
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a48cca5-101e-49e1-b644-98c35eb681fa.roa
File: 9a48cca5-101e-49e1-b644-98c35eb681fa.roa (raw, json)
Hash identifier: MhLod6OwS369rilxp3iFhrUrO/x4uQLPqr2B+KvNuRk=
Subject key identifier: 16:24:24:BA:28:4D:A8:E2:AE:D7:1C:35:65:C1:37:38:8C:0A:A4:89
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 71BA1DAE7EF8EA6BA21706139F7E37229A185547
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a48cca5-101e-49e1-b644-98c35eb681fa.roa
Signing time: Tue 17 Feb 2026 02:20:34 +0000
ROA not before: Tue 17 Feb 2026 02:20:34 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 18.88.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ba:1d:ae:7e:f8:ea:6b:a2:17:06:13:9f:7e:37:22:9a:18:55:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 02:20:34 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=bc9c1b64379dd063e61355290f2077cd4cca0b0de7a4bc194804404631798c83, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:44:99:70:55:9a:b3:05:b3:99:7a:d0:9d:
1a:10:26:14:10:36:13:fe:7b:9a:60:35:26:e3:ff:
69:b2:9c:e3:df:bd:0b:ed:a3:17:72:d0:09:74:f7:
d1:d1:03:be:07:86:10:2c:74:60:ce:57:59:c6:94:
b7:c9:5a:9d:b6:02:25:ce:05:12:96:0f:a5:3e:08:
0b:8c:8a:eb:42:eb:9f:d0:b1:62:1e:09:28:e5:f6:
74:19:66:2b:20:b1:6e:3f:4b:3d:79:bb:c0:92:5c:
bf:f1:a7:20:6f:13:5a:f5:de:93:d6:5f:c6:f1:e7:
d4:4b:a5:bf:bd:84:21:59:bd:88:8a:c1:c0:1e:c3:
9c:a0:c0:eb:74:62:ee:e0:ef:31:d2:7e:61:0a:19:
28:52:7c:82:3d:46:71:6f:c6:37:eb:ca:5a:91:d6:
a7:d7:de:14:6b:92:3c:86:a4:7a:16:5e:73:5c:ad:
af:4f:64:b2:fd:aa:cc:b2:79:74:2d:d9:e8:f5:98:
ca:2a:8f:e0:5f:d9:25:30:a8:c0:4d:bb:2a:45:c8:
37:90:0f:a9:24:29:30:6c:5c:0e:c7:94:da:aa:63:
92:80:50:da:49:2f:cb:bf:d8:c4:7b:2e:7a:75:7e:
83:e8:10:cf:d2:12:c0:2d:48:a4:5f:af:55:1a:42:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:24:24:BA:28:4D:A8:E2:AE:D7:1C:35:65:C1:37:38:8C:0A:A4:89
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a48cca5-101e-49e1-b644-98c35eb681fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.88.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:69:1b:87:0b:41:a4:85:33:ad:e3:dc:7c:c0:0e:08:62:2f:
0a:6f:3b:4d:9b:26:32:1b:5e:0f:76:db:28:6f:75:8e:79:94:
d7:2e:37:ef:73:84:d7:3f:c1:a2:6d:40:e1:11:2e:76:d5:ae:
25:81:c0:89:ca:51:34:47:c2:40:01:e1:e7:1f:ed:e4:45:d9:
8b:73:5b:e0:ee:86:c1:5f:39:c9:cb:0d:a2:b6:75:17:4a:73:
9f:65:54:eb:3b:e0:d5:0a:c6:91:0f:04:fa:fb:96:cf:b7:dd:
ce:5f:d1:f0:27:2c:89:47:9f:28:64:eb:6b:6c:7e:75:b0:1c:
cf:67:1d:6a:24:a6:8c:76:e9:97:cc:9c:01:11:c8:b1:da:e5:
b9:b1:b2:1e:f4:9f:a7:24:c0:ef:3e:9f:93:eb:41:bd:6a:6a:
54:bd:f7:c0:38:c0:0a:be:c0:d6:da:a2:69:69:d8:73:fd:0b:
46:b2:ae:0f:9c:4c:d0:34:25:bd:1a:cf:dc:1c:73:d8:6a:60:
97:87:1d:65:7b:ad:4c:82:cd:91:7f:85:4e:40:0d:70:b5:47:
5e:04:67:a8:2a:f9:80:37:1d:9f:15:3b:05:70:45:6d:49:e9:
ae:82:ff:da:d6:33:e9:6b:27:68:3c:61:0a:7f:9d:bd:98:28:
ca:77:08:39
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcbodrn746muiFwYTn343IpoYVUcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDIyMDM0WhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYzljMWI2NDM3OWRkMDYzZTYxMzU1MjkwZjIwNzdjZDRj
Y2EwYjBkZTdhNGJjMTk0ODA0NDA0NjMxNzk4YzgzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0VESZcFWaswWzmXrQnRoQJhQQNhP+e5pgNSbj/2mynOPf
vQvtoxdy0Al099HRA74HhhAsdGDOV1nGlLfJWp22AiXOBRKWD6U+CAuMiutC65/Q
sWIeCSjl9nQZZisgsW4/Sz15u8CSXL/xpyBvE1r13pPWX8bx59RLpb+9hCFZvYiK
wcAew5ygwOt0Yu7g7zHSfmEKGShSfII9RnFvxjfrylqR1qfX3hRrkjyGpHoWXnNc
ra9PZLL9qsyyeXQt2ej1mMoqj+Bf2SUwqMBNuypFyDeQD6kkKTBsXA7HlNqqY5KA
UNpJL8u/2MR7Lnp1foPoEM/SEsAtSKRfr1UaQiP7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFiQkuihNqOKu1xw1ZcE3OIwKpIkwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzlhNDhjY2E1LTEwMWUtNDllMS1iNjQ0LTk4YzM1ZWI2ODFmYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUSWAAwDQYJKoZIhvcNAQELBQADggEBAH5pG4cLQaSFM63j3HzADghiLwpv
O02bJjIbXg922yhvdY55lNcuN+9zhNc/waJtQOERLnbVriWBwInKUTRHwkAB4ecf
7eRF2YtzW+DuhsFfOcnLDaK2dRdKc59lVOs74NUKxpEPBPr7ls+33c5f0fAnLIlH
nyhk62tsfnWwHM9nHWokpox26ZfMnAERyLHa5bmxsh70n6ckwO8+n5PrQb1qalS9
98A4wAq+wNbaomlp2HP9C0ayrg+cTNA0Jb0az9wcc9hqYJeHHWV7rUyCzZF/hU5A
DXC1R14EZ6gq+YA3HZ8VOwVwRW1J6a6C/9rWM+lrJ2g8YQp/nb2YKMp3CDk=
-----END CERTIFICATE-----
Generated at Thu Feb 26 02:05:47 2026 by rpki-client