
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3fef9d3e-2ad2-4e38-92fc-5eab76a53959.roa
File: 3fef9d3e-2ad2-4e38-92fc-5eab76a53959.roa (raw, json)
Hash identifier: NwNtGDC9M0HYs4r7KhqOMGrKHTxaolKOLTLzEV5meTY=
Subject key identifier: D9:E8:21:AB:FA:70:7D:A2:45:B8:B5:D3:9A:0C:62:92:CA:05:34:04
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 50A3DEA2C7E2441D605AF53F128D6674A5159515
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3fef9d3e-2ad2-4e38-92fc-5eab76a53959.roa
Signing time: Tue 19 May 2026 03:40:39 +0000
ROA not before: Tue 19 May 2026 03:40:39 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:611::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 30 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a3:de:a2:c7:e2:44:1d:60:5a:f5:3f:12:8d:66:74:a5:15:95:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 19 03:40:39 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=dc42077bfb92fdc4956768d5eaedc0376e72980c23ea51cab6826d50bf0f253f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:5b:e2:37:16:83:05:ea:3b:56:c1:73:a2:
79:75:f0:e9:0c:85:51:5a:1f:43:38:eb:d0:84:21:
0e:d5:a7:9a:bf:bb:7e:f9:75:8e:d4:22:80:cb:32:
72:66:29:34:88:3f:3e:28:51:61:90:ac:4c:9b:76:
8d:84:35:e2:be:5e:e7:4b:fa:a1:7c:e7:03:f2:7a:
1b:78:0d:69:45:9a:c6:9e:7e:7f:0e:9d:17:1a:30:
33:7f:b7:af:f1:c0:63:a5:3d:8a:4e:ce:2d:a2:5f:
ea:37:f7:e8:fc:8b:3e:34:9c:9f:41:df:cc:09:71:
43:39:bc:00:8a:4c:2e:bd:05:5a:90:db:88:e6:11:
91:fc:66:10:33:7b:0e:f5:32:49:4e:06:b2:3d:0b:
5f:96:f9:68:c7:de:51:14:c2:ce:97:48:6a:4e:28:
bf:45:4d:9f:4c:bc:21:7a:57:b6:85:40:cd:1f:ab:
9c:4a:41:c1:0f:ef:4e:c9:cb:8e:ad:3c:1f:15:66:
a4:dc:b0:03:bd:39:dc:0a:c8:8f:67:12:2d:13:27:
9d:ae:1e:99:39:47:ba:51:08:63:d4:e8:ca:74:55:
fe:17:1c:ef:61:65:1e:47:4b:da:85:76:13:0e:63:
67:b8:be:40:ad:7b:6f:07:34:e7:f3:b1:fe:ab:c3:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E8:21:AB:FA:70:7D:A2:45:B8:B5:D3:9A:0C:62:92:CA:05:34:04
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3fef9d3e-2ad2-4e38-92fc-5eab76a53959.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:611::/48
Signature Algorithm: sha256WithRSAEncryption
75:49:a7:25:44:e6:8c:74:95:7d:9a:25:d3:31:a5:7a:48:57:
2f:67:02:b6:b3:d5:28:8b:1a:67:3e:bd:e3:c4:87:b7:71:8f:
79:26:e4:ae:40:b4:a0:61:f7:94:49:55:f9:7c:8c:8f:4d:c9:
a9:a3:91:93:83:04:76:32:1f:de:13:43:b3:29:65:55:80:8d:
44:a0:e9:8f:38:c3:c4:61:7e:76:ad:44:da:00:25:6f:bd:4b:
cb:b9:a1:57:66:9e:f9:8f:a1:28:d3:0c:27:e3:7f:75:e7:79:
35:96:f2:34:ba:a1:7b:a4:45:dc:41:df:dd:e9:54:d0:7f:58:
c3:16:df:34:ee:67:85:9c:1b:8f:13:80:f4:3c:aa:63:d5:99:
a8:f1:eb:a0:ee:0e:7b:3b:ce:11:58:e8:a0:ad:94:b8:da:31:
6c:80:ec:a5:e5:55:97:f5:3b:1a:23:a9:3b:57:7c:24:43:39:
21:61:fb:c0:65:c7:3e:20:2a:6d:c7:75:0b:50:f1:e8:30:12:
f8:f9:96:1d:78:ef:87:7a:52:28:01:a3:b8:af:1f:4c:ae:ef:
aa:c6:42:fe:c1:97:e5:ae:61:23:45:cb:96:f9:f1:95:aa:62:
d0:a2:5e:be:33:c2:66:35:2e:c7:63:82:d0:16:2f:0a:72:20:
84:7e:fc:5e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUKPeosfiRB1gWvU/Eo1mdKUVlRUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDM0MDM5WhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYzQyMDc3YmZiOTJmZGM0OTU2NzY4ZDVlYWVkYzAzNzZl
NzI5ODBjMjNlYTUxY2FiNjgyNmQ1MGJmMGYyNTNmMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZ+FviNxaDBeo7VsFzonl18OkMhVFaH0M469CEIQ7Vp5q/
u375dY7UIoDLMnJmKTSIPz4oUWGQrEybdo2ENeK+XudL+qF85wPyeht4DWlFmsae
fn8OnRcaMDN/t6/xwGOlPYpOzi2iX+o39+j8iz40nJ9B38wJcUM5vACKTC69BVqQ
24jmEZH8ZhAzew71MklOBrI9C1+W+WjH3lEUws6XSGpOKL9FTZ9MvCF6V7aFQM0f
q5xKQcEP707Jy46tPB8VZqTcsAO9OdwKyI9nEi0TJ52uHpk5R7pRCGPU6Mp0Vf4X
HO9hZR5HS9qFdhMOY2e4vkCte28HNOfzsf6rw1+tAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU2eghq/pwfaJFuLXTmgxiksoFNAQwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzNmZWY5ZDNlLTJhZDItNGUzOC05MmZjLTVlYWI3NmE1Mzk1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABhEwDQYJKoZIhvcNAQELBQADggEBAHVJpyVE5ox0lX2aJdMxpXpI
Vy9nAraz1SiLGmc+vePEh7dxj3km5K5AtKBh95RJVfl8jI9NyamjkZODBHYyH94T
Q7MpZVWAjUSg6Y84w8RhfnatRNoAJW+9S8u5oVdmnvmPoSjTDCfjf3XneTWW8jS6
oXukRdxB393pVNB/WMMW3zTuZ4WcG48TgPQ8qmPVmajx66DuDns7zhFY6KCtlLja
MWyA7KXlVZf1OxojqTtXfCRDOSFh+8Blxz4gKm3HdQtQ8egwEvj5lh1474d6UigB
o7ivH0yu76rGQv7Bl+WuYSNFy5b58ZWqYtCiXr4zwmY1LsdjgtAWLwpyIIR+/F4=
-----END CERTIFICATE-----
Generated at Thu May 28 21:28:40 2026 by rpki-client