
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4829474d-798f-49b5-8c20-594200586d7e.roa
File: 4829474d-798f-49b5-8c20-594200586d7e.roa (raw, json)
Hash identifier: 1ZRoJPu+/EsRrq7dFDPpWRy4Kn7TMbNVc8bRPdodT7U=
Subject key identifier: 66:2C:CB:20:41:4A:FD:AB:14:32:22:8A:94:BA:2A:95:1E:46:01:F0
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2EA6ABB32A78B7585A51B76FE59D62592A1E9A3E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4829474d-798f-49b5-8c20-594200586d7e.roa
Signing time: Thu 26 Feb 2026 12:40:43 +0000
ROA not before: Thu 26 Feb 2026 12:40:43 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a6:ab:b3:2a:78:b7:58:5a:51:b7:6f:e5:9d:62:59:2a:1e:9a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Feb 26 12:40:43 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=e35190e8efa1abcc837bdb9adf7bf215172bbdd5a9890b310b9bf00993bb0c20, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:0c:fd:bb:2a:4d:2d:a1:67:50:18:63:b3:
e9:14:cd:11:3b:e0:34:6d:f4:a5:60:3a:af:ae:4d:
3f:bc:01:9b:b3:e9:ae:3c:87:6a:ca:09:a7:5a:52:
82:00:9b:31:6d:a5:c4:f2:9e:ea:93:1e:63:2b:4e:
12:5f:ae:c2:f6:a3:b7:2a:b5:ba:b0:70:9f:b3:ab:
34:d4:e3:87:b3:4a:8b:5a:af:a1:f9:5a:c5:01:e8:
18:3d:20:21:13:21:9c:dd:3d:c9:03:50:45:cf:0b:
75:0c:b0:d2:0a:4c:b1:c3:9b:4d:ba:0d:a4:63:eb:
1f:eb:b6:63:94:7c:9c:9b:50:f6:b5:79:ef:1b:04:
9e:f4:0a:7b:50:be:92:36:e6:bd:04:7c:86:fa:a9:
a1:b5:ff:15:97:49:8f:e6:78:a4:c6:26:e2:8a:1a:
c2:d1:42:e6:9f:39:ef:8f:98:00:b7:3d:71:3f:01:
28:58:b9:f4:8d:d4:6f:c4:30:dd:04:5e:5f:42:65:
6c:9c:33:c3:4e:fd:a7:70:c9:e3:da:6b:ba:d5:58:
96:71:40:e3:7d:d9:df:15:dc:c7:db:3a:59:13:ae:
d3:78:5e:0c:9a:5d:66:d2:12:69:15:ec:28:cf:4a:
3d:6e:89:f7:da:5a:8b:26:3e:f1:0e:04:99:59:9c:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:CB:20:41:4A:FD:AB:14:32:22:8A:94:BA:2A:95:1E:46:01:F0
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4829474d-798f-49b5-8c20-594200586d7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
8d:d3:0e:d9:5d:a1:55:b6:05:dc:46:cb:5c:56:0c:48:e3:51:
4c:fe:61:33:93:80:93:77:bc:1f:46:f4:0b:c1:b4:8a:f2:f4:
3d:5f:4e:95:7d:5e:e6:c9:5a:3f:ce:0a:99:ea:08:6d:48:f4:
a6:73:31:29:0a:0d:ed:da:7c:a7:de:e9:41:c0:0b:0a:97:0c:
db:f6:d2:cd:54:a5:58:24:db:98:b7:37:3f:52:be:ce:f1:dd:
89:79:52:43:16:5e:0f:a7:1e:5d:8b:98:53:a2:f7:79:eb:8c:
8d:29:03:4a:ce:f9:89:89:40:2d:a0:f7:62:2e:d1:b5:a9:59:
6d:70:a1:fe:45:f6:13:29:22:85:f3:99:d5:6b:fe:3b:bf:72:
85:0c:8f:df:81:97:02:e3:2e:d0:99:ce:64:6c:d9:53:02:e7:
c5:d4:b9:2d:a3:2b:62:ec:42:06:a7:cc:0b:3b:dc:56:68:c6:
db:7c:fa:fe:9d:19:a3:02:ed:a4:bc:6b:37:ac:a0:fb:c1:2c:
d5:e8:b5:9c:f6:d9:92:78:87:3f:bc:dc:52:9c:cd:5e:74:59:
8b:95:54:de:87:fc:08:3d:56:6c:e2:52:33:2e:1a:69:bb:d7:
4f:e1:fe:58:ca:53:4f:8e:5d:28:f2:a7:1e:77:fb:53:a4:eb:
ad:dc:01:e3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIULqarsyp4t1haUbdv5Z1iWSoemj4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI2MTI0MDQzWhcNMjYwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMzUxOTBlOGVmYTFhYmNjODM3YmRiOWFkZjdiZjIxNTE3
MmJiZGQ1YTk4OTBiMzEwYjliZjAwOTkzYmIwYzIwMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmEQz9uypNLaFnUBhjs+kUzRE74DRt9KVgOq+uTT+8AZuz
6a48h2rKCadaUoIAmzFtpcTynuqTHmMrThJfrsL2o7cqtbqwcJ+zqzTU44ezSota
r6H5WsUB6Bg9ICETIZzdPckDUEXPC3UMsNIKTLHDm026DaRj6x/rtmOUfJybUPa1
ee8bBJ70CntQvpI25r0EfIb6qaG1/xWXSY/meKTGJuKKGsLRQuafOe+PmAC3PXE/
AShYufSN1G/EMN0EXl9CZWycM8NO/adwyePaa7rVWJZxQON92d8V3MfbOlkTrtN4
XgyaXWbSEmkV7CjPSj1uiffaWosmPvEOBJlZnDSHAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUZizLIEFK/asUMiKKlLoqlR5GAfAwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzQ4Mjk0NzRkLTc5OGYtNDliNS04YzIwLTU5NDIwMDU4NmQ3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEAjdMO2V2hVbYF3EbLXFYMSONR
TP5hM5OAk3e8H0b0C8G0ivL0PV9OlX1e5slaP84KmeoIbUj0pnMxKQoN7dp8p97p
QcALCpcM2/bSzVSlWCTbmLc3P1K+zvHdiXlSQxZeD6ceXYuYU6L3eeuMjSkDSs75
iYlALaD3Yi7RtalZbXCh/kX2EykihfOZ1Wv+O79yhQyP34GXAuMu0JnOZGzZUwLn
xdS5LaMrYuxCBqfMCzvcVmjG23z6/p0ZowLtpLxrN6yg+8Es1ei1nPbZkniHP7zc
UpzNXnRZi5VU3of8CD1WbOJSMy4aabvXT+H+WMpTT45dKPKnHnf7U6TrrdwB4w==
-----END CERTIFICATE-----
Generated at Thu Feb 26 15:34:10 2026 by rpki-client