
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2bf6cf9b-03ef-446f-8fce-3872d8689681.roa
File: 2bf6cf9b-03ef-446f-8fce-3872d8689681.roa (raw, json)
Hash identifier: 7Sn1LzfCZEwSYdDvzT56lqJ0CxlK+k4HwMKTU7DOHV8=
Subject key identifier: 26:C0:D9:5A:4F:C8:D3:00:74:35:A6:D7:C2:AE:F4:47:AD:91:2E:FA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 41F354221E4E9EB4CE07CF56B87F86AC385B8A03
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2bf6cf9b-03ef-446f-8fce-3872d8689681.roa
Signing time: Tue 17 Feb 2026 01:20:51 +0000
ROA not before: Tue 17 Feb 2026 01:20:51 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.167.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f3:54:22:1e:4e:9e:b4:ce:07:cf:56:b8:7f:86:ac:38:5b:8a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 01:20:51 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=152b46456adbdce8af39089dd1d53f58e87aa2012de0edd3902bd258b5e362e7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:10:4d:7c:a0:31:b4:00:c6:88:ba:8a:4d:
f0:33:e6:a2:af:1e:bd:f4:8a:92:5c:8a:66:78:0a:
cc:11:e9:90:7d:da:f6:8e:a8:a9:51:89:95:47:ec:
69:8a:5a:4e:a0:ec:a3:0c:50:be:60:bd:4f:0e:3e:
d5:8c:8b:d8:90:ae:ce:3f:9a:b5:4c:73:75:72:66:
bb:0d:00:63:c4:c5:ff:68:af:70:cd:33:58:a7:d7:
1b:01:cc:a0:78:55:95:b0:06:f0:cf:28:02:70:d1:
a4:fc:df:ed:9c:0d:d2:49:fe:0d:29:5f:63:45:73:
06:13:4c:7f:ea:48:43:db:96:2c:f6:8c:73:9a:e7:
86:62:a9:7b:9a:b0:6d:6d:10:45:54:74:14:e9:e8:
14:72:a7:5d:30:ab:ac:94:81:2a:09:84:5f:bf:d5:
32:36:c6:24:5e:ca:31:d5:69:7f:bd:78:15:59:f2:
ad:56:cd:cb:13:2d:e1:05:cb:74:dc:54:32:62:f9:
8b:cb:8d:c5:3c:6a:8e:96:8a:e2:a7:03:08:77:f3:
10:83:4a:1d:d8:05:68:c6:20:31:39:99:1a:ea:50:
2a:bf:78:8f:d8:5a:e1:29:3c:f0:ee:7a:d0:2c:6a:
2a:a0:16:f9:4e:63:d2:c8:2b:dd:49:07:2a:85:2e:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C0:D9:5A:4F:C8:D3:00:74:35:A6:D7:C2:AE:F4:47:AD:91:2E:FA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2bf6cf9b-03ef-446f-8fce-3872d8689681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.167.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1f:25:98:78:8e:12:96:e1:9e:2b:25:7e:2c:70:3e:59:20:2f:
8f:ac:05:f4:c0:75:94:4b:6f:8b:8d:f8:26:d5:8c:11:68:86:
26:c2:39:c7:86:06:2e:a5:01:26:f3:d5:2c:58:33:e0:cc:64:
4d:d0:80:49:d6:47:c2:71:6a:0a:94:f4:1c:e1:f7:c6:ff:58:
14:d0:ba:27:c5:de:85:bc:a7:af:85:15:92:7f:07:38:83:a6:
26:b9:05:1f:c3:6a:58:de:09:e3:75:0e:db:89:5a:27:ab:b4:
f6:a1:82:33:5b:84:e6:16:73:9e:63:c9:bb:4a:d1:ac:30:60:
0d:99:23:b1:02:55:82:32:ca:eb:42:20:a7:ec:22:19:c7:a9:
28:85:ff:01:93:43:d3:ab:fb:7d:14:05:7c:c7:ef:32:8a:fd:
67:30:0b:11:45:0d:0a:4b:25:11:41:11:f6:79:db:1e:41:bb:
8c:b5:02:c9:b1:92:f2:0e:ab:87:ec:2f:9c:0d:bf:c7:37:5b:
a8:3f:6e:1d:b3:54:ab:21:31:26:c5:25:52:2f:b5:92:a2:a9:
4e:a1:d8:8f:a9:8b:6f:e5:a4:93:06:45:66:6d:8f:dd:ba:b7:
f0:f3:53:be:82:a4:0f:50:74:00:b8:b7:d2:4e:8d:1e:0a:35:
60:02:15:c0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQfNUIh5OnrTOB89WuH+GrDhbigMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDEyMDUxWhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNTJiNDY0NTZhZGJkY2U4YWYzOTA4OWRkMWQ1M2Y1OGU4
N2FhMjAxMmRlMGVkZDM5MDJiZDI1OGI1ZTM2MmU3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDT6xBNfKAxtADGiLqKTfAz5qKvHr30ipJcimZ4CswR6ZB9
2vaOqKlRiZVH7GmKWk6g7KMMUL5gvU8OPtWMi9iQrs4/mrVMc3VyZrsNAGPExf9o
r3DNM1in1xsBzKB4VZWwBvDPKAJw0aT83+2cDdJJ/g0pX2NFcwYTTH/qSEPbliz2
jHOa54ZiqXuasG1tEEVUdBTp6BRyp10wq6yUgSoJhF+/1TI2xiReyjHVaX+9eBVZ
8q1WzcsTLeEFy3TcVDJi+YvLjcU8ao6WiuKnAwh38xCDSh3YBWjGIDE5mRrqUCq/
eI/YWuEpPPDuetAsaiqgFvlOY9LIK91JByqFLpvXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJsDZWk/I0wB0NabXwq70R62RLvowHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzJiZjZjZjliLTAzZWYtNDQ2Zi04ZmNlLTM4NzJkODY4OTY4MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAc2pwAwDQYJKoZIhvcNAQELBQADggEBAB8lmHiOEpbhnislfixwPlkgL4+s
BfTAdZRLb4uN+CbVjBFohibCOceGBi6lASbz1SxYM+DMZE3QgEnWR8JxagqU9Bzh
98b/WBTQuifF3oW8p6+FFZJ/BziDpia5BR/DaljeCeN1DtuJWiertPahgjNbhOYW
c55jybtK0awwYA2ZI7ECVYIyyutCIKfsIhnHqSiF/wGTQ9Or+30UBXzH7zKK/Wcw
CxFFDQpLJRFBEfZ52x5Bu4y1AsmxkvIOq4fsL5wNv8c3W6g/bh2zVKshMSbFJVIv
tZKiqU6h2I+pi2/lpJMGRWZtj926t/DzU76CpA9QdAC4t9JOjR4KNWACFcA=
-----END CERTIFICATE-----
Generated at Thu Feb 26 02:05:42 2026 by rpki-client