
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99479912-3c63-442a-a1c0-4057977a054b.roa
File: 99479912-3c63-442a-a1c0-4057977a054b.roa (raw, json)
Hash identifier: bYILwu/RBvwtrvxTbGRdDZw1U2+6Vv6xMK7aFyR+3Sk=
Subject key identifier: E7:F8:55:04:20:30:A7:1B:2D:C3:6E:C3:2D:51:F4:7B:73:1C:D8:6E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2A15CE411AE21F14C870A4BC6485DD3EFCA79A3B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99479912-3c63-442a-a1c0-4057977a054b.roa
Signing time: Thu 14 May 2026 00:10:12 +0000
ROA not before: Thu 14 May 2026 00:10:12 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:3c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 30 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:15:ce:41:1a:e2:1f:14:c8:70:a4:bc:64:85:dd:3e:fc:a7:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 14 00:10:12 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=ba5912d7f1bf59dd5d29a44ce959a2e4a69d6e258f407554d620d8a2f279e723, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:15:25:c2:0d:1c:6d:ed:eb:23:7d:21:00:
ae:25:ef:02:d6:1f:30:9e:89:83:a4:da:48:f2:fa:
60:a7:25:41:dd:d5:37:f0:f6:18:b5:86:25:5b:71:
86:c6:34:4f:1e:c3:c1:a7:ec:af:a7:66:af:71:8e:
d0:8e:8d:7f:d4:41:60:d1:6e:14:65:40:44:ac:e0:
92:22:fe:d6:9f:0c:40:2d:d4:32:95:5c:23:c9:52:
6d:4a:5c:63:0d:8b:ba:2e:0a:5f:41:8e:51:c9:28:
a5:36:31:ad:78:04:03:88:53:d8:18:fe:3d:c0:d3:
85:b4:6e:95:ba:4a:9a:68:62:0d:ee:1a:a4:02:bf:
1a:8c:94:10:7b:29:d2:5c:f2:15:04:9b:56:bf:62:
bb:02:73:00:aa:76:d3:cc:a4:a8:2f:62:c7:65:79:
a9:2a:14:c6:a5:84:83:e1:3b:2f:78:7d:d7:ce:83:
6d:82:7b:b8:37:b6:74:3f:a4:d0:1e:0a:40:67:e8:
7c:37:24:20:87:a7:05:fc:bc:05:c7:74:a1:45:d7:
27:c2:27:f9:a7:70:fc:77:92:58:62:54:5e:70:e9:
8e:5b:0b:5f:ac:29:71:c7:ce:f4:32:79:33:06:3a:
38:3d:03:90:a6:55:26:c7:b2:da:77:b7:22:16:49:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:55:04:20:30:A7:1B:2D:C3:6E:C3:2D:51:F4:7B:73:1C:D8:6E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99479912-3c63-442a-a1c0-4057977a054b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:3c2::/48
Signature Algorithm: sha256WithRSAEncryption
04:26:e1:6f:80:08:b9:c3:6e:a5:7f:9a:92:83:c2:52:8a:33:
84:bc:e5:8d:54:b5:dd:1c:51:ac:10:d9:2c:e1:95:ac:81:1c:
c0:ea:6a:7f:b6:2b:23:44:0a:e2:b6:52:22:66:8d:87:5b:d5:
c5:96:81:2a:2e:3a:d7:fa:83:12:e5:3f:2a:56:3d:59:8b:1e:
4e:a1:b3:9d:76:50:9a:89:52:68:b2:f4:71:d9:45:76:e2:59:
dd:2d:3a:db:41:eb:eb:2c:a1:7f:4e:c1:70:19:a2:c6:aa:5f:
b9:af:5e:60:6a:9d:0a:6a:5f:e6:00:38:ba:ba:43:71:03:ca:
04:da:de:14:52:01:3b:3c:0f:33:6a:4d:3b:46:36:d9:74:8b:
54:76:36:d7:8c:4b:e2:1a:6d:72:9b:9f:ce:d4:ad:34:17:f8:
f3:8a:58:45:d8:ca:d5:68:60:ec:b1:b8:c8:77:26:26:f6:e3:
ad:e3:2c:4f:56:ee:11:4f:6c:7e:06:e6:f4:9d:0d:6a:fa:a8:
34:02:d6:de:54:8b:e8:ed:b8:10:da:70:5d:cd:6c:f4:db:24:
09:25:63:ad:2c:95:78:bc:fa:05:60:98:82:0a:cb:ef:f0:ab:
14:03:35:c7:84:c0:37:43:19:80:d6:28:47:8e:ec:73:9c:71:
e3:5c:e2:37
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKhXOQRriHxTIcKS8ZIXdPvynmjswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE0MDAxMDEyWhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYTU5MTJkN2YxYmY1OWRkNWQyOWE0NGNlOTU5YTJlNGE2
OWQ2ZTI1OGY0MDc1NTRkNjIwZDhhMmYyNzllNzIzMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCszhUlwg0cbe3rI30hAK4l7wLWHzCeiYOk2kjy+mCnJUHd
1Tfw9hi1hiVbcYbGNE8ew8Gn7K+nZq9xjtCOjX/UQWDRbhRlQESs4JIi/tafDEAt
1DKVXCPJUm1KXGMNi7ouCl9BjlHJKKU2Ma14BAOIU9gY/j3A04W0bpW6SppoYg3u
GqQCvxqMlBB7KdJc8hUEm1a/YrsCcwCqdtPMpKgvYsdleakqFMalhIPhOy94fdfO
g22Ce7g3tnQ/pNAeCkBn6Hw3JCCHpwX8vAXHdKFF1yfCJ/mncPx3klhiVF5w6Y5b
C1+sKXHHzvQyeTMGOjg9A5CmVSbHstp3tyIWSfb7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5/hVBCAwpxstw27DLVH0e3Mc2G4wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzk5NDc5OTEyLTNjNjMtNDQyYS1hMWMwLTQwNTc5NzdhMDU0Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAA8IwDQYJKoZIhvcNAQELBQADggEBAAQm4W+ACLnDbqV/mpKDwlKK
M4S85Y1Utd0cUawQ2SzhlayBHMDqan+2KyNECuK2UiJmjYdb1cWWgSouOtf6gxLl
PypWPVmLHk6hs512UJqJUmiy9HHZRXbiWd0tOttB6+ssoX9OwXAZosaqX7mvXmBq
nQpqX+YAOLq6Q3EDygTa3hRSATs8DzNqTTtGNtl0i1R2NteMS+IabXKbn87UrTQX
+POKWEXYytVoYOyxuMh3Jib2463jLE9W7hFPbH4G5vSdDWr6qDQC1t5Ui+jtuBDa
cF3NbPTbJAklY60slXi8+gVgmIIKy+/wqxQDNceEwDdDGYDWKEeO7HOcceNc4jc=
-----END CERTIFICATE-----
Generated at Thu May 28 21:32:10 2026 by rpki-client