
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca5dc612-7f10-43e7-93ca-ef4d4b8e4811.roa
File: ca5dc612-7f10-43e7-93ca-ef4d4b8e4811.roa (raw, json)
Hash identifier: 1lf/lHJ8tLeN8m7MlgTctOXeAkIqRwmpxwKU0HLr99c=
Subject key identifier: D8:35:BB:87:19:3C:7E:90:8B:01:26:63:EA:41:5F:1E:61:99:E6:07
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7F635E59050275B6FE6158B5D0D356B69AEAC4C2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca5dc612-7f10-43e7-93ca-ef4d4b8e4811.roa
Signing time: Tue 24 Feb 2026 03:00:11 +0000
ROA not before: Tue 24 Feb 2026 03:00:11 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.204.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:63:5e:59:05:02:75:b6:fe:61:58:b5:d0:d3:56:b6:9a:ea:c4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 24 03:00:11 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=2ac168881e0956f93049833c5d5282297113fd329edb553bf624332f8bad218a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:09:45:3e:60:6e:24:04:bf:aa:54:3a:39:c8:
6a:f7:d3:63:44:d3:c0:66:06:35:18:7f:47:a8:8f:
8e:12:09:33:27:fa:cf:82:20:98:f1:24:21:7f:66:
cf:42:fe:4a:34:7b:d4:4f:12:35:f5:dd:70:20:77:
88:c5:1d:56:2f:43:c6:78:ce:b9:27:d7:fd:82:36:
8e:89:48:2a:40:28:ba:ce:f8:6c:a8:12:48:13:9f:
cf:2d:b7:c6:6b:21:09:3b:73:5c:d3:50:77:5c:51:
d0:6d:a9:b5:41:b5:2f:0a:ff:b2:8c:29:d4:65:32:
83:8e:ec:ed:02:41:ec:41:64:db:61:1b:99:25:f2:
19:33:0b:90:92:d5:e8:db:d9:06:55:a3:ae:6c:d9:
0b:7c:7c:dc:f2:81:c2:13:3c:24:91:1a:9e:08:02:
fe:29:15:ac:37:86:f7:9b:a9:4b:e6:44:6a:e2:cb:
4d:f9:06:a1:7a:53:79:cc:18:ca:d2:c5:a3:60:f4:
c8:5c:d1:b3:7a:3e:31:60:a8:1f:e6:e6:d0:37:96:
b1:8f:e4:a8:64:30:14:c1:bb:3c:7a:05:8b:84:4a:
05:fa:51:f1:c4:91:4f:d2:c8:f9:63:17:0f:8b:40:
6e:6b:f9:56:74:8a:8d:6e:f2:71:a9:cf:72:fe:33:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:35:BB:87:19:3C:7E:90:8B:01:26:63:EA:41:5F:1E:61:99:E6:07
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ca5dc612-7f10-43e7-93ca-ef4d4b8e4811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.204.64.0/18
Signature Algorithm: sha256WithRSAEncryption
03:51:6d:48:63:53:ae:73:1a:9a:61:5b:b3:a4:1d:35:68:a4:
a2:a2:28:d3:14:c9:12:58:f4:2e:40:2d:3c:7c:68:ab:05:6c:
b2:03:8d:39:78:44:e8:ba:43:38:c7:36:7e:1e:71:9d:fa:4d:
fe:6f:5d:90:31:83:f6:cc:c6:fa:68:04:6c:c9:7e:5f:36:9e:
6b:d8:50:3c:41:4f:05:4c:23:4b:f9:f4:99:b7:a7:a8:1e:df:
e4:42:2c:7f:b2:92:42:f5:43:00:d9:9f:b2:f5:29:9d:61:6a:
f5:c9:7e:6e:d7:28:52:2c:d1:99:42:a7:75:f2:20:72:c2:ea:
2f:33:7f:60:4a:4f:e0:78:08:a1:d0:73:38:da:65:a4:21:b3:
62:89:06:0b:bc:f0:8f:9c:20:fc:0b:b6:ea:24:5a:5c:e3:4e:
c0:12:05:6a:0d:2c:ef:23:8d:9d:4d:39:82:c1:13:04:5a:5e:
95:06:fa:9b:03:1e:79:5b:b9:de:89:cd:2f:df:03:2e:5c:47:
11:45:f7:28:a1:87:67:3d:29:57:71:e1:6c:30:f1:45:1a:49:
12:30:db:5f:19:b4:b3:73:17:05:24:a3:f5:19:68:69:4a:36:
25:19:9e:83:72:be:14:ec:0a:c7:b7:d9:ad:0c:79:9e:41:a3:
59:11:2e:4c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf2NeWQUCdbb+YVi10NNWtprqxMIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI0MDMwMDExWhcNMjYwNTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYWMxNjg4ODFlMDk1NmY5MzA0OTgzM2M1ZDUyODIyOTcx
MTNmZDMyOWVkYjU1M2JmNjI0MzMyZjhiYWQyMThhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDwCUU+YG4kBL+qVDo5yGr302NE08BmBjUYf0eoj44SCTMn
+s+CIJjxJCF/Zs9C/ko0e9RPEjX13XAgd4jFHVYvQ8Z4zrkn1/2CNo6JSCpAKLrO
+GyoEkgTn88tt8ZrIQk7c1zTUHdcUdBtqbVBtS8K/7KMKdRlMoOO7O0CQexBZNth
G5kl8hkzC5CS1ejb2QZVo65s2Qt8fNzygcITPCSRGp4IAv4pFaw3hvebqUvmRGri
y035BqF6U3nMGMrSxaNg9Mhc0bN6PjFgqB/m5tA3lrGP5KhkMBTBuzx6BYuESgX6
UfHEkU/SyPljFw+LQG5r+VZ0io1u8nGpz3L+M9FfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2DW7hxk8fpCLASZj6kFfHmGZ5gcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2NhNWRjNjEyLTdmMTAtNDNlNy05M2NhLWVmNGQ0YjhlNDgxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY2zEAwDQYJKoZIhvcNAQELBQADggEBAANRbUhjU65zGpphW7OkHTVopKKi
KNMUyRJY9C5ALTx8aKsFbLIDjTl4ROi6QzjHNn4ecZ36Tf5vXZAxg/bMxvpoBGzJ
fl82nmvYUDxBTwVMI0v59Jm3p6ge3+RCLH+ykkL1QwDZn7L1KZ1havXJfm7XKFIs
0ZlCp3XyIHLC6i8zf2BKT+B4CKHQczjaZaQhs2KJBgu88I+cIPwLtuokWlzjTsAS
BWoNLO8jjZ1NOYLBEwRaXpUG+psDHnlbud6JzS/fAy5cRxFF9yihh2c9KVdx4Www
8UUaSRIw218ZtLNzFwUko/UZaGlKNiUZnoNyvhTsCse32a0MeZ5Bo1kRLkw=
-----END CERTIFICATE-----
Generated at Thu Feb 26 02:05:13 2026 by rpki-client