
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa
File: 02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa (raw, json)
Hash identifier: d+cTSXkqyf4BwviLFrdj8gBG4ZQPQCYNChxbSvYicow=
Subject key identifier: 0F:40:43:DA:02:79:02:88:ED:B4:F6:D4:DF:B2:FC:34:C3:21:1A:55
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4A52781A1C2E3739BB3FFAEB6E074ABD62D6C17E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa
Signing time: Fri 08 May 2026 02:50:08 +0000
ROA not before: Fri 08 May 2026 02:50:08 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 40045
IP address blocks: 2605:9cc0:c05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 12 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:52:78:1a:1c:2e:37:39:bb:3f:fa:eb:6e:07:4a:bd:62:d6:c1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 8 02:50:08 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=ac16d13a204a791d0f3050941ac7a2b25f62151a7f438708ba2100bb338981df, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:e1:57:07:90:6e:c9:f1:30:61:59:6c:d3:
1c:34:11:16:6b:e2:db:1b:ac:a7:96:bf:38:e1:ff:
8c:ab:f3:a9:c3:6d:b8:68:cf:bf:2d:8d:c8:ff:ec:
47:40:00:ab:09:45:cc:e5:68:89:eb:5a:af:1b:10:
75:ae:81:19:fd:59:f0:f4:63:37:e2:ff:7a:7b:15:
29:58:b1:71:1a:57:fa:55:98:42:07:59:86:3f:30:
9d:bd:7d:cf:ad:c6:e6:61:02:d3:58:70:5c:f8:e8:
bd:22:4d:01:ad:ee:6b:24:64:3f:a7:73:66:a2:50:
0b:f4:c4:e8:82:ed:58:dd:06:bc:3d:4d:38:69:44:
1f:f4:9b:db:1c:3e:7a:98:8e:2d:b4:a6:a0:db:38:
47:04:ba:57:1b:e2:ec:22:2e:6b:69:65:db:75:f6:
a9:2f:49:55:e5:d9:cf:d7:7e:d0:ce:d0:a8:0a:25:
76:9b:01:6e:4d:27:66:7d:c1:66:3c:4b:b5:9d:85:
06:5b:f0:7e:b2:43:2c:82:d2:39:fb:99:2e:f2:1a:
8b:80:40:92:08:0c:7c:68:9f:0c:5e:28:87:5e:27:
a4:43:89:c6:19:14:b9:70:1a:c3:6f:13:93:64:49:
57:b8:97:7f:e3:cd:a2:2a:da:c0:96:e4:6c:34:bd:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:43:DA:02:79:02:88:ED:B4:F6:D4:DF:B2:FC:34:C3:21:1A:55
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c05::/48
Signature Algorithm: sha256WithRSAEncryption
a8:fc:36:36:b4:50:e2:62:4d:ad:9b:ac:9b:14:21:ab:74:b0:
5f:a3:b9:a4:64:b6:cc:4a:26:59:70:2a:2a:34:0e:76:a7:d1:
69:c7:59:b8:d2:6d:98:8d:52:8a:b4:ac:cc:f7:d3:ff:d8:5f:
d5:db:2c:85:22:9a:3e:2f:48:8c:81:38:ff:42:21:ad:a8:8e:
fd:d7:68:3e:ee:a8:c0:3d:fb:86:8c:37:26:c4:c2:9e:e9:42:
8b:b8:ba:d8:ea:7e:94:d9:4a:1e:a7:fc:e0:53:5c:68:19:f0:
ab:75:e8:e5:ca:ae:01:bf:5c:1f:6b:9a:e1:ca:72:cb:67:a5:
3d:42:1c:c9:aa:14:d2:92:63:7e:2e:01:76:57:b9:e6:05:fa:
e0:64:32:ae:8f:f4:0e:13:ee:b4:d5:db:29:bb:1e:68:97:f0:
20:a4:8d:70:f1:cb:e0:9f:4a:9d:98:89:18:99:f5:aa:40:4d:
60:17:1f:d8:bd:f4:eb:ab:5c:ce:ea:2b:06:20:b6:37:c2:89:
90:54:f5:f3:8d:ef:41:5e:60:9c:b6:94:19:3b:a4:71:b8:bd:
07:72:ae:00:ee:9e:0e:b1:a8:02:d8:82:26:ef:9a:dd:a9:a9:
c1:5a:18:4f:d8:c0:cd:dd:ac:78:de:f3:8e:83:f9:ed:51:d7:
b6:29:c3:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 11 17:43:21 2026 by rpki-client