea:41:f2:43:48:2e:4a:d5:32:41:75:70:01:45:7a:
d6:c7:ff:00:94:e4:44:a0:4b:20:83:bf:dd:23:c0:
da:84:88:aa:9d:81:c9:78:44:79:07:b5:8f:dc:52:
ec:4d:2b:d3:07:af:b3:90:de:b2:a4:d8:3c:c5:98:
4c:e4:bc:bf:df:05:65:15:8f:2f:fe:f6:1e:d3:1b:
b0:3f:c8:51:16:b5:38:ef:d0:e6:85:ec:5c:35:f5:
ff:82:49:ee:fc:65:de:40:67:65:75:3a:ba:64:43:
cc:78:88:18:99:c6:34:f9:d1:8a:4f:ee:68:a7:a1:
42:a5:c2:60:45:ad:a1:42:39:ae:05:24:5f:94:cb:
80:67:31:d6:36:42:e0:2c:b3:a8:f2:04:65:31:18:
ab:5c:5a:de:98:ab:b4:c7:d3:46:c7:89:23:f7:7a:
61:1d:fd:0d:4b:35:7e:6c:65:4e:60:04:a1:b8:1c:
f7:82:66:b8:1e:83:be:72:56:01:2b:70:8b:d3:86:
e6:eb:94:52:ab:c5:06:45:eb:31:aa:73:c7:08:eb:
e7:ee:d4:a9:0d:84:20:9c:ae:d6:47:e8:79:9a:32:
e5:14:33:96:b0:94:f8:a7:98:f5:d5:c4:5b:12:b4:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E9:21:3C:82:FA:CE:10:A1:6E:08:E8:0D:8A:13:F7:A9:C9:02:CB
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3db0876d-51d3-4a1b-88a1-55f2d73023c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f2:7000::/44
Signature Algorithm: sha256WithRSAEncryption
8a:b0:92:21:34:a6:15:23:1e:d1:55:03:87:66:3a:d3:4a:74:
92:fc:92:6f:63:95:aa:4e:4c:95:74:55:09:39:bb:45:bf:44:
e7:b2:fc:4c:5b:68:29:db:71:5f:40:f5:1e:0d:48:f0:9e:f2:
8a:ae:00:46:f3:dd:a5:31:f5:dc:1c:c0:98:bc:92:ed:34:11:
a8:0e:12:b4:2a:09:69:57:2b:82:03:6d:00:b4:58:49:89:48:
26:7b:b7:65:a8:a4:70:36:2c:e0:23:93:34:d9:ea:f2:9b:f9:
c0:5e:79:25:28:b1:5d:e7:01:ed:ed:4b:10:e0:2a:85:b0:bb:
00:31:e0:f8:de:11:37:3e:01:39:97:fa:72:d6:d0:1a:8b:be:
95:ee:f2:ac:18:69:6f:2d:67:75:e4:00:08:9f:20:c2:d9:01:
a5:35:22:ef:72:0b:12:c7:37:49:da:91:06:07:80:13:6d:32:
06:66:42:50:fb:5c:2d:6a:87:1d:3e:50:7d:9a:df:fa:13:47:
ca:7c:d2:29:0a:ed:e9:b7:ab:c0:f4:a8:f8:a6:a3:9c:06:69:
f1:8b:4a:4a:7c:71:57:a3:c5:26:46:53:cd:ff:0c:f7:b9:b1:
06:9a:16:fc:6c:1f:3e:06:16:71:3d:99:1e:84:a9:69:2f:ae:
2f:78:ef:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:33 2026 by rpki-client