
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cd40f82-ab22-4e08-a16a-cc1e6fbc3e75.roa
File: 3cd40f82-ab22-4e08-a16a-cc1e6fbc3e75.roa (raw, json)
Hash identifier: w0dItDU+Son/a5Yvg9Kcinlr+kGCElWwXmSubGGoY1c=
Subject key identifier: 8D:51:3F:51:4C:11:63:ED:E8:B0:E3:52:A1:DC:03:C9:DD:21:AE:FB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 326AA5854F4F8DF5E03C3648F94AFC6FA0810E36
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cd40f82-ab22-4e08-a16a-cc1e6fbc3e75.roa
Signing time: Tue 17 Feb 2026 01:50:59 +0000
ROA not before: Tue 17 Feb 2026 01:50:59 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 52.70.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6a:a5:85:4f:4f:8d:f5:e0:3c:36:48:f9:4a:fc:6f:a0:81:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 01:50:59 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=166002206a0f87ac2fb4e475858dda88aadd2550602aebb2d455270f7cd9e508, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2d:d3:b9:f8:3c:26:32:26:51:70:8a:29:06:
7b:6d:5a:c6:a0:16:0c:0a:1e:9a:03:d3:2a:31:06:
07:0b:18:00:d4:81:ab:12:5a:85:48:f6:fd:78:06:
84:ac:b9:0a:6d:15:f3:88:d8:1e:65:82:dd:8a:f6:
7d:92:3f:18:a4:47:35:29:c6:26:5b:f6:68:77:3f:
f0:be:c5:96:21:1c:49:a1:7a:4e:e8:cf:28:c8:7e:
0d:17:e8:ea:86:eb:de:19:14:8d:0d:96:32:ae:d0:
a1:7e:f7:1f:ae:df:fd:5c:0c:5f:87:81:03:27:38:
37:e2:b0:39:7d:d6:d2:b0:40:15:77:6c:03:50:12:
29:a1:f9:0b:3f:8a:3b:b9:f9:6d:57:51:3f:c2:3e:
7f:9c:a6:82:aa:9a:4f:7a:eb:e8:8c:5f:90:42:e4:
1c:c7:22:e2:2f:c1:50:ea:4f:bb:a3:2b:29:41:4b:
c3:1f:0b:4e:01:3f:a4:35:a7:f5:ed:9e:78:0f:cc:
6f:47:56:22:86:b5:05:63:6a:f0:14:b7:e5:81:c2:
af:35:c8:e5:a9:12:9c:55:b4:44:ff:2f:ad:6a:7e:
ea:91:e2:59:3a:b8:a2:76:db:0b:5d:77:55:bb:43:
85:d2:b2:3e:57:c2:bd:6c:90:a8:96:73:80:be:75:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:3F:51:4C:11:63:ED:E8:B0:E3:52:A1:DC:03:C9:DD:21:AE:FB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cd40f82-ab22-4e08-a16a-cc1e6fbc3e75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.70.0.0/15
Signature Algorithm: sha256WithRSAEncryption
74:fb:85:25:b3:95:04:0b:bc:38:cb:8a:74:c3:0a:c2:63:43:
4b:33:2b:c8:26:77:90:b0:44:ce:a4:34:21:c3:dd:87:4d:0f:
ec:b6:0b:ff:a0:67:7b:ca:0e:1b:92:aa:b2:82:cd:36:74:13:
b1:22:92:a6:fc:e4:0c:79:86:a9:77:10:4f:54:9a:62:a8:84:
c1:36:2e:d1:d1:e0:f2:8d:28:f5:56:1a:4d:5a:1f:82:37:f9:
15:70:fa:c9:93:0c:11:0d:0d:65:ae:fc:fc:91:d9:01:42:b4:
ac:5e:59:2c:2d:6d:82:ab:e6:59:af:a9:16:d7:5e:da:9a:c0:
a0:77:81:3a:5e:da:32:fa:e5:60:3e:7d:02:82:f8:78:39:b0:
a3:fb:81:8b:d1:80:ea:d0:e5:0a:1d:1f:d1:93:ae:00:f3:1e:
a5:f1:ad:59:23:bd:32:73:95:18:7b:43:c7:ff:df:b3:93:7c:
a3:1f:15:ca:a0:66:f2:25:c1:29:60:eb:68:4a:a6:45:fe:22:
f3:01:3a:0f:b1:2b:bd:3e:f7:78:8c:1e:73:a3:9c:03:90:c2:
ac:53:c0:48:a8:5f:ac:90:c9:2f:f7:c4:3a:68:aa:6a:56:96:
e7:ad:ad:86:f9:2c:10:c8:e2:79:7f:9a:dd:31:fc:ea:29:fb:
5f:e1:55:f9
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMmqlhU9PjfXgPDZI+Ur8b6CBDjYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDE1MDU5WhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjYwMDIyMDZhMGY4N2FjMmZiNGU0NzU4NThkZGE4OGFh
ZGQyNTUwNjAyYWViYjJkNDU1MjcwZjdjZDllNTA4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDoLdO5+DwmMiZRcIopBnttWsagFgwKHpoD0yoxBgcLGADU
gasSWoVI9v14BoSsuQptFfOI2B5lgt2K9n2SPxikRzUpxiZb9mh3P/C+xZYhHEmh
ek7ozyjIfg0X6OqG694ZFI0NljKu0KF+9x+u3/1cDF+HgQMnODfisDl91tKwQBV3
bANQEimh+Qs/iju5+W1XUT/CPn+cpoKqmk966+iMX5BC5BzHIuIvwVDqT7ujKylB
S8MfC04BP6Q1p/XtnngPzG9HViKGtQVjavAUt+WBwq81yOWpEpxVtET/L61qfuqR
4lk6uKJ22wtdd1W7Q4XSsj5Xwr1skKiWc4C+dbO3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUjVE/UUwRY+3osONSodwDyd0hrvswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzNjZDQwZjgyLWFiMjItNGUwOC1hMTZhLWNjMWU2ZmJjM2U3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE0RjANBgkqhkiG9w0BAQsFAAOCAQEAdPuFJbOVBAu8OMuKdMMKwmNDSzMr
yCZ3kLBEzqQ0IcPdh00P7LYL/6Bne8oOG5KqsoLNNnQTsSKSpvzkDHmGqXcQT1Sa
YqiEwTYu0dHg8o0o9VYaTVofgjf5FXD6yZMMEQ0NZa78/JHZAUK0rF5ZLC1tgqvm
Wa+pFtde2prAoHeBOl7aMvrlYD59AoL4eDmwo/uBi9GA6tDlCh0f0ZOuAPMepfGt
WSO9MnOVGHtDx//fs5N8ox8VyqBm8iXBKWDraEqmRf4i8wE6D7ErvT73eIwec6Oc
A5DCrFPASKhfrJDJL/fEOmiqalaW562thvksEMjieX+a3TH86in7X+FV+Q==
-----END CERTIFICATE-----
Generated at Thu Feb 26 02:03:50 2026 by rpki-client